hexstrike-ai
★ 13.0k
vs
ironcurtain
★ 614
hexstrike-ai vs ironcurtain
hexstrike-ai: HexStrike AI MCP v6.0 is an advanced AI-powered penetration testing framework featuring over 150 security tools and 12+ autonomous AI agents. It utilizes a multi-agent architecture with intelligent decision-making, vulnerability intelligence, and a modern visual engine for comprehensive cybersecurity automation.; ironcurtain: IronCurtain provides a secure runtime for autonomous AI agents, enforcing security policies derived from human-readable constitutions to prevent issues like prompt injection. It ensures agents operate within defined boundaries through mechanisms like V8 isolates and a policy engine that mediates all tool calls.
01
TL;DR
hexstrike-aiSecurity & Safety · ★ 13.0k
When to choose:
- You conduct automated penetration testing, bug bounty recon, or security audits and want AI agents to orchestrate 150+ professional cyber tools.
- You want to bridge LLMs with real offensive security workflows covering network scanning, web exploitation, cloud security, and OSINT.
When to skip:
- You do not have explicit written authorization on target networks (strictly respect legal and ethical penetration testing policies).
- Your focus is purely binary reverse engineering and decompilation (ghidra-mcp or ida-pro-mcp are purpose-built for reversing).
ironcurtainSecurity & Safety · ★ 614
Securely Automating Development Tasks: Allowing AI agents to manage files and execute Git operations like cloning and pushing changes within defined security boundaries.
02
Side-by-Side Comparison
Field
hexstrike-aiironcurtainCategory
Security & Safety
Security & Safety
Stars
★ 13.0k
★ 614
License
MIT
Apache-2.0
Install Command
git clone https://github.com/0x4m4/hexstrike-ai.git
npm install -g @provos/ironcurtain
Updated
2mo ago
2d ago
Open Source
Yes
Yes
Tags
AI, Cybersecurity, Penetration Testing
AI Agents, Security, Runtime
03
Features
hexstrike-ai01Over 150 professional security tools for diverse assessments.
0212+ autonomous AI agents for specialized cybersecurity tasks.
03Intelligent decision engine for optimal testing strategies and adaptation.
04Multi-agent architecture enabling collaborative and comprehensive operations.
05Modern visual engine for real-time dashboards and vulnerability reporting.
ironcurtain01Constitution-driven Security Policy: Define security intent in plain English, which is then compiled into deterministic and enforceable rules.
02Semantic Interposition & Runtime Enforcement: All agent interactions and tool calls are routed through a policy engine that allows, denies, or escalates based on policy.
03Untrusted Agent Model: Assumes the LLM may be compromised (e.g., by prompt injection or drift), enforcing security at the boundary regardless of the model's behavior.
04Multi-mode Operation: Supports both an internal LLM agent running in a V8 sandbox (Code Mode) and external agents running in Docker containers (Docker Agent Mode).
05Built-in Capabilities: Ships with pre-configured MCP servers for filesystem, Git, web fetching, and GitHub operations, all governed by policy.
04
Use Cases
hexstrike-ai↳Automated penetration testing and security assessments.
↳Support for bug bounty hunting and vulnerability discovery.
↳Assistance in Capture The Flag (CTF) challenges.
ironcurtain↳Securely Automating Development Tasks: Allowing AI agents to manage files and execute Git operations like cloning and pushing changes within defined security boundaries.
↳Autonomous Code Management and Bug Fixing: Utilizing agents to fix failing tests or perform code modifications in a project workspace with robust policy enforcement.
↳Controlled API Interactions: Enabling agents to interact with web services (e.g., web search, GitHub APIs) with granular policy control over each specific API call.
↳Managing AI Agent Security in Complex Environments: Running external AI agents (e.g., Claude Code, Goose) securely within a Docker container, with IronCurtain mediating every tool call through its policy engine.
↳Remote Agent Control and Escalation Handling: Interacting with and approving agent actions via end-to-end encrypted messaging platforms like Signal.
FAQ
FAQ
What is the difference between hexstrike-ai and ironcurtain?
Both hexstrike-ai and ironcurtain are in the Security & Safety category. hexstrike-ai has 13.0k stars, while ironcurtain has 614 stars.
Which is better, hexstrike-ai or ironcurtain?
The best choice depends on your use case. Choose hexstrike-ai if Automated penetration testing and security assessments., and ironcurtain if Securely Automating Development Tasks: Allowing AI agents to manage files and execute Git operations like cloning and pushing changes within defined security boundaries..
Is hexstrike-ai free or open source?
Yes, hexstrike-ai is open source on GitHub (MIT).
Is ironcurtain free or open source?
Yes, ironcurtain is open source on GitHub (Apache-2.0).
Cloud Infrastructure
AdDeploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.
→