# ShakerScan

> ShakerScan is an open-source security testing platform for web applications, APIs, AI systems, and network-connected devices. It runs locally in Docker and provides a web UI, REST API, CLI, persistent findings, evidence, repeatable Scan workflows, and AI-assisted Hunt workflows.

Run repeatable security scans, investigate authorized targets with AI-assisted Hunt workflows, and review findings with evidence in a self-hosted open-source platform.

Open-source documentation in this build is pinned to [v2.10.0](https://github.com/andriyze/shakerscan/tree/v2.10.0).

## When to use ShakerScan

- Use Scan for repeatable testing of authorized web applications and APIs, with findings, evidence, coverage, and retests.
- Use Hunt for adaptive investigation with your existing Codex, Claude Code, OpenCode, or Pi session. ShakerScan controls scope, budgets, execution, and evidence.
- Use the free public posture check for DNS, email, HTTP, TLS, and IP-ownership observations. It returns facts without pass/fail scores and applies per-IP rate limits.
- Evaluate the self-hosted Enterprise public beta when you need single sign-on, roles, audit, and an offline licence.

## Install and connect

Install the self-hosted platform:

```sh
curl -fsSL https://install.shakerscan.com | sh
```

Open http://localhost:3000. Keep the engine UI and API private; the open-source release has no application login or tenant isolation.

Install the engine-less client and run a public posture check:

```sh
pipx install shakerscan
shakerscan check example.com
```

For MCP configuration and supported tool permissions, follow the [client guide](https://shakerscan.com/docs/open-source/client), [MCP adapter reference](https://shakerscan.com/docs/open-source/mcp), and [agent setup guide](https://shakerscan.com/docs/open-source/skills) for this release. The running engine serves its API schema at its own /openapi.json; shakerscan.com is the website, not a hosted scanning API.

## Product boundaries

Scan does not require AI. Hunt uses your configured coding agent. Only deterministic proof marks a finding verified. AI Gate and Model Intake are previews. Only test systems you own or are explicitly authorized to assess; active testing can change application state and generate traffic.

There is no hosted scanning product. The public posture check is separate from your self-hosted engine. ShakerScan assists security work and does not replace expert judgment or a scoped penetration test.

## Resources

- [Documentation](https://shakerscan.com/docs)
- [Open source and installation](https://shakerscan.com/open-source)
- [Product overview](https://shakerscan.com/product)
- [Free posture check](https://shakerscan.com/check/)
- [Enterprise](https://shakerscan.com/enterprise)
- [Contact](https://shakerscan.com/contact)
- [Security](https://shakerscan.com/security)
- [Legal and privacy](https://shakerscan.com/legal)
- [Agent guidance and index](https://shakerscan.com/llms.txt)