strix

Why we included this project

Strix runs autonomous AI agents that behave like real penetration testers against your own application. Where a conventional scanner just flags suspicious patterns, Strix actually executes the code, probes for exploitable weaknesses, and confirms each hit with a working proof-of-concept before it reports anything. That means the findings you get are things you can act on, not a pile of false positives to triage. It's a CLI you can run locally, and it plugs into CI/CD so every pull request gets checked before it ships. For a small team shipping web apps that can't justify a full-time pentester, this is a practical way to automate a meaningful chunk of security testing.