OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Agent Security & Sandboxing

Strix

Strix is an open-source AI penetration-testing tool built with autonomous agents to identify and help remediate application vulnerabilities. It is implemented in Python and supports Cloud, self-hosted and server environments.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Strix — OpenViST project profile in Agent Security & Sandboxing.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use Strix when application security needs to be integrated into development and code review. Its documented GitHub Actions and CI/CD integration makes pull-request scanning a specific supported workflow.

Who it is for

  • Development teams adding automated security checks to application workflows
  • Application-security teams performing vulnerability discovery and remediation
  • Teams using GitHub Actions or CI/CD pipelines for pull-request checks

Documented uses

  • Discover vulnerabilities in applications with autonomous AI agents
  • Help investigate and remediate identified application vulnerabilities
  • Scan pull requests as part of a CI/CD security workflow
  • Support AI-assisted bug-bounty or CTF testing workflows
Before you choose

Requirements & limits

The project is open source under the Apache-2.0 license. It is available as a public, active GitHub repository and is documented for Cloud, self-hosted and server environments.

  • Whether autonomous AI penetration testing fits the team’s application-security workflow
  • Need for GitHub Actions or CI/CD integration, including pull-request scanning
  • Preference for an open-source Python project licensed under Apache-2.0
  • Whether deployment should run in Cloud, self-hosted or server environments

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Add Strix vulnerability scanning to GitHub Actions pull requests

Run a Strix security test for pull requests in a GitHub Actions workflow.

Before you start

  • A GitHub repository using GitHub Actions
  • Docker-capable GitHub Actions runner configuration as documented by the workflow
  • STRIX_LLM and LLM_API_KEY repository secrets

Steps

  1. Create a workflow triggered by pull_request.

  2. Check out the repository with actions/checkout@v6 and fetch-depth: 0.

  3. Install Strix with the command below.

    Documented command
    curl -sSL https://strix.ai/install | bash

  4. Expose STRIX_LLM and LLM_API_KEY from repository secrets, then run strix.

Expected outcome

The workflow runs Strix as a pull-request security test; the documented integration is intended to identify vulnerabilities before production.

Guide limitations

  • The source does not document repository permissions, branch-protection configuration, or how to configure a specific blocking policy.
  • The source does not document runner costs, duration, or compatibility beyond the shown workflow.
Documentation 1 ↗Documentation 2 ↗
Evidence and transparency

Sources & review

Official repository ↗Guide documentation ↗
Source record details
Source availability
Active
Sources checked
30 September 2026
Original website title
usestrix/strix · Official homepage title · retained in its source language
How we review sourcesSuggest a correction