Security Scanner Python Packages

bandit

Bandit is a tool designed to find common security issues in Python code.

ostorlab

OXO is a security scanning orchestrator for the modern age.

skylos

Open-source PR gate for Python, TS/JS, Java, and Go. Stop merging dead code, secrets, security flows, and AI-code regressions.

pysentry-rs

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

agent-bom

Open security scanner for AI supply chain and infrastructure: agents, MCP, containers, cloud, GPU, and runtime with blast-radius analysis.

pythx

A Python library for the MythX smart contract security analysis platform

mcpsafetywarden

MCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.

sunglasses

Sunglasses for AI agents. Protection layer + neighborhood watch.

compose-lint

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

agent-audit-kit

Security scanner for MCP-connected AI agent pipelines — 77 rules, 13 scanners, OWASP Agentic 10/10, GitHub Action, SARIF, compliance mapping

securescan

Security scanning without the SaaS tax. Multi-scanner orchestration, baseline diffing, SBOM + SARIF, signed everything — runs in your terminal, your CI, or a dashboard you own.

cloud-audit

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

agent-discover-scanner

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

n0s1

Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab

mitrecve

Get all cve corresponding to a specific keyword or a list of keywords from the mitre database (https://cve.mitre.org/)

esd

Enumeration sub domains(枚举子域名)

gixy-next

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

kcwarden

Keycloak auditor

faraday-agent-dispatcher

Faraday agent dispatcher to communicate an agent to faraday

vpmx

Resumable, trackable script orchestration for VPS and local environments. Security scanning, rollback, crash recovery.

dirbpy

This is the new version of dirb in python.

wshawk

Open source toolkit for WebSocket security testing, web application penetration testing, and stateful attack validation. It combines a CLI scanner, web dashboard, Electron desktop app, browser companion, and project-backed workflows for authorized security assessments.

llmarmor

🛡️ OWASP LLM Top 10 security scanner for AI-powered applications