{"full_name":"usestrix/strix","owner":"usestrix","name":"strix","url":"https://github.com/usestrix/strix","description":"Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.","homepage":"https://strix.ai","topics":[],"language":"Python","license":"Apache-2.0","avatar":"https://avatars.githubusercontent.com/u/187630752?v=4","created_at":"2025-08-05T21:28:30Z","pushed_at":"2026-11-10T06:58:55Z","metrics":{"stars":74769,"forks":8461,"watchers":302,"issues":439,"prs":1202,"releases":30,"issues_open":null,"issues_closed":null,"prs_open":null,"prs_closed":null,"prs_merged":null,"discussions":0},"growth":{"day":{"stars":240,"forks":31,"base_day":"2026-11-09"},"week":{"stars":1396,"forks":197,"base_day":"2026-11-03"},"month":{"stars":8126,"forks":1153,"base_day":"2026-10-11"}},"history":{"dates":["2026-09-06","2026-09-07","2026-09-08","2026-09-09","2026-09-10","2026-09-11","2026-09-12","2026-09-13","2026-09-14","2026-09-15","2026-09-16","2026-09-17","2026-09-18","2026-09-19","2026-09-20","2026-09-21","2026-09-22","2026-09-23","2026-09-24","2026-09-25","2026-09-26","2026-09-27","2026-09-28","2026-09-29","2026-09-30","2026-10-01","2026-10-02","2026-10-03","2026-10-04","2026-10-05","2026-10-06","2026-10-07","2026-10-08","2026-10-09","2026-10-10","2026-10-11","2026-10-12","2026-10-13","2026-10-14","2026-10-15","2026-10-16","2026-10-17","2026-10-18","2026-10-19","2026-10-20","2026-10-21","2026-10-22","2026-10-23","2026-10-24","2026-10-25","2026-10-26","2026-10-27","2026-10-28","2026-10-29","2026-10-30","2026-10-31","2026-11-01","2026-11-02","2026-11-03","2026-11-04","2026-11-09","2026-11-10"],"stars":[57715,58117,58513,58819,58935,59073,59266,59917,60142,60374,60544,60712,61089,61292,61521,61691,61908,62066,62421,62639,63002,63261,63517,63684,63999,64185,64340,64544,64807,64995,65370,65558,65904,66123,66318,66643,66850,67059,67279,67508,67738,68148,68369,68563,68782,68995,69184,69985,70373,70747,71106,71391,71635,72096,72311,72540,72729,72920,73373,73555,74529,74769],"forks":[6274,6317,6375,6419,6437,6451,6471,6544,6582,6604,6623,6637,6686,6712,6736,6753,6779,6792,6836,6858,6882,6900,6936,6963,6997,7019,7040,7064,7095,7130,7179,7193,7223,7243,7269,7308,7330,7358,7386,7441,7498,7547,7581,7598,7628,7659,7676,7809,7836,7846,7908,7955,7996,8062,8099,8128,8160,8194,8264,8290,8430,8461],"watchers":[261,260,260,261,262,264,263,270,269,270,270,271,271,274,272,272,275,277,279,277,277,277,284,283,286,286,287,287,288,290,292,290,289,292,293,296,295,296,294,294,294,296,298,298,299,300,300,307,306,297,296,294,291,292,295,299,297,296,300,301,302,302],"issues_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"prs_open":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null]},"boards":{"daily":146,"weekly":95,"monthly":75,"monthly_rate":130},"same_owner":[],"issues":[{"number":1080,"title":"Support a fail-closed mount-free transport for local-code Docker scans","comments":9,"created_at":"2026-08-14T04:06:46Z"},{"number":109,"title":"MCP Support","comments":8,"created_at":"2025-11-17T03:51:13Z"},{"number":294,"title":"[BUG] Report generated during scan but not saved on exit (no .md file, exit with vulnerabilities to 0)","comments":7,"created_at":"2026-01-25T09:10:05Z"},{"number":478,"title":"Sandbox Initialization Failed","comments":6,"created_at":"2026-05-06T22:55:42Z"},{"number":580,"title":"[CLARIFICATION - ISSUES] strix with local models qwen3.6:35b-qwen3.5:35b thorugh Ollama throws JSON errors or tool not found errors","comments":5,"created_at":"2026-06-19T09:44:15Z"},{"number":106,"title":"[FEATURE] Can strix use podman next to docker please?","comments":5,"created_at":"2025-11-16T13:17:12Z"},{"number":1265,"title":"[FEATURE] Document a supported Windows installation path","comments":4,"created_at":"2026-09-04T08:56:50Z"},{"number":66,"title":"[FEATURE] Add support for Claude Code","comments":4,"created_at":"2025-11-08T21:14:19Z"}],"discussions":[],"latest_release":{"name":"v1.7.0","tag":"v1.7.0","published_at":"2026-10-05T02:39:14Z","body":"## What's Changed\n* fix(models): frontier model check matches the model name only, never the provider route by @0xallam in https://github.com/usestrix/strix/pull/1280\n* feat(reporting): link HTTP exchange evidence by @bearsyankees in https://github.com/usestrix/strix/pull/1281\n* feat(prompts): require http_exchange_ids for proxy-validated findings by @0xallam in https://github.com/usestrix/strix/pull/1292\n* docs: add Vercel AI Gateway provider guide by @erulkey in https://github.com/usestrix/strix/pull/1254\n* fix(web_search): send only the agent's query to Exa search by @0xallam in https://github.com/usestrix/strix/pull/1306\n* chore(deps): require litellm>=1.101.0 so gpt-6-astra accepts max_tokens by @0xallam in https://github.com/usestrix/strix/pull/1318\n* feat(config): STRIX_API_TYPE forces responses vs chat completions by @bearsyankees in https://github.com/usestrix/strix/pull/1324\n* fix(build): keep the TUI sidecar hook importable on hatchling 1.32.1 by @bearsyankees in https://github.com/usestrix/strix/pull/1325\n* fix(runtime): place extra files as agent-writable sandbox files on every backend by @0xallam in https://github.com/usestrix/strix/pull/1330\n* Prompt agents to include local Git blame in technical details by @bearsyankees in https://github.com/usestrix/strix/pull/1329\n* fix(reporting): reduce git blame guidance to a trailing hint on the reporting tool by @0xallam in https://github.com/usestrix/strix/pull/1336\n* runtime: read_only local sources become :ro bind mounts by @0xallam in https://github.com/usestrix/strix/pull/1342\n* feat(mcp): initialize connections lazily by @yoni-at-strix in https://github.com/usestrix/strix/pull/1347\n* feat(llm): structured per-attempt provider request log with provider request ids by @0xallam in https://github.com/usestrix/strix/pull/1353\n* Let agents delete a vulnerability report they filed by @bearsyankees in https://github.com/usestrix/strix/pull/1354\n* Fill in blank tool-call ids so strict providers accept the history by @0xallam in https://github.com/usestrix/strix/pull/1355\n* fix(dev): make check-all non-mutating by @Czech-Knight in https://github.com/usestrix/strix/pull/1360\n* fix(tui): suspend on ctrl+z by @ian-at-strix in https://github.com/usestrix/strix/pull/1371\n* docs(skills): refresh framework behavior and security testing guidance by @bearsyankees in https://github.com/usestrix/strix/pull/1372\n* perf(prompt): put per-run scope at the end of the system prompt by @ian-at-strix in https://github.com/usestrix/strix/pull/1375\n* perf(llm): give Claude a cache point before the per-run scope by @ian-at-strix in https://github.com/usestrix/strix/pull/1376\n* perf(prompt): load requested skills after a cache point by @ian-at-strix in https://github.com/usestrix/strix/pull/1382\n* feat(tui): animate the wait_for_agents indicator by @ian-at-strix in https://github.com/usestrix/strix/pull/1383\n* feat(budget): budget_policy=pause — park every agent at the cost limit until the operator resumes by @0xallam in https://github.com/usestrix/strix/pull/1387\n* perf(llm): pin OpenRouter agents to one provider with session IDs by @ian-at-strix in https://github.com/usestrix/strix/pull/1386\n* chore(models): remove the model quality warning and its allowlists by @0xallam in https://github.com/usestrix/strix/pull/1388\n* fix(reporting): restore create_vulnerability_report parameter descrip… by @bearsyankees in https://github.com/usestrix/strix/pull/1391\n* fix(config): choose Responses vs chat completions from the model, not the base URL by @0xallam in https://github.com/usestrix/strix/pull/1407\n* fix(config): use the Responses API whenever the model supports it by @0xallam in https://github.com/usestrix/strix/pull/1408\n* fix(finish_scan): stop asking for a section heading in every report field by @0xallam in https://github.com/usestrix/strix/pull/1411\n* fix(tui): link every wrapped line of the viewer URL to the full URL by @0xallam in https://github.com/usestrix/strix/pull/1412\n* feat(cli): Add --"},"readme":true,"readme_zh":false,"news":[{"title":"Show HN: Strix - Open-source AI hackers for your apps","url":"https://github.com/usestrix/strix","hn":"https://news.ycombinator.com/item?id=44945113","source":"Hacker News","lang":"en","date":"2025-08-18","points":102,"comments":15},{"title":"Show HN: Enter your domain and my open-source agent will hack it","url":"https://github.com/usestrix/strix","hn":"https://news.ycombinator.com/item?id=44871232","source":"Hacker News","lang":"en","date":"2025-08-12","points":14,"comments":3},{"title":"Show HN: Non-Custodial Cryptocurrency Payment Gateway","url":"https://coinpayportal.com","hn":"https://news.ycombinator.com/item?id=46065247","source":"Hacker News","lang":"en","date":"2025-11-27","points":2,"comments":2},{"title":"Show HN: Open-source alternative to XBOW","url":"https://github.com/usestrix/strix/blob/main/README.md","hn":"https://news.ycombinator.com/item?id=45428526","source":"Hacker News","lang":"en","date":"2025-09-30","points":2,"comments":0},{"title":"Strix、Vercel AI Gateway経由で400以上のモデルに対応","url":"https://note.com/noah_whitfield/n/n3c50f55caf04","source":"note","lang":"zh","date":"2026-10-30"},{"title":"AI hacking tools found on GitHub, a developer community, on the 9th were difficult to classify as ju..","url":"https://news.google.com/rss/articles/CBMiT0FVX3lxTE9xTTY2aFB5MldaVDVrRFpCOHN1NHQtZzVaSzBPRmVudWdMUnRkU2xTRy1xNHhCaHdiSXRLN3VmLXdDMlZlbDFHbUJsVDF6OVU?oc=5","source":"매일경제","lang":"en","date":"2026-10-09"},{"title":"9日，在开发者社区GitHub上查到的人工智能（AI）黑客工具很难简单归为某一种类型。它们细分为多种形态，从由AI自行探寻入侵路径的自主智能体，到统一管理多种黑客工具的平台，再到辅助攻击者作出判断的A..","url":"https://news.google.com/rss/articles/CBMiT0FVX3lxTE1zTmozcnBhdHkxN3lWUEwwckZfdVBmekVaMTBGNEFVN3VWNExOUFoydDJmVlllZGI5N0tpX2tXaloyU1QwMkRjNGlVQlQxQ0U?oc=5","source":"매일경제","lang":"zh","date":"2026-10-09"},{"title":"Major flaw in AI neocloud’s security found by prospective customer","url":"https://news.google.com/rss/articles/CBMisAFBVV95cUxPZU1nSEpPMVNyV25JT01oYTRYd3RCRGxmWEFFemdvODNuMURjVlFrTkpLVnN0bV9ETHgtcUJ1RFc3YkVGeHNGWDBDZE9taVhYR0dndEM3dXJNT3kweVdTeWxKc2thSVpycGtfbzhYMUR4ck12OS1oVUd2d0NWZDZHWXNhSzNfajZMZ0wxZVhZSDVFdjR4S0tIU21BNUJickdCUVJpTFVkTGdWUzJXNVl5Vw?oc=5","source":"Techzine Global","lang":"en","date":"2026-09-16"},{"title":"Strix: The Revolutionary AI-Powered Penetration Testing Agent Transforming Cybersecurity in 2026","url":"https://news.google.com/rss/articles/CBMickFVX3lxTE5SZWNONzRObmRZZTBnMWVSdElycGFNRnVRZnFfTGh4S3pOc1pGcTlnZUtrQ016dkJiY1U4a0h6aV9udzN5NWVQbGVOVWtNdHFVekIxVDNZYjBLSUozOUpDLWpzeGpMV1JGc2g1WUJmNm5rdw?oc=5","source":"Alpha Match Technology","lang":"en","date":"2026-07-03"},{"title":"X 上一条帖子盘点了10 个 GitHub 开源项目，全部永久免费，号称能替掉每年上万元的SaaS 订阅，Metabase 近 5 万星，连上数据库点几下就能生成可视化看板，对标Tableau（900 美元/年）和 Looker（6.6 万美元/年）；MinerU 超 7 万星，把 PDF 和 Office 文档转成干净m","url":"https://news.google.com/rss/articles/CBMiVkFVX3lxTE1Bd0lhOC1JRzJtRkJpdy1oeXFEeEFsX1VyQmpWYzJsdURIQ2pOZXUxeWt0eGw3TWFvczNpUXdGNWV5bnRlQ25OVi1UZjZ1R2ZnX1Z1b2tR?oc=5","source":"QQ News","lang":"zh","date":"2026-06-29"},{"title":"TechFlow 情报局：匿名 GitHub 账号大规模丢0-day 漏洞，AMD 芯片工程师发布Strix Halo 集群搭建指南","url":"https://news.google.com/rss/articles/CBMiVEFVX3lxTE01NDljLWFoTWZHczVCRTBWQU1jUU9LdVFhcU5kMmJsSEc2V2U4b090VnFHaTNrTElCYldiLWZ4elhRWTNSS3pNRVBmWkdpRDhtMlg1dA?oc=5","source":"深潮TechFlow","lang":"zh","date":"2026-06-28"},{"title":"Strix: Open-source AI agents for penetration testing","url":"https://news.google.com/rss/articles/CBMilgFBVV95cUxQRnN3XzF3RHBiYVJnRlFsemRhWDUzaFV3WXB6VThqdmotWTc4NmpYM0lIaDdpSk5sQXhDbkhnellxUlpFclI0bmFaWEFfbWd6UC1CcmppSGFrMWNfdExDcHNOMkJrbXBXbjYtZEdjSG5qNE9uTzdicEp0X19TdXJ1ZjVwUFZJNnhTTXRCV0lMc1FDOEo0NGc?oc=5","source":"Help Net Security","lang":"en","date":"2025-11-17"},{"title":"AMD \"Strix Point & Strix Halo\" Zen 5 APUs Spotted in ROCm GitHub","url":"https://news.google.com/rss/articles/CBMimwFBVV95cUxNcG1FNzhZa19hNDZpc0Eyd3JNQ1FvUEpUeV9PblVkMWZNSnhKR1RTUkNRSE05Z09mQ25vVmJhRGktVllJTEVRckZmLTF3blVfSEN0OUwzTGI2aDhYMVBKcnpNN1lseTUxdHpUenkwNFJvX05UMU9wVktkOERuN3lPRUhMRVJSYkdtamdsU0tXdEtzbXl1SFotZVFvd9IBoAFBVV95cUxOUDgzRG5ZQjAzTTlfSEY4d0o5djYtVmYxeVZieGVVeVZXLXRleHk3aDd4SmhKTnBuNndoQzRGRjNvMnhKcWpSSUhzUXZyd0VzVHZsSVpPcTVYeGdFUGZPblFNV1RuMERHVjF1UUpVWU5teVpYdlpxVkJrZmE3YU1pXzdNZ2FqT3NfWnNBazd0dlhvLWU0a00zcVVnUWNJalNP?oc=5","source":"TechPowerUp","lang":"en","date":"2024-01-23"}],"stale":false,"snapshot_at":"2026-11-10T09:35:25Z","history_start":"2026-09-06"}