Find security vulnerabilities in code White-box security review with Strix: the agents read the source to build a model of routes, sinks, and authorization checks, then attempt real exploitation. Findings come with a proof-of-concept, so the output is a short list of proven issues rather than the hundreds of "potential" hits a pattern-matching scanner produces. Install, LLM setup, all flags, and the managed-cloud path are in the penetration-testing-with-strix skill. Run it

Local working tree

strix -n -t ./ --scan-mode standard --max-budget 15

A GitHub repo directly

strix -n -t https://github.com/org/app --max-budget 15

Monorepo: point at the service that matters, not the whole tree

strix -n -t ./services/checkout --max-budget 20 Show more Installs 946 Repository usestrix/strix GitHub Stars 57.8K First Seen 5 days ago Security Audits Gen Agent Trust Hub Pass Socket Warn Snyk Warn