diff --git a/docs/advanced/configuration.mdx b/docs/advanced/configuration.mdx index f14b110f4..9046f37e2 100644 --- a/docs/advanced/configuration.mdx +++ b/docs/advanced/configuration.mdx @@ -8,7 +8,7 @@ Configure Strix using environment variables or a config file. ## LLM Configuration - Model name in LiteLLM format (e.g., `openrouter/z-ai/glm-5.3`, `openai/gpt-5.4`). + Model name in LiteLLM format (e.g., `openrouter/z-ai/glm-5.3`, `openai/gpt-6.1-sol`). diff --git a/docs/docs.json b/docs/docs.json index 665874f80..f9cbf26c6 100644 --- a/docs/docs.json +++ b/docs/docs.json @@ -35,8 +35,8 @@ "llm-providers/overview", "llm-providers/openai", "llm-providers/anthropic", - "llm-providers/openrouter", "llm-providers/vercel-ai-gateway", + "llm-providers/openrouter", "llm-providers/vertex", "llm-providers/bedrock", "llm-providers/azure", diff --git a/docs/index.mdx b/docs/index.mdx index 910f1e2ec..b3f840135 100644 --- a/docs/index.mdx +++ b/docs/index.mdx @@ -73,7 +73,21 @@ Strix uses a graph of specialized agents for comprehensive security testing: ## Quick Example -```bash + +```bash Vercel AI Gateway +# Install +curl -sSL https://strix.ai/install | bash + +# Configure +export STRIX_LLM="openai/zai/glm-5.3" +export LLM_API_KEY="your-api-key" +export LLM_API_BASE="https://ai-gateway.vercel.sh/v1" + +# Scan +strix --target ./your-app +``` + +```bash OpenRouter # Install curl -sSL https://strix.ai/install | bash @@ -84,6 +98,7 @@ export LLM_API_KEY="your-api-key" # Scan strix --target ./your-app ``` + ## Community diff --git a/docs/llm-providers/anthropic.mdx b/docs/llm-providers/anthropic.mdx index da32b13ab..12bb1b6aa 100644 --- a/docs/llm-providers/anthropic.mdx +++ b/docs/llm-providers/anthropic.mdx @@ -6,7 +6,7 @@ description: "Configure Strix with Claude models" ## Setup ```bash -export STRIX_LLM="anthropic/claude-sonnet-4-6" +export STRIX_LLM="anthropic/claude-sonnet-5-5" export LLM_API_KEY="sk-ant-..." ``` @@ -14,8 +14,12 @@ export LLM_API_KEY="sk-ant-..." | Model | Description | |-------|-------------| -| `anthropic/claude-sonnet-4-6` | Best balance of intelligence and speed | -| `anthropic/claude-opus-4-6` | Maximum capability for deep analysis | +| `anthropic/claude-sonnet-5-5` | Best balance of intelligence and speed | +| `anthropic/claude-opus-5-5` | Maximum capability for deep analysis | + + +Security testing with Claude needs the [Cyber Verification Program](https://support.claude.com/en/articles/14604842-cyber-verification-program) (CVP). Without it the safety classifiers block most offensive tasks. Red Team Access covers authorized penetration testing. + ## Get API Key diff --git a/docs/llm-providers/azure.mdx b/docs/llm-providers/azure.mdx index 1a9be0084..23b26ceb5 100644 --- a/docs/llm-providers/azure.mdx +++ b/docs/llm-providers/azure.mdx @@ -6,7 +6,7 @@ description: "Configure Strix with OpenAI models via Azure" ## Setup ```bash -export STRIX_LLM="azure/your-gpt5-deployment" +export STRIX_LLM="azure/your-gpt6-deployment" export AZURE_API_KEY="your-azure-api-key" export AZURE_API_BASE="https://your-resource.openai.azure.com" export AZURE_API_VERSION="2025-11-01-preview" @@ -24,7 +24,7 @@ export AZURE_API_VERSION="2025-11-01-preview" ## Example ```bash -export STRIX_LLM="azure/gpt-5.4-deployment" +export STRIX_LLM="azure/gpt-6.1-sol-deployment" export AZURE_API_KEY="abc123..." export AZURE_API_BASE="https://mycompany.openai.azure.com" export AZURE_API_VERSION="2025-11-01-preview" @@ -33,5 +33,9 @@ export AZURE_API_VERSION="2025-11-01-preview" ## Prerequisites 1. Create an Azure OpenAI resource -2. Deploy a model (e.g., GPT-5.4) +2. Deploy a model such as GPT-6.1 Sol 3. Get the endpoint URL and API key from the Azure portal + + +Security testing with OpenAI models needs [Daybreak](https://openai.com/daybreak/) access, also on Azure. + diff --git a/docs/llm-providers/bedrock.mdx b/docs/llm-providers/bedrock.mdx index 2189e9876..fac00cd21 100644 --- a/docs/llm-providers/bedrock.mdx +++ b/docs/llm-providers/bedrock.mdx @@ -6,7 +6,7 @@ description: "Configure Strix with models via AWS Bedrock" ## Setup ```bash -export STRIX_LLM="bedrock/anthropic.claude-4-5-sonnet-20251022-v1:0" +export STRIX_LLM="bedrock/us.anthropic.claude-sonnet-5-5" ``` No API key required—uses AWS credentials from environment. @@ -36,10 +36,13 @@ Automatically uses instance role credentials. | Model | Description | |-------|-------------| -| `bedrock/anthropic.claude-4-5-sonnet-20251022-v1:0` | Claude 4.5 Sonnet | -| `bedrock/anthropic.claude-4-5-opus-20251022-v1:0` | Claude 4.5 Opus | -| `bedrock/anthropic.claude-4-5-haiku-20251022-v1:0` | Claude 4.5 Haiku | -| `bedrock/amazon.titan-text-premier-v2:0` | Amazon Titan Premier v2 | +| `bedrock/us.anthropic.claude-sonnet-5-5` | Claude Sonnet 5.5 | +| `bedrock/us.anthropic.claude-opus-5-5` | Claude Opus 5.5 | +| `bedrock/us.anthropic.claude-haiku-5-5` | Claude Haiku 5.5 | + + +Security testing with Claude needs the [Cyber Verification Program](https://support.claude.com/en/articles/14604842-cyber-verification-program) (CVP), also on Bedrock. + ## Prerequisites diff --git a/docs/llm-providers/novita.mdx b/docs/llm-providers/novita.mdx index 8ae514d46..5fbd0e2ff 100644 --- a/docs/llm-providers/novita.mdx +++ b/docs/llm-providers/novita.mdx @@ -8,7 +8,7 @@ description: "Configure Strix with Novita AI models" ## Setup ```bash -export STRIX_LLM="openai/moonshotai/kimi-k2.5" +export STRIX_LLM="openai/zai-org/glm-5.3" export LLM_API_KEY="your-novita-api-key" export LLM_API_BASE="https://api.novita.ai/openai" ``` @@ -18,11 +18,12 @@ export LLM_API_BASE="https://api.novita.ai/openai" | Model | Configuration | |-------|---------------| | GLM-5.3 | `openai/zai-org/glm-5.3` | +| Kimi K3.1 Pro | `openai/moonshotai/kimi-k3.1-pro` | | Kimi K3 | `openai/moonshotai/kimi-k3` | +| DeepSeek V4.1 Flash | `openai/deepseek/deepseek-v4.1-flash-1017` | | DeepSeek V4 Pro | `openai/deepseek/deepseek-v4-pro` | -| Kimi K2.5 | `openai/moonshotai/kimi-k2.5` | -| GLM-5 | `openai/zai-org/glm-5` | -| MiniMax M2.5 | `openai/minimax/minimax-m2.5` | +| MiniMax M3.1 Flash | `openai/minimax/minimax-m3.1-flash` | +| GLM-5.3 Flash | `openai/zai-org/glm-5.3-flash` | ## Get API Key diff --git a/docs/llm-providers/openai.mdx b/docs/llm-providers/openai.mdx index c8a486778..2d9cb88e6 100644 --- a/docs/llm-providers/openai.mdx +++ b/docs/llm-providers/openai.mdx @@ -6,13 +6,23 @@ description: "Configure Strix with OpenAI models" ## Setup ```bash -export STRIX_LLM="openai/gpt-5.4" +export STRIX_LLM="openai/gpt-6.1-sol" export LLM_API_KEY="sk-..." ``` ## Available Models -See [OpenAI Models Documentation](https://platform.openai.com/docs/models) for the full list of available models. +| Model | Description | +|-------|-------------| +| `openai/gpt-6.1-sol` | Best balance of capability and cost for agentic security work | +| `openai/gpt-6-astra` | Flagship, maximum capability | +| `openai/gpt-6-luna` | Fast and cheap | + +See [OpenAI Models Documentation](https://platform.openai.com/docs/models) for the full list. + + +Security testing with OpenAI models needs [Daybreak](https://openai.com/daybreak/) (Trusted Access for Cyber). Without it the models refuse most offensive tasks. [Request access](https://openai.com/form/enterprise-trusted-access-for-cyber/). + ## Get API Key @@ -25,7 +35,7 @@ See [OpenAI Models Documentation](https://platform.openai.com/docs/models) for t For OpenAI-compatible APIs: ```bash -export STRIX_LLM="openai/gpt-5.4" +export STRIX_LLM="openai/gpt-6.1-sol" export LLM_API_KEY="your-key" export LLM_API_BASE="https://your-proxy.com/v1" ``` diff --git a/docs/llm-providers/openrouter.mdx b/docs/llm-providers/openrouter.mdx index a16587599..417e46cd1 100644 --- a/docs/llm-providers/openrouter.mdx +++ b/docs/llm-providers/openrouter.mdx @@ -18,13 +18,19 @@ Access any model on OpenRouter using the format `openrouter//`: | Model | Configuration | |-------|---------------| -| GLM-5.3 (default) | `openrouter/z-ai/glm-5.3` | -| GPT-5.4 | `openrouter/openai/gpt-5.4` | -| Claude Sonnet 4.6 | `openrouter/anthropic/claude-sonnet-4.6` | -| Gemini 3 Pro | `openrouter/google/gemini-3-pro-preview` | +| GLM-5.3 (recommended) | `openrouter/z-ai/glm-5.3` | +| GPT-6.1 Sol | `openrouter/openai/gpt-6.1-sol` | +| GPT-6 Astra | `openrouter/openai/gpt-6-astra` | +| Claude Opus 5.5 | `openrouter/anthropic/claude-opus-5.5` | +| Claude Sonnet 5.5 | `openrouter/anthropic/claude-sonnet-5.5` | +| Gemini 4 Argon | `openrouter/google/gemini-4-argon` | +| Gemini 3.8 Flash | `openrouter/google/gemini-3.8-flash` | +| DeepSeek V4.1 Flash | `openrouter/deepseek/deepseek-v4.1-flash-1017` | | DeepSeek V4 Pro | `openrouter/deepseek/deepseek-v4-pro` | -| Kimi K3 | `openrouter/moonshotai/kimi-k3` | -| GLM-4.7 | `openrouter/z-ai/glm-4.7` | +| Kimi K3.1 Pro | `openrouter/moonshotai/kimi-k3.1-pro` | +| GLM-5.3 Flash | `openrouter/z-ai/glm-5.3-flash` | + +OpenAI, Anthropic and Gemini models keep their provider safeguards on OpenRouter. Security testing with them needs [Daybreak](https://openai.com/daybreak/), [CVP](https://support.claude.com/en/articles/14604842-cyber-verification-program) or [Fairwind](https://deepmind.google/fairwind-program/) access. ## Get API Key diff --git a/docs/llm-providers/overview.mdx b/docs/llm-providers/overview.mdx index e10327e63..ce285f6e2 100644 --- a/docs/llm-providers/overview.mdx +++ b/docs/llm-providers/overview.mdx @@ -9,19 +9,34 @@ Strix uses [LiteLLM](https://docs.litellm.ai/docs/providers) for model compatibi Set your model and API key: -| Model | Provider | Configuration | -| -------------------- | ----------------- | -------------------------------- | -| GLM-5.3 (default) | Z.ai (OpenRouter) | `openrouter/z-ai/glm-5.3` | -| GPT-5.4 | OpenAI | `openai/gpt-5.4` | -| Claude Sonnet 4.6 | Anthropic | `anthropic/claude-sonnet-4-6` | -| Gemini 3 Pro | Google Vertex | `vertex_ai/gemini-3-pro-preview` | -| DeepSeek V4 Pro | DeepSeek | `deepseek/deepseek-v4-pro` | -| Kimi K3 | Moonshot | `moonshot/kimi-k3` | +| Model | Provider | Configuration | +| --------------------- | ------------------------- | -------------------------------- | +| GLM-5.3 (recommended) | Vercel AI Gateway | `openai/zai/glm-5.3` | +| GLM-5.3 (recommended) | OpenRouter | `openrouter/z-ai/glm-5.3` | +| GPT-6.1 Sol | OpenAI | `openai/gpt-6.1-sol` | +| Claude Opus 5.5 | Anthropic | `anthropic/claude-opus-5-5` | +| Claude Sonnet 5.5 | Anthropic | `anthropic/claude-sonnet-5-5` | +| Gemini 4 Argon | Google Vertex | `vertex_ai/gemini-4-argon` | +| DeepSeek V4.1 Flash | DeepSeek | `deepseek/deepseek-flash` | +| DeepSeek V4 Pro | DeepSeek | `deepseek/deepseek-v4-pro` | +| Kimi K3.1 Pro | Moonshot | `moonshot/kimi-k3.1-pro` | -```bash + +Frontier OpenAI, Anthropic and Gemini models need a cyber access program for security testing: [Daybreak](https://openai.com/daybreak/) for OpenAI, the [Cyber Verification Program](https://support.claude.com/en/articles/14604842-cyber-verification-program) for Anthropic, and the [Fairwind Program](https://deepmind.google/fairwind-program/) for Gemini. + + + +```bash Vercel AI Gateway +export STRIX_LLM="openai/zai/glm-5.3" +export LLM_API_KEY="your-api-key" +export LLM_API_BASE="https://ai-gateway.vercel.sh/v1" +``` + +```bash OpenRouter export STRIX_LLM="openrouter/z-ai/glm-5.3" export LLM_API_KEY="your-api-key" ``` + ## Local Models @@ -47,7 +62,7 @@ See the [Local Models guide](/llm-providers/local) for setup instructions and re Access 100+ models through a single API. - Access models from multiple providers through one endpoint. + Access 100+ models through one OpenAI-compatible endpoint. Gemini 3 models via Google Cloud. @@ -69,9 +84,9 @@ Use LiteLLM's `provider/model-name` format: ``` openrouter/z-ai/glm-5.3 -openai/gpt-5.4 -anthropic/claude-sonnet-4-6 -vertex_ai/gemini-3-pro-preview -bedrock/anthropic.claude-4-5-sonnet-20251022-v1:0 +openai/gpt-6.1-sol +anthropic/claude-sonnet-5-5 +vertex_ai/gemini-4-argon +bedrock/us.anthropic.claude-sonnet-5-5 ollama/llama4 ``` diff --git a/docs/llm-providers/vercel-ai-gateway.mdx b/docs/llm-providers/vercel-ai-gateway.mdx index 54d3a362a..f661b4b9e 100644 --- a/docs/llm-providers/vercel-ai-gateway.mdx +++ b/docs/llm-providers/vercel-ai-gateway.mdx @@ -1,16 +1,16 @@ --- title: "Vercel AI Gateway" -description: "Configure Strix with models via Vercel AI Gateway" +description: "Configure Strix with models through Vercel AI Gateway" --- -[Vercel AI Gateway](https://vercel.com/docs/ai-gateway) provides an OpenAI-compatible API for models from multiple providers. +[Vercel AI Gateway](https://vercel.com/docs/ai-gateway) provides access to 100+ models from multiple providers through one OpenAI-compatible API. ## Setup Create an [AI Gateway API key](https://vercel.com/docs/ai-gateway/authentication-and-byok), then configure Strix: ```bash -export STRIX_LLM="openai/anthropic/claude-opus-5" +export STRIX_LLM="openai/zai/glm-5.3" export LLM_API_KEY="your-ai-gateway-api-key" export LLM_API_BASE="https://ai-gateway.vercel.sh/v1" ``` @@ -19,14 +19,30 @@ The first `openai/` segment tells Strix to use its OpenAI-compatible client. The ## Available Models -Use any language model returned by the AI Gateway models endpoint: +Access any model on the Gateway using the format `openai//`: + +| Model | Configuration | +|-------|---------------| +| GLM-5.3 (recommended) | `openai/zai/glm-5.3` | +| GPT-6.1 Sol | `openai/openai/gpt-6.1-sol` | +| GPT-6 Astra | `openai/openai/gpt-6-astra` | +| Claude Opus 5.5 | `openai/anthropic/claude-opus-5.5` | +| Claude Sonnet 5.5 | `openai/anthropic/claude-sonnet-5.5` | +| Gemini 4 Argon | `openai/google/gemini-4-argon` | +| Gemini 3.8 Flash | `openai/google/gemini-3.8-flash` | +| DeepSeek V4.1 Flash | `openai/deepseek/deepseek-v4.1-flash-1017` | +| DeepSeek V4 Pro | `openai/deepseek/deepseek-v4-pro` | +| Kimi K3.1 Pro | `openai/moonshotai/kimi-k3.1-pro` | +| GLM-5.3 Flash | `openai/zai/glm-5.3-flash` | + +OpenAI, Anthropic and Gemini models keep their provider safeguards on the Gateway. Security testing with them needs [Daybreak](https://openai.com/daybreak/), [CVP](https://support.claude.com/en/articles/14604842-cyber-verification-program) or [Fairwind](https://deepmind.google/fairwind-program/) access. + +The full list is at the [AI Gateway models page](https://vercel.com/ai-gateway/models) or the models endpoint: ```text https://ai-gateway.vercel.sh/v1/models ``` -Prefix its model ID with `openai/` when setting `STRIX_LLM`. For example, the Gateway model ID `anthropic/claude-opus-5` becomes `openai/anthropic/claude-opus-5` in Strix. - ## Get API Key 1. Open the [AI Gateway API key settings](https://vercel.com/docs/ai-gateway/authentication-and-byok) @@ -35,5 +51,6 @@ Prefix its model ID with `openai/` when setting `STRIX_LLM`. For example, the Ga ## Benefits -- Access models from multiple providers through one endpoint -- Track Gateway usage and cost in Vercel +- **Single API** — Access models from OpenAI, Anthropic, Google, Z.ai, and more +- **Bring your own keys** — Route through your own provider accounts when you want +- **Cost tracking** — Monitor Gateway usage and cost in Vercel diff --git a/docs/llm-providers/vertex.mdx b/docs/llm-providers/vertex.mdx index 72a718726..c1edc8c46 100644 --- a/docs/llm-providers/vertex.mdx +++ b/docs/llm-providers/vertex.mdx @@ -6,7 +6,7 @@ description: "Configure Strix with Gemini models via Google Cloud" ## Setup ```bash -export STRIX_LLM="vertex_ai/gemini-3-pro-preview" +export STRIX_LLM="vertex_ai/gemini-4-argon" ``` No API key required—uses Google Cloud Application Default Credentials. @@ -29,8 +29,12 @@ export GOOGLE_APPLICATION_CREDENTIALS="/path/to/service-account.json" | Model | Description | |-------|-------------| -| `vertex_ai/gemini-3-pro-preview` | Best overall performance for security testing | -| `vertex_ai/gemini-3-flash-preview` | Faster and cheaper | +| `vertex_ai/gemini-4-argon` | Best overall performance for security testing | +| `vertex_ai/gemini-3.8-flash` | Faster and cheaper | + + +Security testing with Gemini needs the [Fairwind Program](https://deepmind.google/fairwind-program/). Without it the cyber guardrails block most offensive tasks. + ## Project Configuration diff --git a/docs/quickstart.mdx b/docs/quickstart.mdx index dcd2e7c59..866fdbc23 100644 --- a/docs/quickstart.mdx +++ b/docs/quickstart.mdx @@ -25,15 +25,23 @@ description: "Install Strix and run your first security scan" ## Configuration -Set your LLM provider: +Set your LLM provider. We recommend GLM-5.3 through [Vercel AI Gateway](/llm-providers/vercel-ai-gateway) or [OpenRouter](/llm-providers/openrouter): -```bash + +```bash Vercel AI Gateway +export STRIX_LLM="openai/zai/glm-5.3" +export LLM_API_KEY="your-api-key" +export LLM_API_BASE="https://ai-gateway.vercel.sh/v1" +``` + +```bash OpenRouter export STRIX_LLM="openrouter/z-ai/glm-5.3" export LLM_API_KEY="your-api-key" ``` + -For best results, use `openrouter/z-ai/glm-5.3` (the default pick), `openai/gpt-5.4`, `anthropic/claude-opus-4-6`, or `openai/gpt-5.2`. +For best results, use `zai/glm-5.3`, `deepseek/deepseek-v4.1-flash-1017`, `anthropic/claude-opus-5-5` (needs [CVP](https://support.claude.com/en/articles/14604842-cyber-verification-program) access), or `openai/gpt-6.1-sol` (needs [Daybreak](https://openai.com/daybreak/) access). ## Run Your First Scan