xalgorix
Sign in

integrations

Plug in the LLM,
the proxy, the inbox.

Xalgorix Cloud connects directly into your engineering workflows and pipeline. Orchestrated security tools, frontier AI models, proxy pools, and CI/CD connectors — engineered for seamless, autonomous security testing.

LLM providers (9)Notifications (1)Email (1)Proxy & traffic (2)Runtime (3)Reports (3)
github app · automated reviews

Security reviews on every pull request

Connect Xalgorix Cloud to your repositories. Install the GitHub App once and Xalgorix automatically reviews each PR's diff, detects security regressions, and comments verified findings directly on code. Comment @xalgorix review to re-run on demand.

Add to GitHub→Read the docs

LLM providers

9 integrations
Op

OpenAI

Available

Default base https://api.openai.com/v1. Use models like openai/gpt-5.4 via XALGORIX_LLM.

XALGORIX_LLM=openai/gpt-5.4
An

Anthropic

Available

Default base https://api.anthropic.com. Set the model with the anthropic/ prefix.

XALGORIX_LLM=anthropic/claude-…
De

DeepSeek

Available

Default base https://api.deepseek.com/v1.

XALGORIX_LLM=deepseek/…
Gr

Groq

Available

OpenAI-compatible endpoint at https://api.groq.com/openai/v1.

XALGORIX_LLM=groq/…
Go

Google Gemini

Available

Default base https://generativelanguage.googleapis.com/v1. Also accepts the gemini/ prefix.

XALGORIX_LLM=google/gemini-2.5-pro
Ol

Ollama (local)

Available

Run models locally; default base http://localhost:11434/v1.

XALGORIX_LLM=ollama/llama3.1
Mi

MiniMax

Available

Default base https://api.minimax.io/v1. Recommended: minimax/MiniMax-M3.

XALGORIX_LLM=minimax/MiniMax-M3
Cu

Custom OpenAI-compatible

Available

Point Xalgorix at any OpenAI-compatible API by setting XALGORIX_API_BASE alongside your model.

XALGORIX_API_BASE=https://your-provider/v1
Ge

Gemini web search

Optional

Optional Gemini key used for web-search enrichment during recon, independent of the main LLM provider.

GEMINI_API_KEY=AIza…

Notifications

1 integration
Di

Discord

Available

Push verified findings to a Discord webhook with a configurable minimum severity floor.

XALGORIX_DISCORD_WEBHOOK + XALGORIX_DISCORD_MIN_SEVERITY

Email

1 integration
Ag

AgentMail

Optional

Test inboxes, verification emails, OTP flows, and email-triage events used by phase 15 (email security).

AGENTMAIL_POD + AGENTMAIL_API_KEY

Proxy & traffic

2 integrations
Ca

Caido

Optional

Auto-detect the Caido proxy port (0 = auto) and authenticate with an API token for traffic interception.

CAIDO_PORT + CAIDO_API_TOKEN
Pr

Proxy pool

Optional

Single proxy URL or a file of proxies with round-robin or random rotation. Honors XALGORIX_USE_PROXY and XALGORIX_TLS_SKIP_VERIFY.

XALGORIX_PROXY_FILE + XALGORIX_PROXY_ROTATION

Runtime

3 integrations
He

Headless Chrome / Chromium

Available

Used by the browser_action / page_agent tools for runtime testing. Auto-detected or set explicitly.

XALGORIX_BROWSER_PATH=/usr/bin/chromium
sy

systemd service mode

Available

Install Xalgorix as a system service and tail logs with journalctl.

sudo xalgorix --start  ·  journalctl -u xalgorix -f
Se

Security-tool auto-install

Optional

Install security tooling (subfinder, ffuf, sqlmap, etc.) on demand. Off by default for non-root users.

XALGORIX_ALLOW_AUTO_INSTALL=true

Reports

3 integrations
Br

Branded PDF reports

Available

Generated per scan: executive summary, verified findings with CVSS, evidence, remediation, plus company name and uploaded logo.

POST /api/upload-logo  →  GET /api/report/:id
We

WebSocket event stream

Available

Live stream of tool calls, agent messages, findings, errors, HTTP activity, and LLM activity — wire it into your own UI or SIEM.

GET /ws
Lo

Local REST API

Available

20+ endpoints under /api/* on 127.0.0.1:9137 to start, stop, pause, resume, list, and inspect scans.

GET /api/scans  ·  POST /api/scan

Need a different provider?

Any OpenAI-compatible API works — set XALGORIX_API_BASE and you're done. Or open an issue on GitHub and we'll add the prefix to the catalog.

Read the docsOpen an issue →