What Is Strix? AI Security Testing, Setup, Is It Free, Cloud Pricing, Local Models and Authorized Use
You give Strix your app's code or live URL; it tests it like an attacker and tries to confirm vulnerabilities with a working proof. It is an open-source AI security agent under the Apache-2.0 license; it runs on your own machine with Docker and a model API key; the tool is free and the model costs are yours. The hosted Strix Cloud is paid. Use it only on systems you own or have written permission to test; unauthorized testing is illegal in most places.
- What it does
- Tests your app like an attacker and proves vulnerabilities
- Free
- Tool is free (Apache-2.0); model costs are separate
- Cloud
- Pro $29/seat/month + per-test fee
- No-code
- No; requires a terminal and Docker
- Legal
- Authorized targets only
What does Strix do? Can it scan sites without permission?
You point Strix at a target: a local folder, a GitHub repository, a live URL or an OpenAPI/Postman file. Its agents run the application dynamically, look for vulnerabilities such as access control, injection, SSRF, XSS, session and business logic flaws, and try to confirm what they find with a working proof. The tools run in a Docker sandbox.
README: Strix actively tests the target; run it only on systems you own or have explicit written permission to test, and within scope. Unauthorized testing is illegal in most places; responsibility lies with the user.
Scan time depends on the mode: quick takes minutes, standard 30 minutes to 1 hour, deep (the default) 1-4 hours. Who it's for: developers who want to test their app before launch or with every change.
How do you install Strix?
- Install and run Docker; have a model API key ready from a supported provider.
- Install:
curl -sSL https://strix.ai/install | bash - Set the model and key as environment variables: STRIX_LLM and LLM_API_KEY.
- First scan:
strix --target ./app-folder
On the first run, the sandbox Docker image downloads automatically; results are written to the strix_runs folder. To update: strix --update. Python 3.12 or later is required. Use --max-budget to cap costs.
!For Windows, v1.7.0 includes a zip and a wheel, but the install script recognizes Windows only under Git Bash, MSYS and Cygwin; there's no official Windows guide (an open request exists on GitHub). The docs are inconsistent about the recommended Claude model (Sonnet 4.6, Opus 4.6, Sonnet 4.5), so no model name is given here.
Is Strix free? Cloud pricing
- On your own machine, with Docker
- Apache-2.0
- Model API costs not included
- No Docker or model key needed
- PR reviews, automatic fix PRs
- 7-day trial
- Pentests not included: charged separately per test
- VPC or on-premises deployment, SSO, SLA
The per-test amount isn't listed on the pricing page. Early-stage startups get 50% off Pro for 6 months. Prices are in US dollars only. In the open-source version, scans use model credits; deep mode can take 1-4 hours.
Official pricing page last checked on .
Where does my code go? Local models and data
In the open-source version, your code goes to the model provider you choose; retention and training rules are that provider's.
With Ollama, LM Studio or vLLM, your code doesn't leave your machine. However, the docs themselves say local models, especially those under 70B, struggle with these complex agent tasks and need tool-calling configuration.
On by default; turned off with STRIX_TELEMETRY=0. The docs state that targets, paths, finding details and model requests are not collected.
It states that models are not trained on customer data; the terms allow improving the platform and agent prompts (with automatic secret scrubbing beforehand and a right to object). If the account is closed, data is deleted within 30 days. There is no statement specific to KVKK (Turkey's Personal Data Protection Law).
Frequently asked questions
What is Strix and what does it do?
An open-source AI security agent that tests your app like an attacker and tries to confirm vulnerabilities. You give it code, a GitHub repository or a live URL as the target.
Is Strix free?
The tool is free (Apache-2.0), but model API costs and Docker resources are on you. The hosted Cloud Pro is $29 per seat per month, and pentests are charged separately.
Is it legal to scan a site without permission using Strix?
No, it should be treated as illegal. The official warning says to run it only on systems you own or have explicit written permission to test; unauthorized testing is illegal in most places.
Does Strix work with local models like Ollama?
It does, but the docs say local models under 70B struggle with these complex tasks. With a local model, your code doesn't leave your machine.
Does Strix work on Windows?
v1.7.0 includes a Windows zip and wheel; the install script recognizes Windows only in Git Bash, MSYS and Cygwin. There's no official Windows guide.
How do I add Strix to GitHub Actions?
You run it in headless (-n) mode and pass the model key as a secret; you set the findings threshold with --fail-on, and the full git history is required.
Related guides
Sources
Not clear in the official sources: Access and payment from Turkey · Turkish replies and interface · Cloud cancellation and refund steps · account opening conditions · Terms of Use: commercial use and rights to output · the per-test Cloud fee · independent measurement of finding accuracy. Each is covered in the relevant section, along with what you can do.