ShakerScan
Install ShakerScan
Pinned to v2.5.4View source on GitHub Report an issue

ShakerScan

Open-source security testing for web applications, APIs, AI systems, and network-connected devices.

ShakerScan runs locally in Docker and provides a web UI, REST API, CLI, deterministic Scan, and agent-driven Hunt.

Test only systems you own or are explicitly authorized to assess.

Quick start

Install and start ShakerScan:

curl -fsSL https://install.shakerscan.com | sh

Then open:

Check the installation:

shakerscan status

Run a scan:

shakerscan scan https://app.example.test

For authorized active testing:

shakerscan scan https://app.example.test \
  --budget-profile thorough \
  --active-testing \
  --confirm-active

Use an AI agent

ShakerScan ships AGENTS.md and task skills for Codex, Claude Code, and OpenCode. Start an installed agent inside the ShakerScan runtime:

shakerscan agent codex
shakerscan agent claude
shakerscan agent opencode

The agent can drive Hunt, inspect findings, use saved credentials and request collections, and work through the same server-side authorization, scope, budget, evidence, and proof controls as the UI and CLI.

LAN server

To run the engine on one trusted machine and control it from another:

# engine machine
shakerscan start --lan

# laptop/client
pipx install shakerscan
shakerscan api --url http://192.168.1.50:8080 GET /health
shakerscan mcp --url http://192.168.1.50:8080

LAN mode does not add authentication or encryption. Fresh OSS installs remain localhost-only.

What to use

  • Scan — reproducible web/API assessment.
  • Hunt — adaptive investigation of an authorized web, API, network, or device target.
  • Connected Devices — inventory and assess network-connected devices.
  • AI Gate — test chat, RAG, agent, and MCP application surfaces.
  • Model Intake — inspect model artifacts before deployment.
  • ASM — maintain attack-surface inventory and coverage.

Documentation

Start with shakerscan --help, the UI, or the live API contracts:

shakerscan api GET /openapi.json
shakerscan api GET /scan/contracts
shakerscan api GET /hunts/contract

Engineering and architecture documentation is in the docs directory.

For agent behavior and product invariants, see AGENTS.md.

License

AGPL-3.0.

This page is rendered from README.md in the open-source repository at v2.5.4. When documentation and implementation disagree, the code, database schema, and tests at that tag are authoritative.