Strix is an open source autonomous AI penetration testing tool whose agents run your application dynamically, find vulnerabilities and validate them with working proofs-of-concept.
It targets developers and security teams who want fast pentests without the false positives of static scanners.
- 01
Multi-agent recon, exploitation and validation with real proofs-of-concept
- 02
Sandboxed toolkit with HTTP proxy, browser automation, shells and Python runtime
- 03
Auto-fix patches and compliance-ready pentest reports
- 04
GitHub Actions and CI scanning on every pull request
- 05
Agent skills for Claude Code, Cursor and Codex via `npx skills add usestrix/strix`
| ProEntry plan | $29 | one-time |
The Strix CLI is free and open source under Apache 2.0 with your own LLM key; the managed platform at app.strix.ai offers a Pro plan at $29 per seat per month with pentests billed separately, and custom Enterprise pricing.
Best for
Developers and security teams that want automated, exploit-validated pentests of web apps and APIs in local or CI workflows.
Not ideal for
Teams that only need lightweight static linting, or cannot run Docker-based sandboxes and LLM-driven testing against their targets.
The most popular open source AI pentesting agent, notable for validating findings with real exploits.
Strix released v1.6.0 through v1.6.2 between September 1 and September 5, 2026, and the repository passed 66,000 GitHub stars.
As of
Is Strix free?+
Strix is Freemium. The Strix CLI is free and open source under Apache 2.0 with your own LLM key; the managed platform at app.strix.ai offers a Pro plan at $29 per seat per month with pentests billed separately, and custom Enterprise pricing. Check the official site for current plans.
Is Strix open source?+
Yes - Strix is open source. The Strix CLI is free and open source under Apache 2.0 with your own LLM key; the managed platform at app.strix.ai offers a Pro plan at $29 per seat per month with pentests billed separately, and custom Enterprise pricing.
How much does Strix cost?+
The Strix CLI is free and open source under Apache 2.0 with your own LLM key; the managed platform at app.strix.ai offers a Pro plan at $29 per seat per month with pentests billed separately, and custom Enterprise pricing. Pricing changes often - verify on the official site.
Who is Strix best for?+
Developers and security teams that want automated, exploit-validated pentests of web apps and APIs in local or CI workflows.
Who is Strix not ideal for?+
Teams that only need lightweight static linting, or cannot run Docker-based sandboxes and LLM-driven testing against their targets.
What are the best Strix alternatives?+
The closest Strix alternatives on ai.dosa.dev are CodeRabbit, Qodo, Snyk Code - all listed under AI Code Review & Security.
Who makes Strix?+
Strix is developed by Strix. It is listed in the AI Code Review & Security category on ai.dosa.dev.
Favorite this tool to revisit it later, or Zap it to contribute to the public vote count.