Owasp Top 10 Python Packages

ansede-static

Offline SAST that detects IDOR, missing authentication, and ownership bypass. OWASP recall 62%, CVE recall 96.3% across 5 languages. Beats Semgrep OSS on recall.

strathon

The open-source AI agent firewall — write a CEL policy, block the tool call before it executes. In-process, sub-millisecond. OWASP + EU AI Act mapped.

strathon-cli

The open-source AI agent firewall — write a CEL policy, block the tool call before it executes. In-process, sub-millisecond. OWASP + EU AI Act mapped.

offsec-ai

offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.

fastapi-safeguard

Startup-time security checks for FastAPI - missing auth, exposed fields, CORS misconfigs. Baseline lock file makes security posture reviewable in PRs.

llmarmor

🛡️ OWASP LLM Top 10 security scanner for AI-powered applications

simple-port-checker

offsec-ai is a Python library and CLI that combines classic network reconnaissance with modern AI/LLM security testing.

fencer

Automated API security testing

surface-audit

Deterministic security smoke tests for preview, staging, and pre-deploy web URLs.

buzur

AI prompt injection defense scanner for agents. 25 phases covering HTML obfuscation, encoding attacks, semantic similarity, behavioral anomaly detection, multi-step attack chains, and more.

forbidden

Bypass 4xx HTTP response status codes and more. The tool is based on Python Requests, PycURL, and HTTP Client.

ares-redteamer

AI Robustness Evaluation System

proxilion

A deterministic runtime security SDK for LLM applications that prevents prompt injection, data leakage, and rogue agent behavior using high-performance, auditable rule-based guards instead of probabilistic AI inference.