Defensive Security Python Packages

wpsecscan

Defensive WordPress security scanner. 200+ checks, 8-source nightly CVE aggregator, AI-assisted remediation (BYO key), 15 compliance frameworks (OWASP/PCI/NIST/ISO/HIPAA/SOC2/HITRUST/CMMC), Sigstore-signed releases with SLSA L3 provenance, 10 threat-intel feeds (KEV/EPSS/Exploit-DB/ATT&CK/STIX/MISP/OTX/GreyNoise), continuous monitors, consent-gated exploit verification, multi-tenant RBAC/SSO/audit-log enterprise mode, 12 report formats. Authorized testing only.

aegis-sec

Aegis - a transparent, constitution-bound defensive security copilot with MCP server

attackmap

AI-assisted defensive security analysis for codebases.

reait

RevEng.AI Toolkit and Python API

1200km-auditai

Linux host vulnerability assessment with optional AI analysis.

ransomwatch

ransomwatch is a Python based tool designed for ransomware threat intelligence and security research.

string-analyzer

Extract and analyze printable strings from binary files for malware analysis and forensics

bulwark-agent-security

Enterprise-grade defense framework for AI agents. Five-layer pipeline (sanitizer + injection detector + RBAC + audit + human gate). MCP-native. HIPAA / SOC 2 / NERC CIP ready. Apache 2.0.

colony-probe

colony-probe is a defensive prompt-confidentiality audit tool that tests whether a deployment leaks its hidden system prompt through ordinary-looking multi-turn questions. It runs a multi-turn probe of individually innocuous queries and estimates how much of the system prompt can be reconstructed from the answers. Authorized defensive use only.

prompt-database

Curated prompt injection attack database for defensive AI security research

mcp-guardrails

Drop-in deterministic policy layer for MCP-using AI agents. Synthesizes tool-call policies from observed indirect-injection gaps and evaluates each tool call at the agent's tool-call boundary.