> For the complete documentation index, see [llms.txt](https://docs.monarchlinux.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.monarchlinux.com/basics/pentest-tools/strix.md).

# Strix

Install Strix on Monarch, configure a model, and run pentests with authenticated Docker access.

Strix is an AI-assisted penetration-testing CLI. It runs its testing environment in Docker and can assess a web application, a codebase, or an API specification. Run it only against targets you are authorized to test.

## Install

Open **Monarch Menu → Software → Cyber → Strix**. Monarch installs the `strix-agent` Python package with `pipx`. You can also install it from a terminal:

```bash
pipx install strix-agent
```

Check the installation with `strix --version`. To update it later, run `pipx upgrade strix-agent`.

## Configure a model and Docker access

Strix needs a supported model and, for most providers, an API key. Create or edit `~/.strix/cli-config.json` with your provider's values:

```json
{
  "env": {
    "STRIX_LLM": "openrouter/z-ai/glm-5.3",
    "LLM_API_KEY": "your-provider-api-key"
  }
}
```

This example uses OpenRouter; choose a model and key supported by your own provider. Keep the file private with `chmod 600 ~/.strix/cli-config.json`. See [Strix's configuration reference](https://docs.strix.ai/advanced/configuration) for other providers and local models.

Docker must be available. Monarch grants authenticated, session-scoped Docker access with `monarch-launch-docker-session`. Check it from a terminal:

```bash
monarch-launch-docker-session docker info
```

Enter your password if prompted. Strix's configuration file is read from your home directory inside that session.

## Run a scan

From the directory where you want the results, start with a quick scan of an authorized target:

```bash
monarch-launch-docker-session strix --target https://app.example.test --scan-mode quick
```

Replace the example URL with your target. To inspect local source code, use `--target ./my-app` instead. Strix mounts a local target directory into its sandbox with write access, so save or commit your work before scanning it. The first run downloads the Docker sandbox image.

Strix writes each run under `./strix_runs/<run-name>/` in the directory where you started it. From that directory, run `strix view` to open the latest run in a local browser. See the [Strix quick start](https://docs.strix.ai/quickstart) and [CLI reference](https://docs.strix.ai/usage/cli) for target types, scan modes, and more options.