Endpoint Security Python Packages

talus-process-monitor

eBPF ransomware detection & response agent for Linux — single static binary, no kernel modules, behavioural scoring, process pause/kill

endpointsweep

Find every MCP server and AI agent on your endpoint fleet. Dependency-free collectors for macOS, Linux and Windows run under EDR/MDM, and a central analyzer audits them against a published 8-vector risk rubric, emitting Markdown, SARIF and HTML reports.

fibratus

Security sensor for realtime threat detection and protection

probolos

Deny-by-default USB gate for Linux. Unknown devices stay unauthorized until you approve them, after identity, consistency, behaviour and storage checks. Defends against BadUSB, rogue keyboards and suspicious sticks. Beta, research-stage.