Autonomous AI penetration testing platform. Orchestrating 70+ security tools for exploit-verified pentesting & automated security audits.
Xalgorix is designed to automate complex security assessments by combining LLM-powered reasoning with industry-standard security tools.
- Autonomous AI Pentesting: Intelligent agent-driven target analysis and exploitation.
- 70+ Security Tools Orchestrated: Seamless integration with Nmap, Metasploit, Gobuster, and more.
- Exploit Verification: Real validation of vulnerabilities to eliminate false positives.
- Automated Audits: Comprehensive reporting and vulnerability mapping.
- Official Website
- Documentation
- Open-source engine (Apache-2.0)
- Free security review on every pull request (GitHub App)
- Support the Project (GitHub Sponsors)
- Medium Blog / Writeups
Run the self-hosted dashboard with Docker:
docker run --rm -p 9137:9137 --privileged -v xalgorix-data:/data xalgord/xalgorix:latestThen open http://localhost:9137 and add your LLM provider under Settings → LLM (local Ollama works too). The full install guide, including the one-line installer for Linux and macOS, is in the main repository.
Prefer zero setup? Xalgorix Cloud runs the same engine in your browser, with no install or LLM key.
Only scan systems you own or have explicit permission to test.
