Strix
Strix runs autonomous AI agents that act like penetration testers: they exercise running code, find vulnerabilities, and validate each one with a working proof-of-concept exploit rather than a static-analysis guess.
It ships a full reconnaissance, exploitation and validation toolkit, coordinates teams of agents that collaborate on a target, and produces developer-facing findings with remediation guidance plus automatically generated patches and compliance-ready reports. Stated use cases include application security testing, rapid penetration tests, bug-bounty research automation, and CI/CD pipelines that block a pull request until vulnerabilities are addressed.
The open-source path runs locally with Docker and the user's own LLM API key; a hosted Strix Cloud option adds validated findings, one-click autofix pull requests and continuous scanning with no local setup, and a separate Enterprise tier adds SSO, VPC or self-hosted deployment and compliance-ready reporting for standards such as SOC 2, ISO 27001 and PCI DSS.
Python, Apache-2.0.