{"id":"071f91b5-7cf2-43f8-b29b-3e54d084b541","kind":"companies","code":"UB-C12279","name":"Keygraph","nameBasis":"source-english","summary":"Continuous Agentic Pentesting for the Enterprise","description":"Continuous agentic pentesting for the enterprise. Vulnerabilities are validated with working exploits against your live app. Built by the team behind Shannon.","country":null,"category":null,"originalName":"Keygraph","eventDate":null,"website":"https://keygraph.io/","sourceUpdatedAt":"2026-10-26T00:00:00.000Z","englishUpdatedAt":"2026-11-01T02:03:52.258Z","reviewedAt":"2026-11-01T02:03:52.258Z","snapshotAt":"2026-11-01T00:40:31.077Z","sourceHash":"140a4b8c12a60f549d918af44ce9b8c0e41df6db30b67b4ca88c3204a1809441","companyId":null,"foundedYear":null,"logoUrl":null,"originalText":"Continuous Agentic Pentesting for the Enterprise\n\nContinuous agentic pentesting for the enterprise. Vulnerabilities are validated with working exploits against your live app. Built by the team behind Shannon.","sources":[],"related":[{"id":"254a68fe-d8b9-46a7-b1ff-e263e81d572c","kind":"products","code":"UB-D7866","name":"Keygraph","nameBasis":"original-brand","summary":"[Product introduction] Keygraph \"Agentic static analysis\" combined with \"automatic penetration test\" can not only scan the code, but also automatically attack the running application. Its core principle is “no PoC without reporting”, and the system only outputs high-confidence vulnerabilities that are verified by real attacks and have reproducible proof-of-concept. In addition to the deep integration mode, it also offers a “black box test” mode where users simply provide a URL to allow the AI to navigate and execute attacks autonomously like a human penetration tester. [Product Features] Intelligent Code Attribute Diagram Analysis: Converts code into CpG structure, and uses LLM to evaluate whether specific desensitization logic can truly defend against specific attacks, significantly reducing false positives. Thirteen professional agents: Built-in 13 dedicated agents, covering five stages of pre-scouting, automated attack surface mapping, vulnerability analysis, and empirical attacks. Parallel exploit system: For OWASP core categories such as SQL injection, XSS, SSRF and Authz, the 5 group parallel agent tries to inject the real payload. Multi-Dimensional Permission Testing: Supports configuring multiple sets of credentials to automatically test vertical and horizontal privilege escalation across organizations, roles (IDOR","description":"[Product introduction] Keygraph \"Agentic static analysis\" combined with \"automatic penetration test\" can not only scan the code, but also automatically attack the running application. Its core principle is “no PoC without reporting”, and the system only outputs high-confidence vulnerabilities that are verified by real attacks and have reproducible proof-of-concept. In addition to the deep integration mode, it also offers a “black box test” mode where users simply provide a URL to allow the AI to navigate and execute attacks autonomously like a human penetration tester. [Product Features] Intelligent Code Attribute Diagram Analysis: Converts code into CpG structure, and uses LLM to evaluate whether specific desensitization logic can truly defend against specific attacks, significantly reducing false positives. Thirteen professional agents: Built-in 13 dedicated agents, covering five stages of pre-scouting, automated attack surface mapping, vulnerability analysis, and empirical attacks. Parallel exploit system: For OWASP core categories such as SQL injection, XSS, SSRF and Authz, the 5 group parallel agent tries to inject the real payload. Multi-Dimensional Permission Testing: Supports configuring multiple sets of credentials to automatically test vertical and horizontal privilege escalation across organizations, roles (IDOR","country":null,"category":"Coding assistants","originalName":"Keygraph","eventDate":null,"website":null,"sourceUpdatedAt":"2026-11-02T17:00:20.917Z","englishUpdatedAt":"2026-11-04T01:06:52.065Z","reviewedAt":"2026-11-04T01:06:52.065Z","snapshotAt":"2026-11-04T00:48:01.362Z","sourceHash":"be190588d152140874188819bdf332124c687e2ae51e1d5b957a0d3559ee3a6b","companyId":"071f91b5-7cf2-43f8-b29b-3e54d084b541","foundedYear":null,"logoUrl":null,"path":"/products/keygraph"}],"finance":{"funding":{"metric":"funding","count":0,"latest":null,"years":[],"points":[],"linePoints":[],"conflictGroups":0,"omittedRecordCount":0,"records":[],"totalRaised":null},"valuation":{"metric":"valuation","count":0,"latest":null,"years":[],"points":[],"linePoints":[],"conflictGroups":0,"omittedRecordCount":0,"records":[]},"revenue":{"metric":"revenue","count":0,"latest":null,"years":[],"points":[],"linePoints":[],"conflictGroups":0,"omittedRecordCount":0,"records":[]}},"events":[],"team":[],"productsRelated":[{"id":"254a68fe-d8b9-46a7-b1ff-e263e81d572c","kind":"products","code":"UB-D7866","name":"Keygraph","nameBasis":"original-brand","summary":"[Product introduction] Keygraph \"Agentic static analysis\" combined with \"automatic penetration test\" can not only scan the code, but also automatically attack the running application. Its core principle is “no PoC without reporting”, and the system only outputs high-confidence vulnerabilities that are verified by real attacks and have reproducible proof-of-concept. In addition to the deep integration mode, it also offers a “black box test” mode where users simply provide a URL to allow the AI to navigate and execute attacks autonomously like a human penetration tester. [Product Features] Intelligent Code Attribute Diagram Analysis: Converts code into CpG structure, and uses LLM to evaluate whether specific desensitization logic can truly defend against specific attacks, significantly reducing false positives. Thirteen professional agents: Built-in 13 dedicated agents, covering five stages of pre-scouting, automated attack surface mapping, vulnerability analysis, and empirical attacks. Parallel exploit system: For OWASP core categories such as SQL injection, XSS, SSRF and Authz, the 5 group parallel agent tries to inject the real payload. Multi-Dimensional Permission Testing: Supports configuring multiple sets of credentials to automatically test vertical and horizontal privilege escalation across organizations, roles (IDOR","description":"[Product introduction] Keygraph \"Agentic static analysis\" combined with \"automatic penetration test\" can not only scan the code, but also automatically attack the running application. Its core principle is “no PoC without reporting”, and the system only outputs high-confidence vulnerabilities that are verified by real attacks and have reproducible proof-of-concept. In addition to the deep integration mode, it also offers a “black box test” mode where users simply provide a URL to allow the AI to navigate and execute attacks autonomously like a human penetration tester. [Product Features] Intelligent Code Attribute Diagram Analysis: Converts code into CpG structure, and uses LLM to evaluate whether specific desensitization logic can truly defend against specific attacks, significantly reducing false positives. Thirteen professional agents: Built-in 13 dedicated agents, covering five stages of pre-scouting, automated attack surface mapping, vulnerability analysis, and empirical attacks. Parallel exploit system: For OWASP core categories such as SQL injection, XSS, SSRF and Authz, the 5 group parallel agent tries to inject the real payload. Multi-Dimensional Permission Testing: Supports configuring multiple sets of credentials to automatically test vertical and horizontal privilege escalation across organizations, roles (IDOR","country":null,"category":"Coding assistants","originalName":"Keygraph","eventDate":null,"website":null,"sourceUpdatedAt":"2026-11-02T17:00:20.917Z","englishUpdatedAt":"2026-11-04T01:06:52.065Z","reviewedAt":"2026-11-04T01:06:52.065Z","snapshotAt":"2026-11-04T00:48:01.362Z","sourceHash":"be190588d152140874188819bdf332124c687e2ae51e1d5b957a0d3559ee3a6b","companyId":"071f91b5-7cf2-43f8-b29b-3e54d084b541","foundedYear":null,"logoUrl":null,"path":"/products/keygraph"}],"investors":[],"path":"/companies/keygraph","structured":{"city":null,"country":null,"location":null,"role":null,"category":null,"company":null},"definition":"Keygraph is a company.","summaryBasis":"translated","thin":false,"canonical":"https://uniquebase.ai/companies/keygraph"}