Xalgorix – open-source AI pentester that proves vulnerabilities
Point Xalgorix at your app or repo. An autonomous AI pentester finds vulnerabilities, proves each with a working exploit, and hands engineers the fix. Runs in CI. Scans from $1, credits never expire.
What it does
Point Xalgorix at your app or repo. An autonomous AI agent runs a full pentest, proves every finding with a working exploit, and hands your engineers the fix — no wall of false positives to triage. Gate releases in CI on verified results, and give auditors dated, evidence-backed reports. We pointed Xalgorix at pentest-ground.com:9000 — a public, deliberately-vulnerable target. In about 17 minutes it returned 9 findings and reproduced every exploit before reporting it. Arbitrary Python code as root via the /eval endpoint (uid=0 confirmed). Auth bypass on /tokens; dumped 21 accounts with plaintext passwords. /user/{id} returned every account's password by incrementing the id. Add Xalgorix to…from xalgorix.com
Does the same job
all alternatives →- XAXalgorix – Autonomous AI Pentesting AgentJul 2026 · github.com · ▲5
Self-hosted AI security testing with a local Web UI, live agent telemetry, verified findings, and branded PDF reports.
Astra Autonomous PentestJun 2026 · getastra.com · ▲406AI agents that find, validate, and fix every vulnerability
More ai this month
the category →
I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.
AI · 17d ago · simedw.com
Astute▲585Automate your B2B brand going viral, with new media creators
AI · 19d ago · company-app.joinastute.com
Hey HN, Henry from Cactus here! We previously released Cactus Needle, a 14MB agentic LLM for tool call, device use, and structured extraction for phones, wearables, smart homes, small robots and microcontrollers. We got really great feedback here, and have now incorporated the suggestions to release Needle 2. The whole model is a single 14MB binary that runs a full session in 28MB of RAM; 45m parameters at 2bit compression. Needle hits 500 tokens/sec decode speed on a Raspberry Pi 5, sits between 400-1,500 tokens/sec on VR devices like Meta Quest 3S and Apple Vision Pro, and ranges…
AI · 27d ago · cactuscompute.com
Launched alongside, August 2026
the whole month →- TL
Life & fun · 10d ago · louisabraham.github.io
- SA
Hello HN! I found that picking out plausible but diverse skin tones for my digital art and game development projects was kind of difficult, and I got curious about if there was a way to define a color space that made it easy. I've built a color picker and procedural generation algorithm based on the space as well as a bunch of other fun js features and demos throughout the page that use the equations. If you find it interesting, I have lots of explanations of how I built it and what properties the space has. The methodology might be a bit shaky, but hopefully the result is as helpful for…
Life & fun · Aug 2026 · toneyalexander.github.io
I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.
AI · 17d ago · simedw.com