# usestrix/strix

> Open-source AI pentesting tool: autonomous agents run your code, find vulnerabilities, and validate them with working PoCs. For developers and security teams needing fast testing without manual pentests or static-analysis false positives.

- Magnitude: 3.7 out of 10 — Steady
- Stars: 64,922 total · +53 stars today, ≈ 131 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Python · License: Apache-2.0 · Created: 2025-08-05 · Last push: 2026-09-25
- GitHub: https://github.com/usestrix/strix · Homepage: https://strix.ai · Page: https://gitnova.dev/en/r/usestrix/strix

## Useful for

- Run a pentest of a local app directory via CLI with Docker and your own LLM key
- Add vulnerability scanning to GitHub Actions and block insecure code in pull requests
- Automate bug bounty research by finding vulnerabilities and generating PoCs for reports

## Why it’s here

- 53 stars so far today, about 131 expected by the end of the day.
- GitHub Trending Python today: #14, +208 stars.
- About 28 forks a day — people are taking the code.
- Recent forks include notable developers: @h4x0r-dz (861 followers).

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 7,115
- Issues and pull requests: 1,322
- Watchers: 290
- Average over the last week: 189 per day
- Usual pace: 249 per day
- Stars in the last hour (measured): 8
- Latest release: v1.6.2 (2026-09-05)

## Stars per day, last 30 days (oldest → newest, today is partial)

2026-08-28 … 2026-09-26: 226, 210, 221, 222, 244, 229, 219, 182, 181, 213, 182, 254, 190, 192, 208, 175, 163, 208, 355, 265, 297, 196, 150, 181, 185, 178, 183, 240, 222, 53

## Spotted in now

- GitHub Trending Python today: #14, +208 stars

## Similar by description

1. **openai/codex-security** — 1.4 · Steady · Security · TypeScript · +2 stars today, ≈ 6 by evening
   OpenAI's CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in code, and for drafting SECURITY.md security policy.
   Full card: https://gitnova.dev/en/r/openai/codex-security.md
2. **Armur-Ai/Pentest-Swarm-AI** — 2.3 · Steady · Security · Go · +1 star today, ≈ 8 by evening
   Open-source XBOW alternative: an autonomous API and web-app pentester where dozens of AI agents run recon, exploitation, and reporting in parallel via a shared blackboard. For pentesters, bug bounty hunters, and red teamers.
   Full card: https://gitnova.dev/en/r/Armur-Ai/Pentest-Swarm-AI.md
3. **projectdiscovery/nuclei** — 2.2 · Steady · Security · Go · +5 stars today, ≈ 15 by evening
   A vulnerability scanner driven by YAML templates that checks applications, APIs, networks, DNS and cloud configurations for known vulnerabilities. Community-contributed templates mimic real-world exploitation steps to reduce false…
   Full card: https://gitnova.dev/en/r/projectdiscovery/nuclei.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-09-26 12:21 UTC, updated every 30 minutes.