Show HN: Xalgorix – open-source AI pentester that proves vulnerabilities

Xalgorix, an open-source AI penetration testing tool, launched publicly on August 19, 2026, with a post to Hacker News by its author, xalgord. The tool is positioned as an AI-driven pentester that goes beyond identifying vulnerabilities to actively proving them through exploitation.

Per the Show HN submission, the project's core claim is that it can demonstrate vulnerabilities rather than simply flag them — a distinction that separates it from traditional automated scanners, which typically stop at detection. The project's homepage is hosted at xalgorix.com.

The tool is open-source, meaning its code is publicly available for inspection, contribution, and self-hosting. Beyond those details, the submission provides limited specifics about the underlying architecture, the AI models it uses, the types of vulnerabilities it targets, or what languages and frameworks it was built with. No founding team, company structure, or funding information was disclosed in the source material.

The HN post drew 3 points and 3 comments at the time of this writing, indicating early-stage community interest. No corroborating sources or independent coverage of the launch were available at the time of publication.

Automated and AI-assisted penetration testing is an active area of development, with both commercial players and open-source projects competing to reduce the manual labor involved in security assessments. The specific angle of producing exploit proof-of-concept output — rather than scored findings — addresses a common practitioner complaint that scanner output requires significant manual follow-up to validate. Whether Xalgorix delivers on that premise at meaningful scale is not yet confirmed by independent testing cited in the available sources.

No roadmap, planned features, or next steps were mentioned in the submission. Further details, documentation, and the source code repository would be expected on or linked from xalgorix.com.