strix

Overview

Strix is an open-source AI penetration testing tool published on GitHub. It uses autonomous AI penetration testing agents that run code dynamically, find vulnerabilities, and validate them through actual proofs-of-concept, rather than relying on static analysis. The project describes itself as an open-source AI pentesting tool whose autonomous AI hackers find and fix an application's vulnerabilities. The tool ships with a full pentesting toolkit covering reconnaissance, exploitation, and validation, along with multi-agent orchestration in which teams of AI pentesters collaborate and scale. Other stated capabilities include real exploit validation with working proofs-of-concept, a developer-first CLI with remediation guidance, and auto-fix and reporting that generates patches and compliance-ready pentest reports. The stated audience is developers and security teams who need fast, accurate security testing without the overhead of manual pentesting or the false positives of static analysis tools. Strix can be run in several ways: as open source software that runs locally with Docker and the user's own LLM key, through Strix Cloud, or as an Enterprise deployment with SSO, compliance-ready reports, and VPC or self-hosted options. Scans write results to disk under strix_runs/<run-name> and can be opened in a local web viewer with the strix view command. The CLI also supports a headless, non-interactive mode for servers and automated jobs, and can be added to CI/CD pipelines such as GitHub Actions.