Strix: Test app vulnerabilities and get repair guidance

What it does

Strix automates penetration testing: checking an application by attempting to exploit security weaknesses. Its AI testing workers run code dynamically and try to validate findings with proofs of concept, meaning working demonstrations of a flaw. The command-line tool provides findings with repair guidance, while its reporting and repair features can generate patches and penetration-test reports.

How to use it

Open the repository's quick start, have Docker running and supply an API key from a supported language-model provider. Follow the installation and first-scan instructions to test your application. The initial run downloads the sandbox Docker image automatically. Scan results are saved locally for inspection, with findings and remediation guidance as the useful output.

Common use cases

• Test an application and receive vulnerability findings backed by exploit demonstrations.
• Connect testing to pull requests so detected vulnerabilities can block insecure changes before production.
• Use detected security findings to generate repair patches and a penetration-test report.