Strix are autonomous AI penetration testing agents that act just like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proofs-of-concept. Built for developers and security teams who need fast, accurate security testing without the overhead of manual pentesting or the false positives of static analysis tools.
Key Capabilities:
Full pentesting toolkit - reconnaissance, exploitation, and validation out of the box
Multi-agent orchestration - teams of AI pentesters that collaborate and scale
Real exploit validation - working PoCs, not false positives like legacy vulnerability scanners
Developer‑first CLI - actionable findings with remediation guidance
Auto‑fix & reporting - generate patches and compliance-ready pentest reports
Use Cases
Application Security Testing - Detect and validate critical vulnerabilities in your applications
Rapid Penetration Testing - Get penetration tests done in hours, not weeks, with compliance reports
Bug Bounty Automation - Automate bug bounty research and generate PoCs for faster reporting
CI/CD Integration - Run tests in CI/CD to block vulnerabilities before reaching production
What's new in 1.7.0
What's Changed
fix(models): frontier model check matches the model name only, never the provider route by @0xallam in https://github.com/usestrix/strix/pull/1280
feat(reporting): link HTTP exchange evidence by @bearsyankees in https://github.com/usestrix/strix/pull/1281
feat(prompts): require http_exchange_ids for proxy-validated findings by @0xallam in https://github.com/usestrix/strix/pull/1292
docs: add Vercel AI Gateway provider guide by @erulkey in https://github.com/usestrix/strix/pull/1254
fix(web_search): send only the agent's query to Exa search by @0xallam in https://github.com/usestrix/strix/pull/1306
chore(deps): require litellm>=1.101.0 so gpt-6-astra accepts max_tokens by @0xallam in https://github.com/usestrix/strix/pull/1318
feat(config): STRIX_API_TYPE forces responses vs chat completions by @bearsyankees in https://github.com/usestrix/strix/pull/1324
fix(build): keep the TUI sidecar hook importable on hatchling 1.32.1 by @bearsyankees in https://github.com/usestrix/strix/pull/1325
fix(runtime): place extra files as agent-writable sandbox files on every backend by @0xallam in https://github.com/usestrix/strix/pull/1330
Prompt agents to include local Git blame in technical details by @bearsyankees in https://github.com/usestrix/strix/pull/1329
fix(reporting): reduce git blame guidance to a trailing hint on the reporting tool by @0xallam in https://github.com/usestrix/strix/pull/1336
runtime: read_only local sources become :ro bind mounts by @0xallam in https://github.com/usestrix/strix/pull/1342
feat(mcp): initialize connections lazily by @yoni-at-strix in https://github.com/usestrix/strix/pull/1347
feat(llm): structured per-attempt provider request log with provider request ids by @0xallam in https://github.com/usestrix/strix/pull/1353
Let agents delete a vulnerability report they filed by @bearsyankees in https://github.com/usestrix/strix/pull/1354
Fill in blank tool-call ids so strict providers accept the history by @0xallam in https://github.com/usestrix/strix/pull/1355
fix(dev): make check-all non-mutating by @Czech-Knight in https://github.com/usestrix/strix/pull/1360
fix(tui): suspend on ctrl+z by @ian-at-strix in https://github.com/usestrix/strix/pull/1371
docs(skills): refresh framework behavior and security testing guidance by @bearsyankees in https://github.com/usestrix/strix/pull/1372 …
Yes. Strix is free and open-source software released under the Apache-2.0 license.
What is the latest version of Strix?
The latest version is 1.7.0, released on Oct 5, 2026.
Is it safe to download Strix?
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 04e3290f4c495b952c10da2f3627764be3e9ac598dd5a0a79bf65c112d1200f7.
Which Windows versions does Strix support?
Strix runs on Windows and is available for 64-bit (x64) systems.
How do I uninstall Strix?
Open Settings › Apps › Installed apps, find Strix and select Uninstall. From the command line, run winget uninstall --id=OmniSecure.Strix -e.
Unleash Claude’s raw power directly in your terminal. Search million-line codebases instantly. Turn hours-long workflows into a single command. Your tools. Your workflow. Your codebase, evolving at th
Codex CLI is an open‑source local coding agent that runs in your terminal, letting you write, edit, and understand code without leaving the command line.
