Strix Open-Source Tool Uses AI Agents to Pentest Your App Before Deployment

Strix is a free, open-source security tool that deploys autonomous AI agents to actively attack a running instance of your application, mimicking real-world penetration testing. Unlike static analysis or dependency scanners, Strix spins up the app in a Docker sandbox and attempts to exploit vulnerabilities rather than just flagging suspicious code patterns. It uses a multi-agent architecture where specialized agents work in parallel, covering issues such as SQL injection, access control flaws, XSS, business logic bugs, and infrastructure misconfigurations. Each reported vulnerability includes a working proof-of-concept exploit, reducing false positives that plague traditional SAST tools. Strix supports major LLM providers including OpenAI, Anthropic, and Google, and can target local directories, GitHub repositories, or remote URLs with a single command.