Network Security Python Packages

scapy

Scapy: the Python-based interactive packet manipulation program & library.

pydivert

A Python binding for WinDivert driver

pypcapkit

Python-based Comprehensive Network Packet Analysis Library

nfstream

NFStream: a Flexible Network Data Analysis Framework.

ftagent

Flowtriq DDoS Detection Agent. Real-time traffic monitoring, incident detection, PCAP capture, and auto-mitigation

mercury-python

Mercury: network metadata capture and analysis

communityid

A Python implementation of the Community ID flow hashing standard

tethered

tethered — Runtime network egress control for Python. One function call to restrict which hosts your code can connect to.

pan-scm-sdk

Python SDK for Palo Alto Networks Strata Cloud Manager.

embedxpl

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs, IoT/embedded edge.

safecadence-netrisk

SafeCadence Network Risk — local-first infrastructure + identity policy platform. 45 adapters (40 infra + 5 identity), 22 controls, 16 multi-vendor translators, capability-based RBAC, AI policy intelligence, attack-path graph, KEV+EPSS-prioritized CVEs, cross-system drift detection. MIT, BYO-AI.

netwatch-sec

All-In-One Network Security Dashboard

firewallfabrik

Modern fwbuilder successor: Qt GUI for managing iptables/nftables policies. Centralized policy DB with reusable objects, scales to hundreds of firewalls, generates deployment-ready shell scripts.

wireshark-mcp

Wireshark-MCP，Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.

suricata-check

suricata-check is a command line utility to provide feedback on Suricata rules. The tool can detect various issues including those covering syntax validity, interpretability, rule specificity, rule coverage, and efficiency.

domainclassifier

DomainClassifier is a Python (2/3) library to extract and classify Internet domains/hostnames/IP addresses from raw unstructured text files following their DNS existence, localization or attributes.

netcheck-ir

Enterprise network triage, security posture, and incident-response/forensics in one command — with optional AI analysis.

whatweb

Next generation web scanner

ferm

ferm for iptables/nftables, ported to Python - one config language, four netfilter families

anubis-netsec

Subdomain enumeration tool

ghostbt

An open source platform for ESP32 devices.

vrp-ir

Huawei VRP/USG config to a source-traceable IR + 'vrp-ir audit' line-cited security acceptance report. Open core of AegisTwin.

network-pipeline

Network traffic data pipeline for real-time predictions and building datasets for deep neural networks

nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management