tigergate/tigerstrike repository overview

⁠TigerStrike – AI-Powered Penetration Testing Platform

TigerStrike is an AI-powered penetration testing tool from TigerGate⁠, built to simulate real-world attacks and uncover exploitable vulnerabilities in modern applications and APIs.

Built for security engineers, red teams, and DevSecOps workflows, TigerStrike focuses purely on offensive security testing—helping you identify and validate risks before attackers do.

⁠🎯 Core Capabilities

• Automated Penetration Testing

  • Simulate attack scenarios against web applications and APIs
  • Identify exploitable security weaknesses

• Web & API Vulnerability Scanning

  • Detect common issues:

    • Injection (SQL/Command)
    • Broken authentication
    • Broken object-level authorization (BOLA)
    • SSRF, XSS, CSRF

  • Supports REST and GraphQL endpoints

• Fuzzing & Input Manipulation

  • Payload-based fuzzing for endpoints and parameters
  • Discover hidden vulnerabilities through malformed inputs

• Authentication Testing

  • Token/session validation
  • Authorization bypass checks
  • Privilege escalation detection

• Attack Simulation

  • Replay known attack patterns
  • Validate exploitability (not just detection)

⁠🐳 Why Use TigerStrike

• Docker-first – no installation, run anywhere
• Fast execution – designed for quick pentest cycles
• CI/CD friendly – integrate into pipelines for continuous testing
• Focused output – only actionable, exploitable findings

⁠⚙️ Typical Use Cases

• API penetration testing
• Pre-production security validation
• Red team automation
• Bug bounty workflows
• Secure release checks

⁠🧪 Example Usage

docker run -d --name tigerstrike-agent \
    --restart unless-stopped \
    -e TIGERGATE_API_KEY=$TIGERGATE_API_KEY \
    tigergate/tigerstrike:latest --agent