Attack Surface Python Packages

fray

Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-powered bypass engine, recon pipeline, beautiful CLI output

sentineldeck

Passive attack-surface scanner: turn a domain into a risk grade, copy-paste fixes, and a client-ready report. Safe DNS, HTTP, TLS, email, and certificate-transparency checks.

apisec-ai-surface

Find and govern AI attack surfaces in application code at PR time. Free, OSS, runs offline.

opendoor

OWASP Web Recon & Directory Discovery Platform

kosty

Scan 30+ AWS services. Find cost waste. Detect security gaps. Map your attack surface. One command.

chiasmodon

Chiasmodon is an OSINT tool designed to assist in the process of gathering information about a target domain. Its primary functionality revolves around searching for domain-related data, including domain emails, domain credentials, CIDRs , ASNs , and subdomains, the tool also allows users to search Google Play application ID.

perimeter-scan

Passive external attack-surface scanner — find your exposed subdomains, expiring certs, missing security headers, and dangling DNS before attackers do.

webstor

WebStor efficiently enumerates all websites across your organization’s networks and those in your DNS records - including cloud-hosted servers via zone transfer data - stores their responses, and lets you query for known web technologies, including those with zero-day vulnerabilities.

securityforge

AI-Powered WAF Security Testing Platform — 4,025+ attack payloads, 25 WAF fingerprints, zero dependencies