Open-source AI hackers to find and fix your app’s vulnerabilities
Strix is an open-source AI security project whose skills teach an agent to pentest and harden software, including web apps, REST, GraphQL and gRPC APIs, source repositories and CI pipelines. Strix's skills cover running managed scans on the app.strix.ai platform, testing against the OWASP Top 10, and triaging, patching and re-testing vulnerabilities such as injection, XSS, SSRF, broken access control and IDOR. The skills stand out for requiring working proof-of-concept exploits rather than static-analysis findings, and for verifying each fix by re-running the attack.
Strix
9 skills · 74,108 stars · Apache-2.0
Api Security Testing Security-test a REST, GraphQL, or gRPC API with Strix — autonomous agents that enumerate endpoint…
Application Security Testing Application security testing (AppSec) across a whole product with Strix — decide which asset need…
Ci Security Scanning With Strix Add security scanning to CI/CD with Strix — GitHub Actions, GitLab CI, or any pipeline — so every…
Find Security Vulnerabilities In Code Find security vulnerabilities in a codebase or repository with Strix — a white-box AI security re…
Fix Security Vulnerabilities With Strix Fix security vulnerabilities found by a Strix pentest (open-source CLI or app.strix.ai cloud) — t…
Managed Pentesting With Strix Run a managed pentest of a web app, API, repository, or local workspace on the app.strix.ai platf…
Owasp Top 10 Testing Test an application against the OWASP Top 10 with Strix — autonomous AI agents that attempt real…
Penetration Testing With Strix Pentest a web app, API, codebase, repository, URL, domain, or IP with Strix — autonomous AI penet…
Web App Penetration Testing Pentest a web app or website end to end — black-box testing of a live URL, staging environment, o…