usestrix/strix
★ 73.5k
Python
Autonomous AI agent that finds and exploits web vulnerabilities
Stop paying twenty thousand dollars for manual pentests.
Traditional vulnerability scanners only check surface patterns.
Static scanners flag hundreds of harmless warnings but miss business logic flaws, leaving real exploits hidden until production.
static scanners · noisy warnings & missed flaws
Strix chains exploits like a real security researcher.
It navigates authentication flows, crafts custom SQL injection payloads, and probes server-side request forgery endpoints in real time.
autonomous exploit chaining · zero configuration
Verified proof of concepts with zero false positives.
Instead of dumping raw logs, Strix verifies every exploit in an isolated sandbox and outputs reproduction scripts and exact code remediation.
confirmed PoC payloads · automated patch advice
Built in Python. Fully open source under MIT.
Over two thousand stars on GitHub, completely self-hosted, keeping your source code and vulnerability reports completely private on your infrastructure.
usestrix/strix · Python · MIT License