Tool
strix
usestrix/strix
What it is
An autonomous penetration-testing agent system. Teams of agents probe an application, run its code dynamically and try to confirm each finding with a working proof of concept.
Who it might suit
Developers and security teams who want automated vulnerability testing, including runs in a pull request pipeline.
What to check first
Its agents run code, use a shell and attempt real exploits, so it is for testing only systems the reader owns or has written permission to test. One README example passes login credentials inside the instruction text. Paid cloud and enterprise editions are offered.
How it runs
Command-line tool, CI integration
Written