- fix(models): frontier model check matches the model name only, never the provider route
- feat(reporting): link HTTP exchange evidence
- feat(prompts): require httpexchangeids for proxy-validated findings
- docs: add Vercel AI Gateway provider guide
- fix(websearch): send only the agent's query to Exa search
- chore(deps): require litellm>=1.101.0 so gpt-6-astra accepts maxtokens
Strix by Strix
Overview
An open-source multi-agent penetration testing tool that runs dynamic tests against applications, validates findings with working proofs of concept and proposes fixes; it runs locally with Docker or as a hosted service.
Strix was downloaded 8,244 times from PyPI in the week ending Oct 4, 2026, up 9.7% on the week before and down 57.0% over the last 30 days compared with the 30 before. Its download count moved to a different level overnight on Aug 4, 2026. A jump like that comes from automated installs switching on or off or from a change in how the registry counts, so growth rates across that date are not shown. The GitHub repository has 66.8K stars, 6,189 of them added in the last 30 days. The latest stable release is 1.7.0, published Oct 5, 2026; there were 1 stable releases in the past 30 days. It was mentioned in 1 Hacker News posts and comments over the last 30 days.
Strix usage and attention over time
Download the raw daily series: strix.csv
Install Strix
| PyPI | pip install strix-agent |
|---|
These commands use the packages tracked on this page. The vendor may recommend a different installer; see the official documentation.
Key facts
| Maker | Strix |
|---|---|
| Type | Open-source autonomous penetration testing agents |
| First released | August 2025 |
| License | Apache-2.0 |
| Main language | Python |
| Open issues and PRs | 442 |
Pricing
Open-source version free to run locally. Strix Cloud Pro is $29 per seat a month with pentests billed separately; Enterprise custom.
Source: official pricing page, checked Oct 6, 2026. Prices change often; confirm before you buy.
Pulse Score breakdown
Each component is scored 0 to 100 from public signals; a dash means no data for it. Methodology.
Strix news and signals
-
101 agents added to AgentGid
DeepSeek Harness, CopilotKit, Orca, eve, ARTEMIS, Jasper, Harvey, Paradox, Eightfold AI Interviewer, TesterArmy e2e, Copy.ai, Consensus and 89 more
-
Strix 1.7.0 released
fix(models): frontier model check matches the model name only, never the provider route; feat(reporting): link HTTP exchange evidence; feat(prompts): require httpexchangeids for proxy-validated findings
What changed: recent Strix releases
14 stable releases in the last 90 days · Full changelog
- fix(agents): stop parents waiting on finished non-interactive children
- fix(cloud): print top-up instructions on 402 and guide oversize or ar…
- fix(viewer): show stopped run status
- feat(websearch): add Exa as a web search provider alongside Perplexity
- fix(cli): join the import warm-up before the engine imports, drop the orphan purge
- chore(telemetry): drop per-load skillloaded beacons, send anonymous events
- skills: reference new cloud cli
- MCP call errors no longer quarantine the connection
- fix(tui): run environment and model checks on the no-target start screen
- fix(ci): make the pre-commit mypy hook and the test suite pass on a fresh checkout
- fix(config): merge env into cli-config.json and invalidate the linked LLM connection on change
- feat(models): add GLM-5.3, Fable 5.1, Gemini 3.7 Flash to the recommended list and make openrouter/z-ai/glm-5.3 the top pick
- Fix LiteLLM cost model resolution
- feat: place caller-provided files into the sandbox workspace (extrafiles, --workspace-file)
- feat(reporting): contextual CVSS breakdown on dependency reports
- feat(reporting): require contextual CVSS and usage evidence on dependency reports
- handle resume tokens gracefully
- Add OWASP LLM Top 10 2026 skill coverage
- fix(llm): omit paralleltoolcalls on tool-less requests
- fix(container): reclaim abandoned browser sessions
- fix(container): keep the browser env alive where image ENV is dropped
- fix(container): write the browser profile as root
- fix(llm): send OpenRouter app attribution on the request itself
- chore: release v1.5.3
- docs(skills): clearer description
- fix(tui): make the mount prompt clickable, and skip the mount instead of abandoning the scan
- test(tui): correct the nudge the internal-turn test asserts
- fix(agents): let an agent wait on what it already said
- fix(todo): stop a todo plan failing on priority or duplicates
- fix(sessions): open a sqlite connection per operation, not per thread
Strix alternatives
| # | Agent | Pulse | Downloads 7d | 7d | 30d | VS Code installs | Stars | Latest release | Price | Last 90 days | |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 133 |
PentAGIVXControl |
30 | — | — | — | — | 25.3K+31/day | 2.2.0yesterday | Free (OSS) | — | |
| 185 |
NodeZeroHorizon3.ai |
18 | — | — | — | — | — | — | Custom | — | |
| 209 |
XBOWXBOW |
11 | — | — | — | — | — | — | Usage-based | ||
| 210 |
CAI (Cybersecurity AI)Alias Robotics |
10 | 686 | up 58.8% | down 46.7% | — | 9,847+2/day | — | Free | ||
| 227 |
Dropzone AIDropzone AI |
0 | — | — | — | — | — | — | Custom | — | |
| 250 |
Microsoft Security Copilot agentsMicrosoft |
— | — | — | — | — | — | — | Usage-based | — | |
| No agents match that filter. | |||||||||||
Head to head: Strix vs PentAGI · Strix vs NodeZero · Strix vs XBOW · Strix vs CAI (Cybersecurity AI)
Strix FAQ
How much does Strix cost?
Open-source version free to run locally. Strix Cloud Pro is $29 per seat a month with pentests billed separately; Enterprise custom.
Is Strix open source?
Yes. Strix is open source, released under the Apache-2.0 license.
How popular is Strix?
Strix was downloaded 8,244 times from PyPI in the week ending Oct 4, 2026, up 9.7% on the week before and down 57.0% over the last 30 days compared with the 30 before. Its download count moved to a different level overnight on Aug 4, 2026. A jump like that comes from automated installs switching on or off or from a change in how the registry counts, so growth rates across that date are not shown. The GitHub repository has 66.8K stars, 6,189 of them added in the last 30 days.
What is the latest version of Strix?
The latest stable release we track is 1.7.0, published on Oct 5, 2026.
What are the alternatives to Strix?
The closest alternatives in the same category by Pulse Score are PentAGI, NodeZero, XBOW, CAI (Cybersecurity AI).
Where these numbers come from
PyPI: strix-agent. GitHub: usestrix/strix. Site rank: strix.ai on the Tranco list. See data sources for how each one is collected.
Product facts and pricing were checked against: github.com, pypi.org, strix.ai.
