{
 "schema_version": 1,
 "generated": "2026-10-24",
 "repo": "usestrix/strix",
 "name": "strix",
 "owner": "usestrix",
 "slug": "usestrix-strix",
 "github": "https://github.com/usestrix/strix",
 "what": "Strix is an open-source Python tool that uses autonomous AI agents to run penetration tests on your code and deployed apps, validate vulnerabilities with proof-of-concept exploits, and suggest fixes.",
 "why": "71k stars, picked up by one AI source we track",
 "language": "Python",
 "requirements": [
  "Docker installed and running",
  "An LLM API key from a supported provider, or a ChatGPT Plus/Pro subscription sign-in",
  "The application source directory or a target URL you are authorized to test",
  "A GitHub repository with Actions enabled, if you want the CI workflow"
 ],
 "audience_note": "Developers and security teams who want automated pentesting of their own applications, with a CI option for pull requests.",
 "risk": "dual-use",
 "section": "earlier",
 "weekly_rank": null,
 "category": "Security and science",
 "url": "https://dedupedai.com/use-cases/usestrix-strix/",
 "use_case_count": 5,
 "use_cases": [
  {
   "id": "usestrix-strix--scan-app-for-vulnerabilities",
   "title": "Scan your app for exploitable vulnerabilities",
   "best": true,
   "url": "https://dedupedai.com/use-cases/usestrix-strix/scan-app-for-vulnerabilities/",
   "json": "https://dedupedai.com/use-cases/u/usestrix-strix/scan-app-for-vulnerabilities.json"
  },
  {
   "id": "usestrix-strix--block-insecure-pull-requests",
   "title": "Block insecure code in pull requests",
   "best": false,
   "url": "https://dedupedai.com/use-cases/usestrix-strix/block-insecure-pull-requests/",
   "json": "https://dedupedai.com/use-cases/u/usestrix-strix/block-insecure-pull-requests.json"
  },
  {
   "id": "usestrix-strix--test-api-from-openapi-spec",
   "title": "Test every API endpoint from its OpenAPI spec",
   "best": false,
   "url": "https://dedupedai.com/use-cases/usestrix-strix/test-api-from-openapi-spec/",
   "json": "https://dedupedai.com/use-cases/u/usestrix-strix/test-api-from-openapi-spec.json"
  },
  {
   "id": "usestrix-strix--run-authenticated-grey-box-test",
   "title": "Run a logged-in grey-box test of your web app",
   "best": false,
   "url": "https://dedupedai.com/use-cases/usestrix-strix/run-authenticated-grey-box-test/",
   "json": "https://dedupedai.com/use-cases/u/usestrix-strix/run-authenticated-grey-box-test.json"
  },
  {
   "id": "usestrix-strix--have-coding-agent-fix-findings",
   "title": "Let a coding agent run pentests and fix findings",
   "best": false,
   "url": "https://dedupedai.com/use-cases/usestrix-strix/have-coding-agent-fix-findings/",
   "json": "https://dedupedai.com/use-cases/u/usestrix-strix/have-coding-agent-fix-findings.json"
  }
 ],
 "disclaimer": "Third-party repos we don't own or vouch for. AI-generated use cases can be wrong: review everything and run at your own risk."
}