Strix
Strix offers autonomous pentesting of APIs and web apps, PR security review, cloud and infrastructure testing, autofix and CI gating, in a SaaS or self-hosted form.
Visit Strix Back to comparison
Last checked 9 November 2026. Facts come from Strix's own public pages, linked below.
At a glance
| Type | Autonomous testing platform |
|---|---|
| Headquarters | Not published |
| Services listed | Web application penetration testing, API penetration testing, Cloud penetration testing, Source code review, Network penetration testing source |
| Delivery | automated Autonomous agents test APIs and web apps and attach a proof-of-exploit to each finding; an open-source edition exists. |
| Scope | Web apps: yes APIs: yes Cloud: yes Network: not published Mobile: not published AI apps: not published |
| Pricing model | mixed |
| Turnaround | Not published No time to first finding or report is stated on the page. source |
| Retesting | The platform retests its own generated fixes; no retest policy or cost is stated on the pricing page. source |
| Sample report | not published |
| Compliance mentioned | Not published |
| Integrations | GitHub, GitLab, Bitbucket, Jira, Linear, Slack |
Pricing
| Plan or item | Price | Unit | What it covers |
|---|---|---|---|
| Pro | $29 | per seat per month | API and web app pentesting, PR security reviews, autofix, attack surface monitoring, scheduled pentesting. Pentests are billed separately, pay per test; no per-test price shown. 7-day free trial. source |
Enterprise is custom (VPC or on-prem, internal infrastructure pentesting, SSO, SLA). Startups can get Pro at half price for six months.
Credentials
No credentials with public evidence found.
Our assessment
Editorial judgment by Excession Labs, based on the facts above. Not a rating.
Good fit when
Engineering teams that want pentesting and PR review inside the development workflow, with a published seat price and a self-hosted option.
Tradeoffs
The per-test price is not published, so total cost is unknown. The site claims SOC 2 Type II and ISO 27001 'compliant' with a trust center link not opened here, so no credential is listed. The sample on the site is mock findings. Headquarters not stated (entity: OmniSecure, Inc.).
Sources
- Strix homepage (checked 9 November 2026)
- Strix pricing (checked 9 November 2026)
See something wrong or out of date? Send a correction.
Compare with
- EquixlyEquixly offers autonomous AI penetration testing and AI red teaming for web apps, APIs, GenAI/LLM systems and MCP servers, run continuously.
- HadrianHadrian Nova runs AI agent pentests against an application or environment the customer defines. Results stream live and a compliance-mapped PDF report is…
- Horizon3.ai (NodeZero)NodeZero is an autonomous pentesting platform covering internal, external, cloud, Kubernetes and Active Directory testing, with a newer web application…
- NoveeNovee is an AI penetration testing platform built on its own offensive security model. It targets web and internal apps, mobile apps and their APIs, AI apps…