Strix

Strix is an open-source AI agent that pentests your own application: it probes for vulnerabilities the way an attacker would, then reports what it found with enough context to actually fix it. For solo builders shipping AI-assisted code fast, it closes a gap that traditional linters and dependency scanners never covered.

Why it earns a slot

• Runs real offensive-security workflows rather than pattern-matching source code, so it surfaces logic and auth flaws static tools miss.
• Reports come with reproduction steps and remediation guidance, not just a severity badge.
• Open source and self-run, which means your code and findings never leave your environment.
• Fits naturally after a vibe-coded sprint, where speed usually outruns security review.

Use it responsibly

Point it at systems you own or are explicitly authorized to test. Used that way it is a genuinely useful pre-launch gate — run it before you open signups, not after someone else does.

Repo: github.com/usestrix/strix.