Introduction
Xalgorix is a fully autonomous AI-powered penetration testing agent that uses LLMs to drive comprehensive security assessments — from reconnaissance to exploitation — using real security tools, with zero human intervention.
What is Xalgorix?
Give it a target URL, and Xalgorix will find vulnerabilities, generate a professional PDF report, and send Discord alerts — all automatically. It leverages:
- 70+ security tools for comprehensive testing
- 20-phase methodology covering all aspects of pentesting
- Multiple LLM providers including MiniMax, OpenAI, Anthropic, DeepSeek, and more
- Real-time web dashboard with live feed and token tracking
Key Features
Supported LLM Providers
| Provider | Models |
|---|---|
MiniMax |
MiniMax-M2.5, MiniMax-Text-01 |
OpenAI |
gpt-5.4, gpt-5, o1, o3, o1-preview |
Anthropic |
claude-opus-4.6, claude-sonnet-4.6 |
DeepSeek |
deepseek-v4, deepseek-v3, deepseek-coder |
Google |
gemini-3.1-pro, gemini-2.0-flash |
Groq |
llama-4, qwen3, mixtral (use model name directly) |
Ollama |
llama4, qwen3, llama3 (local) | DeepSeek |
deepseek-v4, deepseek-chat |
Google |
gemini-3.1-pro |
Groq |
llama-4-70b |
Ollama |
llama3, codellama (local) |
Custom |
Any OpenAI-compatible API |
Custom Provider
Xalgorix supports any OpenAI-compatible API. Set XALGORIX_API_BASE to your provider's endpoint and use openai/ as the provider prefix.
Quick Start
Get up and running in minutes:
bash
# Install via Go
go install github.com/xalgord/xalgorix/cmd/xalgorix@latest
# Or build from source
git clone https://github.com/xalgord/xalgorix.git
cd xalgorix
./build.sh --install
Default Port
The web dashboard runs on port 1337 by default (not 8080).
Installation
Go Installation
bash
# Install latest version
go install github.com/xalgord/xalgorix/cmd/xalgorix@latest
Build from Source
bash
# Clone repository
git clone https://github.com/xalgord/xalgorix.git
cd xalgorix
# Build and install
./build.sh --install
# Or just build
make
Systemd Service (Linux)
bash
# Install and start as service
xalgorix --start
# Stop the service
xalgorix --stop
# Restart
xalgorix --restart
Auto-Install Tools
Xalgorix automatically detects missing tools and installs them. 70+ security tools with smart package mapping!