# Strix

Strix runs autonomous AI agents that act like penetration testers: they exercise running code, find vulnerabilities, and validate each one with a working proof-of-concept exploit rather than a static-analysis guess.

It ships a full reconnaissance, exploitation and validation toolkit, coordinates teams of agents that collaborate on a target, and produces developer-facing findings with remediation guidance plus automatically generated patches and compliance-ready reports. Stated use cases include application security testing, rapid penetration tests, bug-bounty research automation, and CI/CD pipelines that block a pull request until vulnerabilities are addressed.

The open-source path runs locally with Docker and the user's own LLM API key; a hosted Strix Cloud option adds validated findings, one-click autofix pull requests and continuous scanning with no local setup, and a separate Enterprise tier adds SSO, VPC or self-hosted deployment and compliance-ready reporting for standards such as SOC 2, ISO 27001 and PCI DSS.

Python, Apache-2.0.

Website: https://strix.ai