XBOW raised $117M to build AI hacking agents.
Now someone just open-sourced it for FREE.
Strix deploys autonomous AI agents that act like real hackers - they run your code dynamically, find vulnerabilities, and validate them through actual proof-of-concepts.
Why it matters:
The biggest problem with traditional security testing is that it doesn't keep up with development speed.
Strix solves this by integrating directly into your workflow:
↳ Run it in CI/CD to catch vulnerabilities before production
↳ Get real proof-of-concepts, not false positives from static analysis
↳ Test everything: injection attacks, access control, business logic flaws
The best part?
You don't need to be a security expert. Strix includes a complete hacker toolkit - HTTP proxy, browser automation, and Python runtime for exploit development.
It's like having a security team that works at the speed of your CI/CD pipeline.
The best part is that the tool runs locally in Docker containers, so your code never leaves your environment.
Getting started is simple:
- pipx install strix-agent
- Point it at your codebase (app, repo, or directory)
Everything is 100% open-source!
I've shared link to the GitHub repo in the replies!