usestrix/strix

Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

About the project

Strix is an open-source penetration-testing tool that uses autonomous AI agents to inspect applications, exploit vulnerabilities, and validate findings with working proofs of concept. Developers and security teams use it for application security testing, bug-bounty research, remediation guidance, reporting, and automated checks in development pipelines.

Latest release v1.7.0 · 5 Oct 2026

1 file for Codex and OpenCode: strix AGENTS.md — 1,861 tokens loaded in every session.

72,157Stars on the repository
1Files it configures its agents with
1,861Tokens loaded in every session
2Agents configured

Instructions

These files are usestrix/strix's own configuration — they tell Codex and OpenCode how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.