Strix

Strix Overview

Strix are autonomous AI penetration testing agents that act just like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts. Built for developers and security teams who need fast, accurate security testing without the overhead of manual pentesting or the false positives of static analysis tools.

Full Pentesting Toolkit

Reconnaissance, exploitation, and validation out of the box with a comprehensive offensive security toolkit.

Multi-Agent Orchestration

Teams of AI pentesters that collaborate and scale for comprehensive security coverage.

Real Exploit Validation

Working PoCs, not false positives like legacy vulnerability scanners.

Developer-First CLI

Actionable findings with remediation guidance integrated into your workflow.

Auto-Fix & Reporting

Generate patches and compliance-ready pentest reports automatically.

Use Cases

Application Security Testing

Detect and validate critical vulnerabilities in your applications with AI-powered scanning.

Rapid Penetration Testing

Get penetration tests done in hours, not weeks, with compliance reports.

Bug Bounty Automation

Automate bug bounty research and generate PoCs for faster reporting.

CI/CD Integration

Run tests in CI/CD to block vulnerabilities before reaching production.

🚀 Quick Start

Get started with Strix in minutes. Just install, configure your AI provider, and run your first security assessment.

Prerequisites:

✓ Docker (running)
✓ An LLM API key from any supported provider (OpenAI, Anthropic, Google, etc.)

Installation & First Scan:

            # Install Strix
curl -sSL https://strix.ai/install | bash

# Configure your AI provider
export STRIX_LLM="openai/gpt-5.4"
export LLM_API_KEY="your-api-key"

# Run your first security assessment
strix --target ./app-directory
        

First run automatically pulls the sandbox Docker image. Results are saved to strix_runs/<run-name>

☁️ Strix Platform

Try the Strix full-stack penetration testing platform at app.strix.ai - sign up for free, connect your repos and domains, and launch a pentest in minutes.

Validated Findings with PoCs

Every vulnerability includes a working proof-of-concept exploit and reproduction steps.

One-Click Autofix

AI-generated security patches as ready-to-merge pull requests.

Continuous Pentesting

Always-on vulnerability scanning that keeps pace with your deployments.

DevSecOps Integrations

GitHub, GitLab, Bitbucket, Slack, Jira, Linear, and CI/CD pipelines.

Continuous Learning

AI that builds on past findings, adapts to your codebase, and reduces false positives over time.

Start your first pentest →

✨ Features

Agentic Pentesting Tools

HTTP Interception Proxy

Full request/response manipulation and analysis with Caido.

Browser Exploitation

Automated browser for testing XSS, CSRF, clickjacking, and auth bypass flows.

Shell & Command Execution

Interactive terminal for exploit development and post-exploitation.

Custom Exploit Runtime

Python sandbox for writing and validating proof-of-concept exploits.

Reconnaissance & OSINT

Automated attack surface mapping, subdomain enumeration, and fingerprinting.

Static & Dynamic Code Analysis

SAST + DAST capabilities for comprehensive application security testing.

Comprehensive Vulnerability Scanner

Broken Access Control

IDOR, privilege escalation, auth bypass

Injection Attacks

SQL injection, NoSQL injection, OS command injection, SSTI

Server-Side Vulnerabilities

SSRF, XXE, insecure deserialization, RCE

Client-Side Attacks

XSS (stored/reflected/DOM), prototype pollution, CSRF

Business Logic Flaws

Race conditions, payment manipulation, workflow bypass

Authentication & Session

JWT attacks, session fixation, credential stuffing vectors

Usage Examples

                # Scan a local codebase
strix --target ./app-directory

# Security review of a GitHub repository
strix --target https://github.com/org/repo

# Black-box web application assessment
strix --target https://your-app.com
            

                # Grey-box authenticated testing
strix --target https://your-app.com --instruction "Perform authenticated testing using credentials: user:pass"

# Multi-target testing (source code + deployed app)
strix -t https://github.com/org/app -t https://your-app.com

# White-box source-aware scan
strix --target ./app-directory --scan-mode standard

# Focused testing with custom instructions
strix --target api.your-app.com --instruction "Focus on business logic flaws and IDOR vulnerabilities"

# Provide detailed instructions through file
strix --target api.your-app.com --instruction-file ./instruction.md

# Force PR diff-scope against a specific base branch
strix -n --target ./ --scan-mode quick --scope-mode diff --diff-base origin/main
            

                # Run Strix programmatically without interactive UI
strix -n --target https://your-app.com

# The CLI prints real-time vulnerability findings
# and the final report before exiting
# Exits with non-zero code when vulnerabilities are found
            

                name: strix-penetration-test

on:
  pull_request:

jobs:
  security-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

      - name: Install Strix
        run: curl -sSL https://strix.ai/install | bash

      - name: Run Strix
        env:
          STRIX_LLM: ${{ secrets.STRIX_LLM }}
          LLM_API_KEY: ${{ secrets.LLM_API_KEY }}

        run: strix -n -t ./ --scan-mode quick
            

In CI pull request runs, Strix automatically scopes quick reviews to changed files. If diff-scope cannot resolve, ensure checkout uses full history (fetch-depth: 0) or pass --diff-base explicitly.