Strix
Autonomous agents that pen-test your own app and return working proofs of concept.
Security check as an add-on to web builds, or a fixed-price scan for small SaaS companies.
Security testing is well paid. Only test systems you have written permission to test, and have findings reviewed by someone qualified.
Apache-2.0 (LICENSE file read)
Yes under Apache-2.0: a freelancer can run it for paying clients; the constraint is legal - only against systems the client owns or has given explicit written permission to test.
Not archived; last push 2026-10-07. Needs a paid LLM (API key, or a ChatGPT Plus/Pro subscription per the README) and Docker for the sandbox. Legal risk: README - 'Authorized use only... Unauthorized testing is illegal in most jurisdictions'. Enterprise adds SSO, compliance-ready reports (SOC 2, ISO 27001, PCI DSS) and VPC/self-hosted deployment. No GPU needed.
Startups and agencies shipping web apps
Security check as an add-on to web builds, or a fixed-price scan for small SaaS companies.
Yes - Strix Cloud (app.strix.ai) and Enterprise. Pro: $29 / seat / month, 7 day free trial, 'Pentests billed separately, pay per test' (per-test price not shown). Enterprise: Custom. Startup offer: 50% off Pro for 6 months.
None named