Repository Index

Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.

• penetration-testing
• pentesting
• security-audit
• security-automation

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

• owasp
• javascript
• vulnerable
• hacking

The AI Agent for Cyber Security.

• ai-agent
• ai-security
• appsec
• bug-bounty

A collection of higher-level reusable cdk constructs

• aws
• cdk
• slack
• github

Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF

• owasp
• ctf
• ctfd
• application-security

Open detection-rule standard for AI agent security threats — like Sigma, but for AI agents. Executable, testable rules for prompt injection, tool poisoning, context exfiltration and MCP attacks. Merged into open-source projects at Microsoft, Cisco, Gen Digital, MISP and FINOS. MIT-licensed.

• agent-security
• ai-security
• llm-security
• mcp-security

Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.

• aws
• firewall
• governance
• waf