What ShakerScan is, and why it exists.
ShakerScan is an open-source security testing platform for web applications, APIs, AI systems, and network-connected devices. It runs locally in Docker and provides a web UI, REST API, CLI, persistent findings, evidence, repeatable Scan workflows, and AI-assisted Hunt workflows.
ShakerScan exists because automated scanners and AI agents are good at different things. Scanners are repeatable but blind to context. Agents adapt but need boundaries, tools, and evidence before their conclusions can be trusted. ShakerScan puts both inside one self-hosted workspace with a shared record of findings, proof, and testing history.
Open-source model
The platform is developed in the open under the GNU Affero General Public License v3.0. Releases are built once from an exact source revision, published as immutable multi-architecture Docker Hub images with build attestations and signed SBOM indexes, and promoted to the stable installer channel only after a public smoke test. Issues, pull requests, release notes, and the security policy live in the repository.
Engineering philosophy
Deterministic testing plus adaptive investigation
Scan gives repeatable coverage. Hunt gives adaptive investigation through the coding agent you already use. Both write to one record of findings and evidence, and both sit inside the same authorization boundary.
Evidence over labels
A finding label, an HTTP status, or an AI statement is not exploit proof. ShakerScan keeps proof state separate from severity and promotes a finding to Verified only through deterministic verification.
Coverage is reported, not assumed
Reports separate observed risk from how much planned work actually ran. Incomplete coverage is stated, so a clean-looking result is never mistaken for a complete one.
Explicit authorization
Active testing is off by default and requires explicit confirmation. Active Hunt capabilities need a target-bound approval that is revalidated on every call. Connected-device work carries safety profiles and a health circuit breaker.
Your environment, your data
ShakerScan runs in Docker on infrastructure you control, binds to localhost by default, and sends no telemetry. Optional AI-assisted steps use the agent or model provider you configure; image pulls, DNS-over-HTTPS fallback, and optional threat-intel lookups also reach outside services.
Responsible use
Only test systems you own or are explicitly authorized to assess. Active testing can change application state, generate significant traffic, and trigger defenses. ShakerScan is a trusted-operator system: keep its UI and API private, treat results and evidence as sensitive, and review scope before every active test. It automates and assists security work; it does not replace expert judgment or a scoped penetration test.