{"id":"254a68fe-d8b9-46a7-b1ff-e263e81d572c","kind":"products","code":"UB-D7866","name":"Keygraph","nameBasis":"original-brand","summary":"[Product introduction] Keygraph \"Agentic static analysis\" combined with \"automatic penetration test\" can not only scan the code, but also automatically attack the running application. Its core principle is “no PoC without reporting”, and the system only outputs high-confidence vulnerabilities that are verified by real attacks and have reproducible proof-of-concept. In addition to the deep integration mode, it also offers a “black box test” mode where users simply provide a URL to allow the AI to navigate and execute attacks autonomously like a human penetration tester. [Product Features] Intelligent Code Attribute Diagram Analysis: Converts code into CpG structure, and uses LLM to evaluate whether specific desensitization logic can truly defend against specific attacks, significantly reducing false positives. Thirteen professional agents: Built-in 13 dedicated agents, covering five stages of pre-scouting, automated attack surface mapping, vulnerability analysis, and empirical attacks. Parallel exploit system: For OWASP core categories such as SQL injection, XSS, SSRF and Authz, the 5 group parallel agent tries to inject the real payload. Multi-Dimensional Permission Testing: Supports configuring multiple sets of credentials to automatically test vertical and horizontal privilege escalation across organizations, roles (IDOR","description":"[Product introduction] Keygraph \"Agentic static analysis\" combined with \"automatic penetration test\" can not only scan the code, but also automatically attack the running application. Its core principle is “no PoC without reporting”, and the system only outputs high-confidence vulnerabilities that are verified by real attacks and have reproducible proof-of-concept. In addition to the deep integration mode, it also offers a “black box test” mode where users simply provide a URL to allow the AI to navigate and execute attacks autonomously like a human penetration tester. [Product Features] Intelligent Code Attribute Diagram Analysis: Converts code into CpG structure, and uses LLM to evaluate whether specific desensitization logic can truly defend against specific attacks, significantly reducing false positives. Thirteen professional agents: Built-in 13 dedicated agents, covering five stages of pre-scouting, automated attack surface mapping, vulnerability analysis, and empirical attacks. Parallel exploit system: For OWASP core categories such as SQL injection, XSS, SSRF and Authz, the 5 group parallel agent tries to inject the real payload. Multi-Dimensional Permission Testing: Supports configuring multiple sets of credentials to automatically test vertical and horizontal privilege escalation across organizations, roles (IDOR","country":null,"category":"Coding assistants","originalName":"Keygraph","eventDate":null,"website":null,"sourceUpdatedAt":"2026-11-02T17:00:20.917Z","englishUpdatedAt":"2026-11-04T01:06:52.065Z","reviewedAt":"2026-11-04T01:06:52.065Z","snapshotAt":"2026-11-04T00:48:01.362Z","sourceHash":"be190588d152140874188819bdf332124c687e2ae51e1d5b957a0d3559ee3a6b","companyId":"071f91b5-7cf2-43f8-b29b-3e54d084b541","foundedYear":null,"logoUrl":null,"originalText":"【产品介绍】Keygraph “Agentic 静态分析” 与 “自主动态渗透测试” 相结合，不仅能扫描代码，还能自动攻击运行中的应用。其核心原则是 “无 PoC 不报告”，系统仅输出经过真实攻击验证、具有可复现证明（Proof-of-Concept）的高置信度漏洞。除了深度集成模式，它还提供 “黑盒测试” 模式，用户仅需提供 URL 即可让 AI 像人类渗透测试员一样自主导航并执行攻击。【产品功能】智能代码属性图分析：将代码转化为 CPG 结构，利用 LLM 评估特定脱敏逻辑是否真正能防御特定攻击，显著降低误报。十三位专业 Agent 协同：内置 13 个专用智能体，覆盖预侦察、自动化攻击面映射、漏洞分析及实证攻击等五个阶段。并行漏洞利用系统：针对 SQL 注入、XSS、SSRF 及越权（Authz）等 OWASP 核心类别，由 5 组并行 Agent 尝试真实 Payload 注入。多维权限测试：支持配置多组凭据，自动测试跨组织、跨角色的垂直及水平权限提升（IDOR）风险。","sources":[],"related":[{"id":"071f91b5-7cf2-43f8-b29b-3e54d084b541","kind":"companies","code":"UB-C12279","name":"Keygraph","nameBasis":"source-english","summary":"Continuous Agentic Pentesting for the Enterprise","description":"Continuous agentic pentesting for the enterprise. Vulnerabilities are validated with working exploits against your live app. Built by the team behind Shannon.","country":null,"category":null,"originalName":"Keygraph","eventDate":null,"website":"https://keygraph.io/","sourceUpdatedAt":"2026-10-26T00:00:00.000Z","englishUpdatedAt":"2026-11-01T02:03:52.258Z","reviewedAt":"2026-11-01T02:03:52.258Z","snapshotAt":"2026-11-01T00:40:31.077Z","sourceHash":"140a4b8c12a60f549d918af44ce9b8c0e41df6db30b67b4ca88c3204a1809441","companyId":null,"foundedYear":null,"logoUrl":null,"path":"/companies/keygraph"}],"path":"/products/keygraph","structured":{"city":null,"country":null,"location":null,"role":null,"category":"Coding assistants","company":{"name":"Keygraph","path":"/companies/keygraph"}},"definition":"Keygraph is a product in the Coding assistants category from Keygraph.","summaryBasis":"translated","thin":false,"canonical":"https://uniquebase.ai/products/keygraph"}