Strix

Strix, made by OmniSecure Inc. with security researchers including Alex Schapiro and Ahmed Allam, is an autonomous security platform running continuous penetration testing across APIs, web applications, infrastructure, and cloud environments — used by AWS, PayPal, Uber, Cisco, and Pfizer. It performs autonomous pentesting across REST and GraphQL APIs and web apps, runs PR security reviews integrated into CI/CD, generates auto-fix pull requests with automatic retesting of the fix, scans cloud infrastructure for misconfigurations (AWS, Google Cloud, Azure, Kubernetes), and continuously monitors for new CVEs against already-deployed systems. Enterprise deployment options include self-hosted and air-gapped environments, with SOC 2 Type II and ISO 27001 certification. A free tier lets you start; enterprise pricing requires a demo. The open-source GitHub repository has 54.1K+ stars, a real, checkable adoption signal. Good fit for a security team that wants continuous, autonomous penetration testing integrated into CI/CD rather than periodic manual pentests.