usestrix/strix

Strix The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabilities. Tip New! Strix integrates seamlessly with GitHub Actions and CI/CD pipelines. Automatically scan for vulnerabilities on every pull request and block insecure code before it reaches production - Get started with no setup required . Strix Overview Strix are autonomous AI penetration testing agents that act just like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proofs-of-concept. Built for developers and security teams who need fast, accurate security testing without the overhead of manual pentesting or the false positives of static analysis tools. Key Capabilities: Full pentesting toolkit - reconnaissance, exploitation, and validation out of the box Multi-agent orchestration - teams of AI pentesters that collaborate and scale Real exploit validation - working PoCs, not false positives like legacy vulnerability scanners Developer‑first CLI - actionable findings with remediation guidance Auto‑fix & reporting - generate patches and compliance-ready pentest reports Use Cases Application Security Testing - Detect and validate critical vulnerabilities in your applications Rapid Penetration Testing - Get penetration tests done in hours, not weeks, with compliance reports Bug Bounty Automation - Automate bug bounty research and generate PoCs for faster reporting CI/CD Integration - Run tests in CI/CD to block vulnerabilities before reaching production 🚀 Quick Start Prerequisites: Docker (running) An LLM API key from any supported provider (OpenAI, Anthropic, Google, etc.) Installation & First Scan # Install Strix curl -sSL https://strix.ai/install | bash # Configure your AI provider export STRIX_LLM= " openrouter/z-ai/glm-5.3 " export LLM_API_KEY= " your-api-key " # Run your first security assessment strix --target ./app-directory Note First run automatically pulls the sandbox Docker image. Results are saved to strix_runs/<run-name> Ways to Run Strix Open Source - free, runs locally with Docker and your own LLM key. Quick Start Strix Cloud - no setup, validated findings, one-click autofix, and PR reviews. Run a pentest → Enterprise - SSO, compliance-ready reports, VPC or self-hosted deployment. Try Strix Enterprise → ☁️ Strix Cloud Try the Strix full-stack penetration testing platform at app.strix.ai - sign up for free, connect your repos and domains, and launch a pentest in minutes. Validated findings with PoCs - every vulnerability includes a working proof-of-concept exploit and reproduction steps One-click autofix - AI-generated security patches as ready-to-merge pull requests Continuous pentesting - always-on vulnerability scanning that keeps pace with your deployments DevSecOps integrations - GitHub, GitLab, Bitbucket, Slack, Jira, Linear, and CI/CD pipelines Continuous learning - AI that builds on past findings, adapts to your codebase, and reduces false positives over time Run a pentest → 🏢 Enterprise Get the same Strix experience with enterprise-grade controls: SSO (SAML/OIDC), custom compliance-ready penetration testing reports (SOC 2, ISO 27001, PCI DSS), dedicated support and SLA, custom deployment options (VPC or self-hosted), BYOK model support, and tailored AI pentesting agents optimized for your environment. Try Strix Enterprise → 🤖 Use Strix from Your Coding Agent Strix is agent-ready. Give Claude Code, Cursor, Codex, or any SKILL.md-compatible agent the ability to run pentests, fix findings, and set up CI scanning: npx skills add usestrix/strix This installs nine skills for running pentests, fixing findings, and CI scanning, against code, web apps, APIs, and the OWASP Top 10. Agents can use the local CLI or the managed cloud with the same engine. See AGENTS.md for the quick reference, docs.strix.ai/llms.txt for the CLI, and docs.app.strix.ai for the API. ✨ Features Agentic Pentesting Tools Strix agents come equipped with a comprehensive offensive security toolkit - the same tools used by professional penetration testers and ethical hackers: HTTP Interception Proxy - Full request/response manipulation and analysis with Caido Browser Exploitation - Automated browser for testing XSS, CSRF, clickjacking, and auth bypass flows Shell & Command Execution - Interactive terminal for exploit development and post-exploitation Custom Exploit Runtime - Python sandbox for writing and validating proof-of-concept exploits Reconnaissance & OSINT - Automated attack surface mapping, subdomain enumeration, and fingerprinting Static & Dynamic Code Analysis - SAST + DAST capabilities for comprehensive application security testing Vulnerability Knowledge Base - Structured findings with CVSS scoring and OWASP classification Comprehensive Vulnerability Scanner Strix identifies, validates, and exploits a wide range of security vulnerabilities across the OWASP Top 10 and beyond: Broken Access Control - IDOR, privilege escalation, auth bypass Injection Attacks - SQL injection, NoSQL injection, OS command injection, SSTI Server-Side Vulnerabilities - SSRF, XXE, insecure deserialization, RCE Client-Side Attacks - XSS (stored/reflected/DOM), prototype pollution, CSRF Business Logic Flaws - Race conditions, payment manipulation, workflow bypass Authentication & Session - JWT attacks, session fixation, credential stuffing vectors Infrastructure & Cloud - Misconfigurations, exposed services, cloud security issues API Security - Broken authentication, mass assignment, rate limiting bypass Graph of Agents (Multi-Agent Pentesting) Advanced multi-agent orchestration for comprehensive automated penetration testing: Distributed Pentesting - Specialized AI agents for recon, exploitation, and post-exploitation Scalable Security Testing - Parallel execution across multiple targets for fast, comprehensive coverage Dynamic Coordination - Agents share discoveries, chain vulnerabilities, and collaborate like a red team 🖥️ Local Web Viewer Every scan writes its results to disk as it runs. Bring them up in a local dashboard with a single command: # Open the most recent run strix view # ...or open a specific run by name strix view my-run-name # Expose the viewer on all IPv4 interfaces at a fixed port strix view --host 0.0.0.0 --port 8080 --no-open The dashboard shows the findings, a live map of the agent team, and past runs. Nothing leaves your machine, and the UI ships prebuilt. strix view binds to 127.0.0.1 and prints a tokened link that grants access to the run, so share it carefully. See the viewer documentation for the options and for reaching the viewer from another machine. Usage Examples Basic Usage # Scan a local codebase strix --target ./app-directory # Security review of a GitHub repository strix --target https://github.com/org/repo # Black-box web application assessment strix --target https://your-app.com API Testing (OpenAPI / Swagger / Postman) Point Strix at an API contract and it tests every declared endpoint instead of having to discover them by crawling. Pair the spec with the live base URL so the agent knows where to send traffic: # OpenAPI / Swagger file, Postman export, or a live collection by id strix --target ./openapi.yaml --target https://api.your-app.com strix --target postman:// < collection-uuid > --target https://api.your-app.com Advanced Testing Scenarios # Grey-box authenticated testing strix --target https://your-app.com --instruction " Perform authenticated testing using credentials: user:pass " # Multi-target testing (source code + deployed app) strix -t https://github.com/org/app -t https://your-app.com # Targets from a file, one target per non-empty, non-comment line strix --target-list ./targets.txt See the CLI reference for every option, including scan modes, diff scope, instruction files, and budgets. Headless Mode Run Strix programmatically without interactive UI using the -n/--non-interactive flag - perfect for servers and automated jobs.