Firewall Python Packages

ciscoconfparse

Parse, Audit, Query, Build, and Modify Arista / Cisco / Juniper / Palo Alto / F5 configurations.

pan-os-python

The PAN-OS SDK for Python is a package to help interact with Palo Alto Networks devices (including physical and virtualized Next-generation Firewalls and Panorama). The pan-os-python SDK is object oriented and mimics the traditional interaction with the device via the GUI or CLI/API.

ciscoconfparse2

Parse, Audit, Query, Build, and Modify Arista / Cisco / Juniper / Palo Alto / F5 configurations.

opnsense-mcp-server

A secure MCP server for managing OPNsense firewalls through AI assistants. 62 tools across 10 domains with read-only default, savepoint rollback, and security auditing.

agent-airlock

A type-checker and contract layer for AI agent tool calls, deny-by-default, in-process, Pydantic-only. Strict argument validation, ghost-argument stripping, and self-healing retries for MCP servers and agent frameworks.

ftagent

Flowtriq DDoS Detection Agent. Real-time traffic monitoring, incident detection, PCAP capture, and auto-mitigation

pandevice

The PAN-OS SDK for Python is a package to help interact with Palo Alto Networks devices (including physical and virtualized Next-generation Firewalls and Panorama). The pan-os-python SDK is object oriented and mimics the traditional interaction with the device via the GUI or CLI/API.

fortigate-api

Python package for configuring Fortigate (Fortios) devices using REST API

vmware-nsx-security

VMware NSX DFW microsegmentation and security: distributed firewall, security groups, tags, traceflow, IDPS — MCP tools for AI agents

oxl-opnsense-client

Client for interacting with the OPNsense API

cf-rules

🛡️📦 A Cloudflare library wrapper to bulk import / export your firewall rules using Cloudflare's API.

firewallfabrik

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

octorules

Manage WAF rules across providers as code

octorules-cloudflare

Cloudflare provider for octorules

fgex

Firegex, a firewall for Attack-Defense CTFs

pic-standard

Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.

firegex

Firegex, a firewall for Attack-Defense CTFs

mikrotik-mcp

MCP server for MikroTik RouterOS over the binary API. Addresses rules by their real .id, never by list position.

pfsentinel

Automated backup and monitoring tool for pfSense firewalls. Supports config, RRD, DHCP, certificates, ZFS snapshots, and more via SSH/HTTPS.

agentgate-firewall

ai security cli developer-tools agent firewall policy-as-code python anthropic claude-code

humanbound-firewall

Multi-tier firewall for AI agents — blocks prompt injections, jailbreaks, and scope violations. Local tiers first; LLM judge only when uncertain.

network-sandbox-engine

A deterministic network sandbox for testing nftables rules. It uses ephemeral Linux network namespaces (netns) and Scapy to validate firewall logic safely.

panorama-super-cli

Agent-friendly CLI for Palo Alto Panorama object management: find IPs, dedup & safely merge objects, audit references, and enforce naming — dry-run by default, JSON & set-command output.

preloop

The open-source AI agent control plane: MCP firewall, model gateway with budgets, human approvals, runtime observability, and audit trails