Plain-AyI
← All projects
AI agents

Strix

AI agents that test your own app for security weaknesses and suggest fixes.

New this week

What it does

Strix runs a team of AI agents that act like security testers: they run your app, look for weaknesses and check whether each one is real, so you get fewer false alarms than older scanners.

It reports what it found with steps to reproduce each problem and suggested fixes. It can run automatically each time code changes, to catch problems before they go live.

The open-source version runs on your own computer with your own AI account. The makers also sell a hosted version with extra features.

Who it's for

Developers and security teams testing apps they own or are allowed to test.

Can I use it without coding?

Developers only. It's run from the terminal and needs Docker and an AI provider key. New to this? Start here.

Can I run it?

Cost
Free, with optional paid extrasThe open-source version is free; the makers also sell a hosted or pro version.
Runs on
Mac, Linux, Windows
Computer
An ordinary computer is fine
Privacy
Sends what you give it to an online service
API key
Needed. An API key is a password-like code from an online AI service. What's that?

Try it

Using Claude Code, Cursor or another AI coding assistant? Paste the prompt and it will walk you through the setup.New to this?

Before you install

  • Only download from the official GitHub page. Copies with similar names exist for many popular projects.
  • License (Apache-2.0): Permissive: free to use, change and share, including for business.
  • Keep your API key private. Never paste it into websites or share it, and set a spending limit with the AI service.
  • What you type or upload is sent to an online service. Avoid sharing private or sensitive information.
  • More on staying safe

Where people are talking about it