From 2239cee6953bfaeb4cdeaefb5f97a7e116cae5d9 Mon Sep 17 00:00:00 2001 From: keygraphVarun Date: Tue, 7 Oct 2025 12:49:33 -0700 Subject: [PATCH] Create SHANNON-PRO.md --- SHANNON-PRO.md | 47 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 SHANNON-PRO.md diff --git a/SHANNON-PRO.md b/SHANNON-PRO.md new file mode 100644 index 0000000..82e5675 --- /dev/null +++ b/SHANNON-PRO.md @@ -0,0 +1,47 @@ +# Shannon Pro vs Shannon Lite + +## Technical Differences + +**Shannon Pro** is built on advanced, LLM-powered data flow analysis inspired by the ideas of the [LLM-driven Data-Flow Analysis paper](https://arxiv.org/abs/2402.10754). It traces data flows to identify complex, exploitable vulnerabilities with high precision. It's cloud-based with native CI/CD integration (GitHub Actions, GitLab CI, Jenkins) and supports self-hosted deployment. + +### Feature Comparison + +| Feature | Shannon Lite
(BSL 1.1) | Shannon Pro
(Commercial) | +|---------|:-------------------------:|:---------------------------:| +| **Core Scanning** | +| Source-Sink Analysis | Basic | LLM-powered data flow analysis for high-precision, source-to-sink vulnerability detection | +| CVSS Scoring | ❌ | ✅ | +| Remediation Guidance | Basic | Code-level fixes | +| **Integration** | +| CI/CD Pipeline Support | ❌ | ✅ | +| API Access | ❌ | ✅ | +| Jira/Linear/ServiceNow/Slack | ❌ | ✅ | +| **Deployment** | +| Hosting | Self-hosted | Cloud or Self-hosted | +| **Enterprise** | +| Multi-user & RBAC | ❌ | ✅ | +| SSO/SAML | ❌ | ✅ | +| Audit Logs | ❌ | ✅ | +| Compliance Reporting | ❌ | ✅ (OWASP, PCI-DSS, SOC2) | +| **Support** | +| Support | Community | Dedicated + SLA | +| **Cost** | Free + API costs | Contact Us | + +## Which to Choose? + +**Shannon Lite**: Individual researchers, small teams, or testing personal projects +**Shannon Pro**: Designed for organizations that want to "shift-left" and integrate security directly into their development lifecycle. Its _advanced LLM-powered data flow analysis engine_ is ideal for catching deep-seated vulnerabilities before they ever reach production, complemented by full CI/CD integration and enterprise support. + +## Interested in Shannon Pro? + +Shannon Pro offers enterprise-grade features, dedicated support, and seamless CI/CD integration for organizations serious about application security. + +

+ + Express Interest + +

+ +**Or contact us directly:** + +📧 **Email**: [shannon@keygraph.io](mailto:shannon@keygraph.io)