mirror of
https://github.com/usestrix/strix.git
synced 2026-08-28 05:25:00 +00:00
56 lines
2.1 KiB
Text
56 lines
2.1 KiB
Text
---
|
|
title: "Introduction"
|
|
description: "Managed security testing without local setup"
|
|
---
|
|
|
|
Skip the setup. Run Strix in the cloud at [app.strix.ai](https://app.strix.ai).
|
|
|
|
## Features
|
|
|
|
<CardGroup cols={2}>
|
|
<Card title="No Setup Required" icon="cloud">
|
|
No Docker, API keys, or local installation needed.
|
|
</Card>
|
|
<Card title="Full Reports" icon="file-lines">
|
|
Detailed findings with remediation guidance.
|
|
</Card>
|
|
<Card title="Team Dashboards" icon="users">
|
|
Track vulnerabilities and fixes over time.
|
|
</Card>
|
|
<Card title="GitHub Integration" icon="github">
|
|
Automatic scans on pull requests.
|
|
</Card>
|
|
</CardGroup>
|
|
|
|
## What You Get
|
|
|
|
- **Penetration test reports** — Validated findings with PoCs
|
|
- **Shareable dashboards** — Collaborate with your team
|
|
- **CI/CD integration** — Block risky changes automatically
|
|
- **Continuous monitoring** — Catch new vulnerabilities quickly
|
|
|
|
## Getting Started
|
|
|
|
1. Sign up at [app.strix.ai](https://app.strix.ai)
|
|
2. Connect your repository or enter a target URL
|
|
3. Launch your first scan
|
|
|
|
## Scan Local Source
|
|
|
|
Send a local working tree to the managed white-box scanner without connecting a source-control provider:
|
|
|
|
```bash
|
|
# Review the exact file manifest first. Nothing is uploaded.
|
|
strix cloud scans start --source . --dry-run --show-files --json
|
|
|
|
# Approve the reviewed selection, upload it, and wait for the scan.
|
|
strix cloud scans start --source . --yes --engagement-type code_review --wait
|
|
```
|
|
|
|
In a Git repository, Strix includes tracked files and untracked files that are not ignored. Hidden files, `.git`, symlinks, dependencies and build output, secret-like filenames, and nested archives are excluded by default. Use `.strixignore` or repeat `--exclude GLOB` for project-specific exclusions. `--include-hidden`, `--include-sensitive`, and `--include-archives` are explicit opt-ins.
|
|
|
|
The CLI limits individual files, total expanded bytes, archive bytes, and file count. Non-interactive environments must pass `--yes`, so an agent cannot upload a workspace without an explicit approval flag.
|
|
|
|
<Card title="Try Strix Cloud" icon="rocket" href="https://app.strix.ai">
|
|
Run your first pentest in minutes.
|
|
</Card>
|