usestrix / strix
Python  ·  No.2 on GitHub Trending, 17 Aug 2026  ·  856 stars today
Open source

AI penetration testing for your own app.

$pip install strix
github.com/usestrix/strix

The description carries two verbs, and the second one is the unusual part. Plenty of scanners find. This one is published as find and fix.

Verb one

Find

The part every scanner claims. A list of vulnerabilities in your application, produced without a human driving the session.

Verb two

Fix

The part that changes who the tool is for. A finding you have to triage is work; a finding that arrives with a repair is a shorter loop.

Open source

The project leads its own description with this word, ahead of the capability. For security tooling that ordering is an argument about inspectability.

Your app

The scope is possessive and deliberate. This is aimed at the code you own, not at targets you do not.

What is missing here

No detection rates, no CVE counts, no coverage percentages. The trending page published none, so this page prints none.

Concept mock, not affiliated with the project. Every line above is derived from the repository's own one-sentence description on GitHub Trending, 17 August 2026: "Open-source AI penetration testing tool to find and fix your app's vulnerabilities." No benchmark, scan result, or customer is represented on this page.