Keygraph

Keygraph is an application security platform that provides continuous, AI-driven (agentic) penetration testing for software applications. The platform automates both blackbox and whitebox penetration testing, using autonomous AI agents to discover, exploit, and report vulnerabilities across an organization's codebases and running applications. Core products and capabilities include: - Whitebox Pentester: source-code-aware automated penetration testing - Blackbox Pentester: external, unauthenticated or authenticated automated penetration testing - Business Logic Testing: automated testing of application-specific logic flaws - Agentic SAST (Static Application Security Testing): AI-driven static code analysis - SCA (Software Composition Analysis): dependency and open-source component vulnerability scanning - Secrets Scanning: detection of exposed credentials and secrets in code - Code Remediation: AI-generated fix suggestions delivered as pull requests to target repositories - Reporting & Analytics: centralized dashboard for tracking findings, SLA compliance, and risk over time The platform integrates with source code repositories (e.g., GitHub, GitLab) and surfaces findings with working proof-of-concept exploits, CVSS scores, EPSS data, and step-by-step reproduction instructions. Each finding can trigger an automated remediation workflow that opens a pull request with an AI-authored patch. Keygraph also maintains an open-source project called Shannon, which underpins parts of its agentic testing infrastructure. The company offers a community program providing free access to its continuous agentic pentest for early-stage startups and non-profits. Target customers include development and security teams seeking automated, continuous application security testing integrated into their software development lifecycle.