Security Testing Python Packages

agent-security-harness

466 security tests for AI agent systems — MCP, A2A, x402/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, 5 DOIs. v4.3.0

humanbound-cli

DEPRECATED: renamed to 'humanbound'. This is the final release; no further updates will be published.

codeaudit

Codeaudit - Modern Python source code security analyzer based on distrust.

numasec

AI agent for penetration testing. Like Claude Code, but for security. Open source, MCP-native, works with any LLM.

habu

Hacking Toolkit

forcefield

Zero-dependency AI security library -- prompt-injection detection, PII redaction, content safety, rate limiting, abuse detection, tool governance, and security evals for LLMs in 3 lines of Python.

crucible-security

pytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents

discoursemap

DiscourseMap is a comprehensive security testing framework for Discourse forum platforms. Written for security professionals and forum administrators.

serpant

World Serpant Search is a command-line tool for vulnerability detection. It allows you to scan directories for various types of vulnerabilities, including XSS vulnerabilities, authentication bypass vulnerabilities, and package vulnerabilities using the National Vulnerability Database (NVD).

chimera-api

A multi-industry vulnerable attack surface with 450+ real API endpoints and 12 web apps

llama-index-forcefield

ForceField Python SDK -- AI security in 3 lines of code. Prompt injection detection, PII redaction, security evals, tool governance. GitHub Action, pre-commit hook, Homebrew, VS Code extension.

mcp-stress-test

Stress testing framework for MCP security tools - simulating attacks, temporal degradation, and edge cases

pluto-ai

AI-Powered Code Security Analyzer. Pluto is a powerful CLI tool that uses AI to detect security vulnerabilities in your code.

searchpass

Tinyscript tool for searching for default passwords on various open source databases based on pybots

keelson-ai

AI agent security scanner — Living Red Team

langchain-forcefield

ForceField Python SDK -- AI security in 3 lines of code. Prompt injection detection, PII redaction, security evals, tool governance. GitHub Action, pre-commit hook, Homebrew, VS Code extension.

mlsec

Security analysis toolkit for machine learning models and infrastructure

sqlinjector

A professional SQL injection testing framework for security professionals

zip-shotgun

Utility script to test zip file upload functionality (and possible extraction of zip files) for vulnerabilities

owasp-jenkins

Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker? :whale: :shield: :lock: