usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Open original source ↗

From the publisher

README & documentation

Source preview

Read the project’s overview, installation instructions and usage examples. The original README is the source of truth.

[](https://discord.gg/strix-ai) Strix are autonomous AI penetration testing agents that act just like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proofs-of-concept. Built for developers and security teams who need fast, accurate security testing without the overhead of manual pentesting or the false positives of static analysis tools. Key Capabilities: Prerequisites: Installed with pipx, uv, or pip? strix --update prints the matching upgrade command instead (pipx upgrade strix-agent, uv tool upgrade strix-agent, pip install --upgrade strix-agent). Strix also shows a notice with the right command when a new version is available. Try the Strix full-stack penetration testing platform at app.strix.ai - sign up for free, connect your repos and domains, and launch a pentest in minutes. Run a pentest → Get the same Strix experience with enterprise-grade controls: SSO (SAML/OIDC), custom compliance-ready penetration testing reports (SOC 2, ISO 27001, PCI DSS), dedicated support and…

usestrix/strix on GitHub A short preview, not the full document.

Read the full README ↗ · Preview checked 2026-10-30T17:53:57.415Z

Inside the original README — Document outline
  1. Strix
  2. The open-source AI pentesting tool. Autonomous AI hackers that find and fix your app’s vulnerabiliti
  3. Strix Overview
  4. Use Cases
  5. 🚀 Quick Start
  6. Installation & First Scan
  7. Updating
  8. Ways to Run Strix
  9. ☁️ Strix Cloud
  10. 🏢 Enterprise
  11. 🤖 Use Strix from Your Coding Agent
  12. ✨ Features

Headings are captured from the source. Links open the publisher’s document, not a locally hosted copy.

Links from the README

References supplied by the publisher, not independently verified endorsements. Check the destination before downloading files or entering credentials.

Documentation belongs to its respective authors. Reported project/model license: Apache-2.0. A listing is not a grant of reuse or training rights. Confirm the document’s own terms at the source.

What this repository does

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

Repository facts

Owner
usestrix
Primary language
Python
Stars
73,022
Forks
8,210
Open issues + pull requests
534
License
Apache-2.0
Archived
No
Default branch
main
Created
2025-08-05T21:28:30.000Z
Last push
2026-10-30T20:56:09.000Z

Topics and intended use

Owner-supplied topics: agents, ai-hacking, ai-penetration-testing, ai-pentesting, ai-security, artificial-intelligence, bug-bounty, code-quality, ctf-tools, cybersecurity, cybersecurity-tools, ethical-hacking, hacking, llm-security, offensive-security, penetration-testing, pentesting-tools, red-teaming, security, security-automation

Review the README for scope, installation, examples and limitations. We do not run repository code or certify it.

Evaluate before installing

Review licensing and dependencies, inspect recent commits and unresolved issues, and test in an isolated environment before production use. Stars and forks alone cannot answer these questions.

README and project files

Issues and maintenance discussion

Releases and changelog

Source and freshness

Source: GitHub. Metadata observed 2026-10-31T13:20:02.570Z. Daily imports are snapshots, not real-time monitoring.

Popularity and source listings do not establish security, suitability, licensing rights or benchmark performance.

Open original source

Related repositories

public-apis/public-apis

EbookFoundation/free-programming-books

donnemartin/system-design-primer

vinta/awesome-python

practical-tutorials/project-based-learning

NousResearch/hermes-agent