Appsec Python Packages

devicecheck

Reduce fraudulent use of your services by managing device state and asserting app integrity via Apple DeviceCheck API with this Python wrapper.

libsast

Generic SAST Library

mobsfscan

mobsfscan is a static analysis tool that can find insecure code patterns in your Android and iOS source code. Supports Java, Kotlin, Swift, and Objective C Code. mobsfscan uses MobSF static analysis rules and is powered by semgrep and libsast pattern matcher.

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

ca9

Open source Python CVE reachability analysis for evidence-backed SCA triage. Turn Snyk, Dependabot, Trivy, pip-audit, and OSV alerts into fix, suppress, or investigate decisions.

dirsearch

Web path scanner

pyaim

@CyberArk Application Access Manager Client Library for Python 3

oss-policy-kit

Policy-as-code starter kit for OSS repository governance and CI/CD hygiene across GitHub, Azure, and AWS.

semhound

Scan every repository across your GitHub organisations using Semgrep rules, with optional AI triage (Claude · Gemini · GPT · Bedrock)

openziti

Ziti SDK for Python

gitgalaxy

An AST-free, LLM-free heuristic knowledge graph engine for deep repository intelligence. Map, secure, and modernize enterprise codebases across 50+ languages at extreme velocity

faradaysec

Open Source Vulnerability Management Platform

codeaudit

Codeaudit - Modern Python source code security analyzer based on distrust.

cryptonice

CryptoNice is both a command line tool and library which provides the ability to scan and report on the configuration of SSL/TLS for your internet or internal facing web services. Built using the sslyze API and ssl, http-client and dns libraries, cryptonice collects data on a given domain and performs a series of tests to check TLS configuration and supporting protocols such as HTTP2 and DNS.

safeurl-python

Python implementation of SafeURL (Anti-SSRF Lib)

cdktg

Agile Threat Modeling as Code

velonus

AI-native security copilot for Python developers. Scans for secrets, vulnerabilities, and dependency CVEs — then tells you how to fix them.

secscan-tool

Automated web security scanner with HTML/Markdown/JSON reports and AI-tailored remediation

bluerock-oss

Rust DSO backend for BlueRock — handles NDJSON event writing for the bluerock Python sensor

numasec

The AI Agent for Cyber Security.

mcpsec

An AI-driven dynamic protocol fuzzer for the Model Context Protocol (MCP). Prove runtime exploitability by discovering state violations, transport crashes, and application-layer logic flaws (SSRF, LFI) before your AI agents do.

joern-lib

Python library for code analysis with CPG and Joern

llmquery

Powerful LLM Query Framework with YAML Prompt Templates. Made for Automation

brs-xss

Context-aware async XSS scanner powered by BRS-KB