Xalgorix - Showcase Project
Listed August 21, 2026
About Xalgorix
Open-source AI pentesting with exploit-verified findings
Xalgorix is an Apache-2.0 open-source autonomous AI pentester for authorized security testing. It follows a structured 22-phase methodology across reconnaissance, authentication, injection, SSRF, IDOR/BOLA, APIs, file uploads, business logic, cloud exposure, WebSockets, and more. A separate verifier independently reproduces each candidate finding before it is reported, so teams get evidence-backed results instead of a long false-positive queue. The self-hosted Go and TypeScript project runs locally, keeps scan data in your infrastructure, and supports multiple LLM providers. It includes a local dashboard, CLI, Docker image, browser-assisted DAST, source-code review, live telemetry, CVSS scoring, proof-of-concept evidence, remediation guidance, and branded PDF reports. Use Xalgorix only on systems you own or have explicit permission to test.
Project details
Website: https://github.com/xalgorix/xalgorix