HomeProjectsArticlesPK BoardAbout
Explore Projects

Strix

Active
GitHub Python Apache-2.0

Description

Strix is an open-source AI penetration testing agent that automatically finds and fixes web app vulnerabilities, an automation aide for security teams.

Key Features

  • AI-driven — agent runs recon, vuln detection, exploitation, and reporting
  • Web-first — purpose-built for web application security testing
  • Open-source and extensible — tools can be customized and extended
  • Auto-reporting — vuln details, repro steps, and remediation suggestions
  • Sandboxed — exploits run in isolation
  • Integrations — works with OWASP ZAP and Burp Suite

Use Cases

💡 Running automated web pentests in CI
💡 Generating structured reports for security audits
💡 Augmenting secure-code reviews
💡 Providing a platform for red-team training

Strengths & Limitations

✅ Strengths

  • • Actively maintained, recent updates
  • • High community interest (60.2k stars)
  • • Permissive open-source license (Apache-2.0)
  • • Responsive to issues, low backlog

Tags

security pentest agent vulnerability

Categories

🛡️ Security & Guardrails

Quick Start

pip install strix
strix scan --target https://example.com
# report at ./strix-report.html
Visit GitHub Visit Website

Related Projects

OpenShell

8.5k · Rust
Active A

OpenShell is the safe, private runtime for autonomous AI agents, developed by NVIDIA. Provides controlled execution environments and resource management.

rustagentframework +2
  • · Sandboxed execution environments protecting data, credentials, and infrastructure with declarative YAML policies
  • · Four defense-in-depth layers: filesystem, network, process, and inference policy enforcement
  • · Hot-reloadable network and inference policies via `openshell policy set` without restarting sandboxes
View full details → View on GitHub

DeepCamera

3.0k · JavaScript
Normal A

Open-Source AI Camera Skills Platform, AI NVR & CCTV Surveillance. LLM-powered agentic security camera agent with pluggable AI skills. Runs on Mac Mini & AI PC.

javascriptagenttools +3
  • · VLM scene analysis and object detection running locally with Qwen, DeepSeek, SmolVLM
  • · 19+ pluggable AI skills across detection, segmentation, annotation, and training
  • · Auto-detection of GPU/NPU/CPU hardware with TensorRT, CoreML, OpenVINO acceleration
View on GitHub

AgentGateway

4.7k · Rust
Active A

Next generation agentic proxy for AI agents and MCP servers. Provides unified traffic management, routing, and security control.

rustmcpagent +3
  • · Unified LLM gateway with OpenAI-compatible API routing to OpenAI, Anthropic, Gemini, Bedrock and more
  • · MCP gateway with tool federation, stdio/HTTP/SSE transports, OpenAPI integration and OAuth authentication
  • · A2A gateway enabling secure agent-to-agent communication with capability discovery and task collaboration
View on GitHub

Archestra

4.2k · TypeScript
Active A

Enterprise AI Platform with guardrails, MCP registry, gateway and orchestrator — comprehensive AI agent governance and management.

typescriptmcpsecurity +2
  • · Kubernetes-native MCP orchestrator — runs MCP servers in K8s managing state, API keys, and OAuth centrally
  • · Private MCP registry with governance — share self-hosted and third-party MCPs across your organization
  • · Non-probabilistic security engine preventing data exfiltration via tool guardrails and the Lethal Trifecta defense
View on GitHub