strix

Project Overview

Strix is an open-source AI penetration testing tool that uses autonomous AI hackers to dynamically run your code, find vulnerabilities, and validate them through actual proofs-of-concept. It is built for developers and security teams who need fast, accurate security testing without the overhead of manual pentesting or the false positives of static analysis tools.

Key Features

• Full pentesting toolkit: reconnaissance, exploitation, and validation out of the box
• Multi-agent orchestration: teams of AI pentesters that collaborate and scale
• Real exploit validation: working PoCs, not false positives
• Developer-first CLI: actionable findings with remediation guidance
• Auto-fix & reporting: generate patches and compliance-ready pentest reports
• CI/CD integration: automatically scan on every PR and block insecure code

Target Audience

• Developers who need fast security testing
• Security teams and penetration testers
• DevOps and DevSecOps engineers

Quick Start

1. Install Strix: curl -sSL https://strix.ai/install | bash
2. Configure your AI provider: export STRIX_LLM="openai/gpt-5.4" and export LLM_API_KEY="your-api-key"
3. Run your first security assessment: strix --target ./app-directory
4. Use from your coding agent: npx skills add usestrix/strix

Core Advantages

• Autonomous AI hackers that behave like real hackers
• Real PoCs instead of false positives
• One-click autofix with ready-to-merge PRs
• CI/CD integration to block insecure code in PRs

System Requirements

• OS: Cross-platform (requires Docker runtime)
• Additional Dependencies: Docker (running), LLM API key