chore: change license to AGPL-3.0

Dockerfile

@@ -1,6 +1,3 @@
-# This Source Code Form is subject to the terms of the Mozilla Public
-# License, v. 2.0. If a copy of the MPL was not distributed with this
-# file, You can obtain one at https://mozilla.org/MPL/2.0/.
 #
 # Multi-stage Dockerfile for Pentest Agent
 # Uses Chainguard Wolfi for minimal attack surface and supply chain security

README.md

@@ -61,7 +61,7 @@ Shannon is available in two editions:
 
 | Edition | License | Best For |
 |---------|---------|----------|
-| **Shannon Lite** | MPL | Security teams, independent researchers, testing your own applications |
+| **Shannon Lite** | AGPL-3.0 | Security teams, independent researchers, testing your own applications |
 | **Shannon Pro** | Commercial | Enterprises requiring advanced features, CI/CD integration, and dedicated support |
 
 > **This repository contains Shannon Lite,** which utilizes our core autonomous AI pentesting framework. **Shannon Pro** enhances this foundation with an advanced, LLM-powered data flow analysis engine (inspired by the [LLMDFA paper](https://arxiv.org/abs/2402.10754)) for enterprise-grade code analysis and deeper vulnerability detection.
@@ -433,7 +433,13 @@ Shannon is designed for legitimate security auditing purposes only.
 
 ## 📜 License
 
-Shannon Lite is released under the [Mozilla Public License 2.0 (MPL)](LICENSE).
+Shannon Lite is released under the [GNU Affero General Public License v3.0 (AGPL-3.0)](LICENSE).
+
+Shannon is open source (AGPL v3). This license allows you to:
+- Use it freely for all internal security testing.
+- Modify the code privately for internal use without sharing your changes.
+
+The AGPL's sharing requirements primarily apply to organizations offering Shannon as a public or managed service (such as a SaaS platform). In those specific cases, any modifications made to the core software must be open-sourced.
 
 
 ## 👥 Community & Support

SHANNON-PRO.md

@@ -6,7 +6,7 @@
 
 ### Feature Comparison
 
-| Feature | Shannon Lite<br>(MPL 2.0) | Shannon Pro<br>(Commercial) |
+| Feature | Shannon Lite<br>(AGPL-3.0) | Shannon Pro<br>(Commercial) |
 |---------|:-------------------------:|:---------------------------:|
 | **Core Scanning** |
 | Source-Sink Analysis | Basic | LLM-powered data flow analysis for high-precision, source-to-sink vulnerability detection |

mcp-server/src/index.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Shannon Helper MCP Server

mcp-server/src/tools/generate-totp.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * generate_totp MCP Tool

mcp-server/src/tools/save-deliverable.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * save_deliverable MCP Tool

mcp-server/src/types/deliverables.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Deliverable Type Definitions

mcp-server/src/types/index.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Type definitions barrel export

mcp-server/src/types/tool-responses.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Tool Response Type Definitions

mcp-server/src/utils/error-formatter.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Error Formatting Utilities

mcp-server/src/utils/file-operations.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * File Operations Utilities

mcp-server/src/validation/queue-validator.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Queue Validator

mcp-server/src/validation/totp-validator.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * TOTP Validator

prompts/exploit-auth.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/exploit-authz.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/exploit-injection.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/exploit-ssrf.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/exploit-xss.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/exploit-auth.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/exploit-authz.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/exploit-injection.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/exploit-ssrf.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/exploit-xss.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/pre-recon-code.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/recon.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/report-executive.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/vuln-auth.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/vuln-authz.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/vuln-injection.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/vuln-ssrf.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pipeline-testing/vuln-xss.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/pre-recon-code.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/recon.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/report-executive.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/shared/_exploit-scope.txt

@@ -1,3 +1,5 @@
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
+# This section above is metadata and not part of the prompt.
 **MANDATORY EXPLOITATION CONSTRAINTS:**
 - ALL exploitation attempts MUST be performed against {{WEB_URL}} from external network
 - DO NOT attempt to exploit vulnerabilities that require:

prompts/shared/_rules.txt

@@ -1,2 +1,4 @@
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
+# This section above is metadata and not part of the prompt.
 Rules to Avoid:
 {{RULES_AVOID}}

prompts/shared/_target.txt

@@ -1 +1,3 @@
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
+# This section above is metadata and not part of the prompt.
 URL: {{WEB_URL}}

prompts/shared/_vuln-scope.txt

@@ -1 +1,3 @@
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
+# This section above is metadata and not part of the prompt.
 **EXTERNAL ATTACKER SCOPE:** Only report vulnerabilities exploitable via {{WEB_URL}} from the internet. Exclude findings requiring internal network access, VPN, or direct server access.

prompts/shared/login-instructions.txt

@@ -1,3 +1,5 @@
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
+# This section above is metadata and not part of the prompt.
 <!-- BEGIN:COMMON -->
 **IF you are not already logged in when you open playwright, these are the login instructions** 
 **NOTE: playwright automatically saves sessions so ensure you are not already logged in before executing these steps**

prompts/vuln-auth.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/vuln-authz.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/vuln-injection.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/vuln-ssrf.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

prompts/vuln-xss.txt

@@ -1,4 +1,4 @@
-# This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0
+# This Source Code Form is subject to the terms of the AGPL, v. 3.0
 # This section above is metadata and not part of the prompt.
 === PROMPT ===
 

scripts/export-metrics.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 #!/usr/bin/env node
 

shannon.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env zx
-
+// Copyright (C) 2025 Keygraph, Inc.
-// This Source Code Form is subject to the terms of the Mozilla Public
+//
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+// This program is free software: you can redistribute it and/or modify
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// it under the terms of the GNU Affero General Public License version 3
-
+// as published by the Free Software Foundation.
 
 import { path, fs } from 'zx';
 import chalk from 'chalk';

src/ai/claude-executor.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { $, fs, path } from 'zx';
 import chalk from 'chalk';

src/audit/audit-session.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Audit Session - Main Facade

src/audit/index.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Unified Audit & Metrics System

src/audit/logger.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Append-Only Agent Logger

src/audit/metrics-tracker.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Metrics Tracker

src/audit/utils.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Audit System Utilities

src/checkpoint-manager.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { fs, path, $ } from 'zx';
 import chalk from 'chalk';

src/cli/command-handler.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import chalk from 'chalk';
 import {

src/cli/input-validator.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { fs, path } from 'zx';
 

src/cli/prompts.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { createInterface } from 'readline';
 import { PentestError } from '../error-handling.js';

src/cli/ui.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import chalk from 'chalk';
 import { displaySplashScreen } from '../splash-screen.js';

src/config-parser.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { fs } from 'zx';
 import yaml from 'js-yaml';

src/constants.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { path, fs } from 'zx';
 import chalk from 'chalk';

src/error-handling.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import chalk from 'chalk';
 import { fs, path } from 'zx';

src/phases/pre-recon.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { $, fs, path } from 'zx';
 import chalk from 'chalk';

src/phases/reporting.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { fs, path } from 'zx';
 import chalk from 'chalk';

src/progress-indicator.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import chalk from 'chalk';
 

src/prompts/prompt-manager.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { fs, path } from 'zx';
 import chalk from 'chalk';

src/queue-validation.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { fs, path } from 'zx';
 import { PentestError } from './error-handling.js';

src/session-manager.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { fs, path } from 'zx';
 import chalk from 'chalk';

src/setup/environment.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { $, fs, path } from 'zx';
 import chalk from 'chalk';

src/splash-screen.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import figlet from 'figlet';
 import gradient from 'gradient-string';

src/tool-checker.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { $ } from 'zx';
 import chalk from 'chalk';

src/utils/concurrency.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 /**
  * Concurrency Control Utilities

src/utils/git-manager.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { $ } from 'zx';
 import chalk from 'chalk';

src/utils/metrics.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import chalk from 'chalk';
 import { formatDuration } from '../audit/utils.js';

src/utils/output-formatter.js

@@ -1,6 +1,8 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
+// Copyright (C) 2025 Keygraph, Inc.
-// License, v. 2.0. If a copy of the MPL was not distributed with this
+//
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+// This program is free software: you can redistribute it and/or modify
+// it under the terms of the GNU Affero General Public License version 3
+// as published by the Free Software Foundation.
 
 import { AGENTS } from '../session-manager.js';
 

xben-benchmark-results/XBEN-001-24/audit-logs/session.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "session": {

xben-benchmark-results/XBEN-001-24/deliverables/auth_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": [

xben-benchmark-results/XBEN-001-24/deliverables/authz_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": [

xben-benchmark-results/XBEN-001-24/deliverables/injection_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-001-24/deliverables/ssrf_exploitation_queue.json

@@ -1,5 +1,2 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {"vulnerabilities": []}

xben-benchmark-results/XBEN-001-24/deliverables/xss_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-002-24/audit-logs/session.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "session": {

xben-benchmark-results/XBEN-002-24/deliverables/auth_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": [

xben-benchmark-results/XBEN-002-24/deliverables/authz_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": [

xben-benchmark-results/XBEN-002-24/deliverables/injection_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-002-24/deliverables/ssrf_exploitation_queue.json

@@ -1,5 +1,2 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {"vulnerabilities": []}

xben-benchmark-results/XBEN-002-24/deliverables/xss_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-003-24/audit-logs/session.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "session": {

xben-benchmark-results/XBEN-003-24/deliverables/auth_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": [

xben-benchmark-results/XBEN-003-24/deliverables/authz_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": [

xben-benchmark-results/XBEN-003-24/deliverables/injection_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-003-24/deliverables/ssrf_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-003-24/deliverables/xss_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": [

xben-benchmark-results/XBEN-004-24/audit-logs/session.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "session": {

xben-benchmark-results/XBEN-004-24/deliverables/auth_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-004-24/deliverables/authz_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-004-24/deliverables/injection_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-004-24/deliverables/ssrf_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": []

xben-benchmark-results/XBEN-004-24/deliverables/xss_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": [

xben-benchmark-results/XBEN-005-24/audit-logs/session.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "session": {

xben-benchmark-results/XBEN-005-24/deliverables/auth_exploitation_queue.json

@@ -1,6 +1,3 @@
-// This Source Code Form is subject to the terms of the Mozilla Public
-// License, v. 2.0. If a copy of the MPL was not distributed with this
-// file, You can obtain one at https://mozilla.org/MPL/2.0/.
 
 {
   "vulnerabilities": [