would love it to see it h2h against https://github.com/usestrix/strix (45k stars)

They are entirely different products

yeah you mean because OAI is only whitebox? or expand on that a bit, haven't played around a ton w the oss codex sec

granola's disclosure: https://docs.granola.ai/help-center/policies/security-contri...

https://www.strix.ai/blog/granola -> technical writeup

fixed now

Thanks! Happy to have my comment hidden by the mods if they get around to it.

Perhaps the community could band together and crowdsource the moderation action through flags. Kidding.

appreciate the feedback!!

apologies, just a vc firm

The guidelines require using the same title on HN as is on the original post.

oh apologies, thanks for the reminder

Even when the author submits? :)

Yes... unless we think it's fine to tailor a title to activate a particular reaction from the HN audience :)

Strix (strix.ai, https://github.com/usestrix/strix)| Founding Engineer | NYC/SF

We built the largest open-source AI pentesting framework — 25k GitHub stars, 80k active users, 15B LLM tokens processed daily, 1,800 pentests run per day. Two of us right now. You'd be the third.

Looking for a founding-engineer engineer who's done 0→1 before and wants to own the architecture of something already at scale. You'll touch everything — infra, product, research tooling. Python/TypeScript stack, AI-native workflows, real security problems.

Email hiring@usestrix.com — tell us something you've built and why it was hard.

https://x.com/steipete/status/2044423791405924562 very soon it seems...

I don't know if I fully agree with this -- how many people were actually self-hosting cal infra? I def could be wrong though

The issue isn’t would-be customers going to the trouble of self hosting to save a measly $30/month.

The issue is competitors popping up to clone your offering with your own codebase.

it's not necessarily about people self hosting it, it's about people preferring to pay for hosted stuff that is open source (e.g. I pay for Plausible).

Now it's a lot easier to rewrite open source stuff to get around licensing requirements and have an LLM watch the repo and copy all improvements and fixes, so the bar for a competitor to come along and get 10 years of work for free it a lot lower.

+1, at this point all companies need to be continuously testing their whole stack. The dumb scanners are now a thing of the past, the second your site goes live it will get slammed by the latest AI hackers