# strix changelog

> Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.

- Vendor: usestrix
- Category: AI
- Platforms: Android
- Official site: https://strix.ai/
- Tracked by: What's New (https://whatsnew.fyi/product/strix)
- Harvested from: GitHub (usestrix/strix)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

## Releases

### v1.4.1

- Date: 2026-07-27
- Version: v1.4.1
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.4.1
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.4.1
- Labels: Platforms: Android

- **fixed** — Replace raw urllib with requests for external HTTPS calls to resolve frozen-build cert failures

##### What's Changed
* fix(tls): replace raw urllib with requests for external HTTPS calls (frozen-build cert failures) by @yoni-at-strix in https://github.com/usestrix/strix/pull/903
* chore: release v1.4.1 by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/912


**Full Changelog**: https://github.com/usestrix/strix/compare/v1.4.0...v1.4.1

### v1.4.0

- Date: 2026-07-27
- Version: v1.4.0
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.4.0
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.4.0
- Labels: Platforms: Android

- **added** — Add strix --update command for self-updating the CLI
- **added** — Add sign in with ChatGPT subscription for inference
- **added** — Add dedicated deduplication model
- **added** — Add read-only list_reports and get_report tools
- **added** — Add Linux ARM64 standalone release support
- **added** — Enable Bedrock/Anthropic prompt caching for Claude models
- **added** — Add graduated wrap-up warnings, budget reserve, and interactive budget pause/continue
- **changed** — Update CLI notifications
- **changed** — Quit after scan instead of hosting local viewer
- **changed** — Rename root agent to Strix
- **changed** — Move strix/viewer under strix/interface
- **changed** — Bound per-tool output before it enters agent history
- **changed** — Implement model-aware conversation compaction for long scans
- **changed** — Spill oversized tool output into the sandbox workspace
- **fixed** — Cap cryptography <49 to keep Intel macOS universal2 wheel
- **fixed** — Strip markdown code fence from poc_script_code before rendering in reports
- **fixed** — Resolve staged local-dir path to avoid symlink rejection on macOS
- **fixed** — Retry transient mid-stream provider errors instead of crashing the scan
- **fixed** — Don't dump raw warm-up traceback over the LLM error panel
- **fixed** — Wake parent when a child hits a terminal state (MaxTurnsExceeded)

##### What's Changed
* feat(cli): update notifications + self-update (strix --update) by @bearsyankees in https://github.com/usestrix/strix/pull/807
* chore(deps): bump cryptography to 49.0.0 and pyasn1 to 0.6.4 by @bearsyankees in https://github.com/usestrix/strix/pull/856
* fix(deps): cap cryptography <49 to keep Intel macOS universal2 wheel by @bearsyankees in https://github.com/usestrix/strix/pull/859
* Quit after scan instead of hosting local viewer by @yoni-at-strix in https://github.com/usestrix/strix/pull/858
* Pin release-workflow actions to commit SHAs + least-privilege token by @timhaines in https://github.com/usestrix/strix/pull/862
* chore(deps): bump setuptools to 83.0.0 in uv.lock by @0xallam in https://github.com/usestrix/strix/pull/872
* Sign in with a ChatGPT subscription for inference by @yoni-at-strix in https://github.com/usestrix/strix/pull/854
* docs(cli): document exit code 1 and clarify exit 0 semantics by @dvirarad in https://github.com/usestrix/strix/pull/871
* runtime: resolve staged local-dir path to avoid symlink rejection on macOS by @utkutugrul in https://github.com/usestrix/strix/pull/857
* feat(dedupe): add dedicated deduplication model by @kusonooyasumi in https://github.com/usestrix/strix/pull/823
* Rename root agent to Strix by @0xallam in https://github.com/usestrix/strix/pull/874
* fix(reports): strip markdown code fence from poc_script_code before rendering by @0xallam in https://github.com/usestrix/strix/pull/879
* refactor: move strix/viewer under strix/interface by @0xallam in https://github.com/usestrix/strix/pull/888
* docs(skills): remove references to tools not installed in the sandbox by @0xallam in https://github.com/usestrix/strix/pull/890
* feat(reporting): add read-only list_reports + get_report tools by @0xallam in https://github.com/usestrix/strix/pull/889
* feat(context): bound per-tool output before it enters agent history by @0xallam in https://github.com/usestrix/strix/pull/880
* feat(context): model-aware conversation compaction for long scans by @0xallam in https://github.com/usestrix/strix/pull/881
* feat(context): spill oversized tool output into the sandbox workspace by @0xallam in https://github.com/usestrix/strix/pull/882
* fix(runtime): retry transient mid-stream provider errors instead of crashing the scan by @0xallam in https://github.com/usestrix/strix/pull/891
* Add Linux ARM64 standalone release support by @MBemera in https://github.com/usestrix/strix/pull/886
* feat(llm): enable Bedrock/Anthropic prompt caching for Claude models by @seanturner83 in https://github.com/usestrix/strix/pull/772
* fix(cli): don't dump raw warm-up traceback over the LLM error panel by @0xallam in https://github.com/usestrix/strix/pull/896
* feat(runtime): graduated wrap-up warnings, budget reserve, and interactive budget pause/continue by @0xallam in https://github.com/usestrix/strix/pull/893
* fix(runtime): wake parent when a child hits a terminal state (MaxTurnsExceeded) by @0xallam in https://github.com/usestrix/strix/pull/897
* chore: release v1.4.0 by @0xallam in https://github.com/usestrix/strix/pull/898

##### New Contributors
* @timhaines made their first contribution in https://github.com/usestrix/strix/pull/862
* @dvirarad made their first contribution in https://github.com/usestrix/strix/pull/871
* @utkutugrul made their first contribution in https://github.com/usestrix/strix/pull/857
* @kusonooyasumi made their first contribution in https://github.com/usestrix/strix/pull/823
* @MBemera made their first contribution in https://github.com/usestrix/strix/pull/886

**Full Changelog**: https://github.com/usestrix/strix/compare/v1.3.1...v1.4.0

### v1.3.1

- Date: 2026-07-22
- Version: v1.3.1
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.3.1
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.3.1
- Labels: Platforms: Android

- **changed** — Bump default inner-sandbox image to 1.1.0

##### What's Changed
* sandbox: bump default inner-sandbox image to 1.1.0 by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/850
* chore: release v1.3.1 by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/853


**Full Changelog**: https://github.com/usestrix/strix/compare/v1.3.0...v1.3.1

### v1.3.0

- Date: 2026-07-22
- Version: v1.3.0
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.3.0
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.3.0
- Labels: Platforms: Android

- **fixed** — Keep /app/.venv/bin on the login-shell PATH so python is accessible
- **fixed** — Make root agent orchestrate-only and fold fixing into reporting
- **changed** — Reduce sandbox image size from 7.2GB to 3.8GB through cache cleanup, multi-stage Go build, and dropping ZAP
- **changed** — Polish local viewer UI and add Feedback & support tab
- **changed** — Add prominent scan switcher to local viewer and rename to pentest terminology

##### What's Changed
* fix(container): keep /app/.venv/bin on the login-shell PATH so python… by @bearsyankees in https://github.com/usestrix/strix/pull/839
* fix(prompt): make root agent orchestrate-only and fold fixing into reporting by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/827
* sandbox: shrink image 7.2GB → 3.8GB (cache cleanup, multi-stage Go build, drop ZAP) by @seanturner83 in https://github.com/usestrix/strix/pull/474
* Local viewer: UI polish and a Feedback & support tab by @0xallam in https://github.com/usestrix/strix/pull/847
* Local viewer: prominent scan switcher + rename to "pentest" terminology by @0xallam in https://github.com/usestrix/strix/pull/848
* chore: release v1.3.0 by @0xallam in https://github.com/usestrix/strix/pull/849


**Full Changelog**: https://github.com/usestrix/strix/compare/v1.2.0...v1.3.0

### v1.2.0

- Date: 2026-07-21
- Version: v1.2.0
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.2.0
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.2.0
- Labels: Platforms: Android

- **fixed** — Stage symlink-safe copies for LocalDir uploads
- **fixed** — Retry transient sandbox startup failures
- **added** — Resolve sandbox ports over a shared Docker network
- **fixed** — Bound per-agent image memory with proactive budget and inherited-context scrub
- **added** — Opt-in resource limits for docker sandbox containers
- **fixed** — Cap sandbox container logs to prevent host disk exhaustion
- **fixed** — Close the docker client on session cleanup
- **fixed** — Down-rate or skip findings on demo data and demo environments
- **fixed** — Serialize and reconnect Caido client with actionable HTTPQL errors and sandbox tool guidance
- **fixed** — Restore cost tracking for OpenRouter and other LiteLLM-routed models
- **fixed** — Retry statusless mid-stream provider errors for quota, billing, and transient issues
- **fixed** — Add per-turn model request timeout so stalled streams fail fast and retry
- **added** — Recon asset discovery skill
- **added** — Grafana Prometheus observability pivot skill
- **fixed** — Recompute Content-Length when replaying a modified body
- **fixed** — Strip transfer encoding
- **fixed** — Prevent code-fence breakout in vulnerability markdown
- **added** — Local run viewer with email reports, run history, and the platform suite
- **added** — Active Directory and Kerberos domain testing skill

##### What's Changed
* fix(runtime): stage symlink-safe copies for LocalDir uploads by @bearsyankees in https://github.com/usestrix/strix/pull/766
* fix(runtime): retry transient sandbox startup failures by @bearsyankees in https://github.com/usestrix/strix/pull/768
* feat(runtime): resolve sandbox ports over a shared Docker network by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/775
* fix(core): bound per-agent image memory (proactive budget + inherited-context scrub) by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/779
* feat(runtime): opt-in resource limits for docker sandbox containers by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/780
* Revert "fix(runtime): retry transient sandbox startup failures (#768)" by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/782
* docs(prompts,skills): bound recon output for shared-disk hygiene by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/783
* docs(tools): guide proportional wait_for_message timeouts by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/784
* docs(prompts,skills): stop hardcoding /workspace/scratch path by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/786
* fix(runtime): cap sandbox container logs to prevent host disk exhaustion by @0xallam in https://github.com/usestrix/strix/pull/785
* fix(runtime): close the docker client on session cleanup by @0xallam in https://github.com/usestrix/strix/pull/787
* fix(prompt): down-rate or skip findings on demo data / demo environments by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/793
* fix(proxy,tooling): serialize+reconnect Caido client, actionable HTTPQL errors, sandbox tool guidance by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/794
* revert(proxy): drop overfit Caido reconnect/HTTPQL band-aids, keep serialization lock by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/799
* fix(report): restore cost tracking for OpenRouter and other LiteLLM-routed models by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/801
* fix(llm): retry statusless mid-stream provider errors (quota/billing/transient) by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/790
* fix(llm): add per-turn model request timeout so stalled streams fail fast and retry by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/802
* fix(llm): use a JSON-serializable per-turn model timeout by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/803
* recon asset discovery skill by @bearsyankees in https://github.com/usestrix/strix/pull/809
* docs(skills): add grafana_prometheus observability pivot skill by @bearsyankees in https://github.com/usestrix/strix/pull/812
* fix(proxy): recompute Content-Length when replaying a modified body by @thejesh23 in https://github.com/usestrix/strix/pull/816
* strip transfer encoding by @bearsyankees in https://github.com/usestrix/strix/pull/820
* fix(report): prevent code-fence breakout in vulnerability markdown by @thejesh23 in https://github.com/usestrix/strix/pull/817
* docs(reporting): add CVSS calibration guidance to reduce severity inf… by @bearsyankees in https://github.com/usestrix/strix/pull/821
* docs(skills): add Active Directory / Kerberos domain testing skill by @bearsyankees in https://github.com/usestrix/strix/pull/825
* Local run viewer: email reports, run history, and the platform suite by @yoni-at-strix in https://github.com/usestrix/strix/pull/813
* chore: release v1.2.0 by @devin-ai-integration[bot] in https://github.com/usestrix/strix/pull/826

##### New Contributors
* @thejesh23 made their first contribution in https://github.com/usestrix/strix/pull/816
* @yoni-at-strix made their first contribution in https://github.com/usestrix/strix/pull/813

**Full Changelog**: https://github.com/usestrix/strix/compare/v1.1.0...v1

_[Truncated at 4000 characters — full notes: https://github.com/usestrix/strix/releases/tag/v1.2.0]_

### v1.1.0

- Date: 2026-07-14
- Version: v1.1.0
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.1.0
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.1.0
- Labels: Platforms: Android

- **added** — Weak-password detection security skill
- **added** — LLM prompt-injection security skill
- **added** — GCP and Auth0 reconnaissance skills
- **added** — Five new security skills for OAuth, AWS, prototype pollution, deserialization, and Django
- **added** — Skill-directory registration
- **added** — SARIF 2.1.0 emitter for GitHub code-scanning and ASPM ingestion
- **added** — STRIDE tagging of SARIF rules derived from CWE
- **added** — New dependency reporting fields
- **added** — Configurable token and cost usage limits with --max-budget-usd option
- **added** — Bind-mount option for large target repositories
- **added** — --target list-file CLI option
- **added** — force_required_tool_choice setting and routed OpenAI required tool choice
- **added** — Scan-agent tool registration and root scan prompt options
- **added** — Warning when configured LLM is not a recommended or frontier model
- **changed** — Use core LiteLLM dependency and cap openai<2.45 with litellm[proxy]
- **changed** — Require advisory_cvss for dependency findings with SCA TUI renderer
- **changed** — Omit SARIF version-control provenance for multi-repo scans
- **changed** — Attribute OpenRouter usage to the Strix app
- **changed** — Route ollama models through ollama_chat for tool calling support
- **fixed** — Default sandbox exec commands to Bash so source works
- **fixed** — Graceful stop with resume hint on persistent RateLimitError
- **fixed** — Collapse child-agent initial input into a single user message
- **fixed** — Atomic CSV and MD writes to prevent corruption on crash
- **fixed** — Swallow torn-down docker socket on sandbox delete
- **fixed** — Strip ANSI escapes and control bytes from terminal tool output
- **fixed** — Reduce scroll stutter via throttled refresh and render caching
- **fixed** — Restore snappy sweep and progress animation frame rate
- **changed** — Provider import-error hints for Bedrock and Vertex with full exception-chain walk
- **changed** — Environment variables win over persisted JSON across all aliases
- **changed** — Report cost for streamed OpenRouter calls
- **fixed** — Lower Linux release glibc baseline

#### Strix v1.1.0

First release since v1.0.4. Highlights below (~56 merged PRs).

##### New security skills
- Weak-password detection skill (#621, #654)
- LLM prompt-injection skill (#616)
- GCP and Auth0 reconnaissance skills
- Five new skills: OAuth, AWS, prototype pollution, deserialization, Django (#617)
- Skill-directory registration (#746)

##### SARIF / CI integration
- SARIF 2.1.0 emitter for GitHub code-scanning / ASPM ingestion (#626)
- STRIDE tagging of SARIF rules derived from CWE (#708)
- Omit SARIF version-control provenance for multi-repo scans (#726)

##### Dependency / SCA reporting
- New dependency reporting fields (#751)
- Require `advisory_cvss` for dependency findings + SCA TUI renderer (#753)

##### Cost & scope controls
- Configurable token / cost usage limits, `--max-budget-usd` (#576)
- Bind-mount option for large target repos (#577)
- `--target` list-file CLI option (#711)

##### LLM / provider
- Use core LiteLLM dependency (#752); cap `openai<2.45` + `litellm[proxy]` so fresh installs run (#748)
- `force_required_tool_choice` setting (#730) and routed OpenAI required tool choice (#732)
- Scan-agent tool registration (#733); root scan prompt options (#750)
- Attribute OpenRouter usage to the Strix app (#760)
- Warn when the configured LLM is not a recommended/frontier model (#586)
- Route ollama models through `ollama_chat` so tool calling works (#562)
- Report cost for streamed OpenRouter calls (#634)

##### Reliability / fixes
- Default sandbox exec commands to Bash so `source` works (#764)
- Provider import-error hints for Bedrock/Vertex, full exception-chain walk (#588)
- Env vars win over persisted JSON across all aliases (#689)
- Graceful stop with resume hint on persistent RateLimitError (#593)
- Collapse child-agent initial input into a single user message (#589)
- Atomic CSV/MD writes to prevent corruption on crash (#628, #631); csv_path indentation (#637); avoid note-ID collisions (#630)
- Swallow torn-down docker socket on sandbox delete (#721); Caido HTTPS scheme (#722) + configured UI domains (#723)
- Keep verbose `openai.agents` DEBUG off sandbox stdout (#704)
- Strip ANSI escapes / control bytes from terminal tool output (#554)

##### TUI
- Reduce scroll stutter via throttled refresh + render caching (#687)
- "More content available" hint for long views (#687)
- Restore snappy sweep/progress animation frame rate (#759)

##### CI / telemetry / chores
- Lower Linux release glibc baseline (#707)
- Deduplicate scan-ended telemetry (#758); minor telemetry updates (#761); drop unhandled-exception collection (#585)
- Config-loader tests (#596); report-writer artifact tests (#667); uv.lock refresh (#606); README/docs updates


##### Contributors
Thanks to everyone who contributed to this release:

@0xallam @AtifAssari @Ayush7614 @Hardik-369 @Rome-1 @RudraDudhat2509 @Sonai124 @Stark-SK @ViperDroid @Zizouk22 @bastitva0-blip @bearsyankees @chirag127 @dpersek @e345ee @mhspektr @ousamabenyounes @sean-kim05 @seanturner83 @singe

### v1.0.4

- Date: 2026-06-09
- Version: v1.0.4
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.0.4
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.0.4
- Labels: Platforms: Android

- **changed** — Make TUI quit instant by SIGKILL-ing the sandbox container
- **fixed** — Swallow sandbox container races in the stream consumer
- **fixed** — Strip all images from session on vision-rejection, not just the latest
- **fixed** — Strip ANSI escapes and control bytes from terminal tool output

##### What's Changed
* Make TUI quit instant by SIGKILL-ing the sandbox container by @0xallam in https://github.com/usestrix/strix/pull/548
* Swallow sandbox container races in the stream consumer by @0xallam in https://github.com/usestrix/strix/pull/552
* Strip all images from session on vision-rejection, not just the latest by @0xallam in https://github.com/usestrix/strix/pull/553
* Strip ANSI escapes and control bytes from terminal tool output by @0xallam in https://github.com/usestrix/strix/pull/554
* Bump 1.0.3 -> 1.0.4 by @0xallam in https://github.com/usestrix/strix/pull/557


**Full Changelog**: https://github.com/usestrix/strix/compare/v1.0.3...v1.0.4

### v1.0.3

- Date: 2026-06-09
- Version: v1.0.3
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.0.3
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.0.3
- Labels: Platforms: Android

- **fixed** — Fix SDK tracing leak and orphan docker on TUI quit
- **fixed** — Gate reasoning_effort by LiteLLM model registry
- **changed** — Simplify LLM configuration layer
- **changed** — Show "Send message to resume" on the left of the status bar
- **changed** — Gate Reasoning(effort=...) on registry support
- **changed** — Use observed LiteLLM cost for LiteLLM-routed calls
- **changed** — Simplify cost ledger to one bucket

##### What's Changed
* fix: SDK tracing leak + orphan docker on TUI quit (closes #512) by @0xallam in https://github.com/usestrix/strix/pull/522
* fix: gate reasoning_effort by LiteLLM model registry (closes #517) by @0xallam in https://github.com/usestrix/strix/pull/523
* Simplify LLM configuration layer (closes #504) by @0xallam in https://github.com/usestrix/strix/pull/524
* Show "Send message to resume" on the left of the status bar by @0xallam in https://github.com/usestrix/strix/pull/525
* Gate Reasoning(effort=...) on registry support by @0xallam in https://github.com/usestrix/strix/pull/528
* Use observed LiteLLM cost for LiteLLM-routed calls by @0xallam in https://github.com/usestrix/strix/pull/529
* Simplify cost ledger to one bucket by @0xallam in https://github.com/usestrix/strix/pull/531
* Bump 1.0.2 -> 1.0.3 by @0xallam in https://github.com/usestrix/strix/pull/537


**Full Changelog**: https://github.com/usestrix/strix/compare/v1.0.2...v1.0.3

### v1.0.2

- Date: 2026-05-28
- Version: v1.0.2
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.0.2
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.0.2
- Labels: Platforms: Android

- **fixed** — reasoning models now accept tool_choice=required

##### What's Changed
* fix: reasoning models reject tool_choice=required; bump to 1.0.2 (closes #503, #505) by @0xallam in https://github.com/usestrix/strix/pull/508


**Full Changelog**: https://github.com/usestrix/strix/compare/v1.0.1...v1.0.2

### v1.0.1

- Date: 2026-05-27
- Version: v1.0.1
- Original notes: https://github.com/usestrix/strix/releases/tag/v1.0.1
- Permalink: https://whatsnew.fyi/product/strix/releases/v1.0.1
- Labels: Platforms: Android

- **fixed** — PyInstaller bundle missing agents SDK data and wrongly excluding gql

##### What's Changed
* fix: PyInstaller bundle is broken (missing agents SDK data + wrongly excluded gql); bump to 1.0.1 by @0xallam in https://github.com/usestrix/strix/pull/502


**Full Changelog**: https://github.com/usestrix/strix/compare/v1.0.0...v1.0.1