Shodan

Codeman is a self-hosted web dashboard for running and monitoring AI coding agents. It launches Claude Code, OpenCode, Codex, Antigravity, Gemini, Pi, or Grok in persistent tmux sessions, with an optional plain shell, and streams their terminals to a browser. Sessions persist across restarts and network drops; idle detection can re-prompt agents, resume them after usage limits reset, and run scheduled jobs, while live floating windows show background agents and subagents. The dashboard is designed for touch devices and includes local echo, QR login, swipe navigation, and push notifications. It can run locally, in Docker, or over SSH, is MIT licensed, runs on the user's machine by default, and states that it has no telemetry.

DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI. It uses an architecture in which everything is a plugin and is powered by Cordis, whose design is described in “A Programming Paradigm for Spatiotemporal Composability.” The npm package can launch a local Web UI with `npx @deepseek-ai/dsh web`, serving at `http://127.0.0.1:3080` by default and opening the default browser; it can also be built and run from a repository checkout. The project is in developer preview and warns that compatibility-breaking changes may occur. It is licensed under the MIT License, with third-party dependencies and their licenses documented separately.

Shannon is an open-source autonomous AI penetration-testing tool developed by Keygraph for web applications and APIs. It analyzes source code to map architecture, trust boundaries, data flows, interfaces, dependencies, and potential attack paths, then combines those candidates with live reconnaissance and specialized testing for injection, XSS, SSRF, authentication, and authorization. Exploitation agents use browser automation and command-line tools against a running application to produce reproducible proof-of-concept attacks; candidates that cannot be demonstrated are discarded, so only exploited vulnerabilities become findings. Shannon runs locally from the command line or in CI/CD, including GitHub Actions and GitLab CI/CD, and can test deployed staging or development environments on pull-request, release, or scheduled workflows. It produces evidence-rich PDF and Markdown reports plus JSON and SARIF 2.1.0 output, supports authenticated testing and resumable workspaces, and can gate a pipeline on proven vulnerabilities at configured severity levels. The open-source edition runs in an ephemeral Docker worker, mounts the target repository read-only, stores results locally, and uses credentials supplied for a selected model provider or compatible local endpoint. Shannon is licensed under AGPL-3.0. It actively executes exploits and may mutate application state, so the project requires authorization and recommends sandboxed, staging, or local environments rather than production systems.

Klaat Code is an open-source, terminal-native AI coding agent from KlaatAI. It reads and edits project files, runs shell commands, performs type checks after edits, and asks for permission before risky operations. It supports planning, sub-agents, MCP, hooks, and skills, and indexes projects into a code knowledge graph containing symbols, callers, callees, and semantic-search data for targeted exploration. Its hosted Klaatu-o1 router classifies each request and dispatches it across six model-cost tiers—nano, fast, code, reason, heavy, and titan—rather than using one model for every task. The CLI is a thin client to this service; the repository states that routing decisions, model health tracking, pricing, and the code-graph index run server-side. It supports providers and models including Claude, GPT, Gemini, and DeepSeek, and can be installed with npm.

OpenCode is an open-source AI coding agent developed by anomalyco. It is used as a terminal-based coding agent and external coding harness, with a beta desktop application also available. The CLI includes a full-access build agent for development work and a read-only plan agent for code analysis and exploration; the plan agent denies file edits by default and asks permission before running shell commands. OpenCode also provides a general subagent for complex searches and multistep tasks, and can be installed through its shell installer, package managers, or platform-specific desktop packages.