• Picks
  • Discover
  • Alternatives
  • About

© 2026 Willet

  • Newsletter
  • About
  • FAQ
  • Terms
  • Privacy & Cookies
Join the Discord (opens in a new tab)
Strix avatar

Strix

AI agents that pentest your app and confirm bugs with working exploits

  • Security testing and OSINT
  • AI apps
View on GitHub
Website

What it is

Strix is a command-line tool that runs teams of LLM-driven agents inside a Docker sandbox to probe an application, attempt exploits, and confirm each finding with a proof of concept. It produces remediation guidance, suggested patches, and pentest reports, and can run in CI to scan pull requests. Developers and security teams use it to get quick security assessments of their own code and web apps, and bug bounty hunters use it to automate research, all with their own LLM API key.

Images

Facts

Stars
70,328 GitHub stars.
70,328

Forks
7,851
Commits
932
Contributors
73
Language
Python
License
Apache-2.0
Last commit
Oct 20, 2026
On GitHub since
August 2025
First release
November 2025
Platforms
macOS, Linux, CLI
Self-hostable
No
Alternative to
Burp Suite
Tags
  • multi-agent
  • penetration-testing
  • ci-cd
  • ai-agents
  • vulnerability-scanning

Last synced from GitHub on Oct 20, 2026

The 10 best overlooked open-source projects, every Monday.

Share and more

Comments

No comments yet. Start the conversation.

Similar projects

  • Keygraph avatar

    Shannon

    Finds and proves web app and API vulnerabilities with real exploits

    49.1k
  • Netw0rkNoob avatar

    VulnClaw

    AI agent that runs authorized penetration tests from plain language

    3.8k
  • Google avatar

    OSV-Scanner

    Dependency and container vulnerability scanner backed by OSV.dev

    11.2k

What people are saying

Updated Oct 21, 2026
  • Hacker NewsOpen Source Isn't DeadApr 15, 2026 · 356 points · 186 comments (opens Hacker News in a new tab)
  • Hacker NewsShow HN: Strix - Open-source AI hackers for your appsAug 18, 2025 · 102 points · 15 comments (opens Hacker News in a new tab)
  • Hacker NewsShow HN: Enter your domain and my open-source agent will hack itAug 12, 2025 · 14 points · 3 comments (opens Hacker News in a new tab)
  • Bluesky“Found Strix. OSS AI agent that attacks your own app. Looked good. Then I learned attackers used it to breach 27+ companies in 6 days Pointed it at a…”Oct 7, 2026 · 2 likes · 0 replies (opens Bluesky in a new tab)
  • Bluesky“Open source AI pentester.”Sep 2, 2026 · 2 likes · 0 replies (opens Bluesky in a new tab)
  • Hacker NewsStrix: Autonomous Security PlatformJul 28, 2026 · 2 points · 0 comments (opens Hacker News in a new tab)
  • Bluesky“RE: I know y'all hate AI but (and others) can do it at scale and w/local or cheaper open weights models”Sep 30, 2026 · 1 like · 0 replies (opens Bluesky in a new tab)
  • Bluesky“— Tiene buena pinta este proyecto para pentesting GitHub - usestrix/strix: Open-source AI penetration testing tool to find and fix your app’s vulnerabilities…”Jul 19, 2026 · 1 like · 0 replies (opens Bluesky in a new tab)
  • Bluesky“GitHub - usestrix/strix: Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.”Oct 9, 2026 · 0 likes · 0 replies (opens Bluesky in a new tab)
  • Bluesky“[AUTO] I read this. usestrix/strix: Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.”Oct 6, 2026 · 0 likes · 0 replies (opens Bluesky in a new tab)
  • Bluesky“Did you expect AI hackers that break into your app, then auto-patch the holes they find—all without human help? usestrix/strix”Aug 14, 2026 · 0 likes · 0 replies (opens Bluesky in a new tab)