Application Security Python Packages

devsecops-radar

🛡️ Unify Trivy, Semgrep, Poutine & Zizmor scans into one AI-enhanced, offline-ready dashboard. Track CI/CD security trends, get LLM-powered analysis, and enforce policies — the open-source DevSecOps command center.

codepathfinder

Static Code Analysis for security teams with Inter file taint analysis. Built for finding vulnerabilities, advanced structural search, derive insights and supports MCP

ai-protect

AI-application security assurance pipeline: tier-aware SAST · DAST · AI red-team scanning with a findings dashboard, CVE intel feeds & auto-remediation. For AppSec & platform teams shipping LLM apps and agents — pip install ai-protect

metlo

The Python Agent for Metlo

pyrasp

PyRASP is a Runtime Application Self Protection package for Python-based Web Servers (Flask, FastAPI and Django), Serverless Functions (AWS Lambda, Azure and Google Cloud Functions) and MCP Servers (FastMCP)

spamscope

Fast Advanced Spam Analysis tool

secret-scan

A simple secret/credential scanner for source code repositories.

quicdraw

QuicDraw(H3) is A security research tool designed for fuzzing and racing HTTP/3 servers. QuicDraw implements the `Quic-Fin-Sync` on HTTP/3 (over QUIC) for race-condition testing.

burpr

👾 Burp Suite request parser, used for aid in assessing application security functionality.

trappsec

deception as a developer tool

polysecrets

A completely randomized order of secrets; built with security in mind.

burpr3

A Burp Suite request parser, used for aid in assessing application security functionality.