Strix

What it does

Strix runs autonomous agents that act like real attackers. They run your code dynamically, look for vulnerabilities, and validate each finding with a proof of concept.

Why it is useful

• Far fewer false positives than static scanners.
• Multi-agent recon, exploitation and validation run in parallel.
• Plugs into GitHub Actions to block insecure pull requests.

How to use it

Run the install script from the README, then point Strix at an app you own. It is also available as a skill: npx skills add usestrix/strix.

Watch out for

• Only test systems you own or have written permission to test.