Owasp Python Packages

cyclonedx-python-lib

Functionality and DataModels of OWASP CycloneDX for Python

cyclonedx-bom

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

cyclonedx-py

CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments

agent-governance-toolkit

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

agent-governance-toolkit-core

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

agent-governance-toolkit-integrations

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

agent-governance-toolkit-cli

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

agent-governance-toolkit-protocols

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

dependency-check

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

compose-lint

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

agent-os-kernel

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

navi-sanitize

Deterministic input sanitization for untrusted text — invisible characters, homoglyphs, and encoding tricks, handled before your code sees them. Zero dependencies, no ML. Python 3.12+.

agent-hypervisor

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

agent-bom

AI supply-chain & cloud security scanner and self-hosted control plane — agents, MCP, packages, cloud estate, non-human identities, and LLM cost. SBOM/SARIF, graph attack-paths, runtime enforcement, and compliance evidence.

fray

Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-powered bypass engine, recon pipeline, beautiful CLI output

agentmesh-platform

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

agent-audit

Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 51 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.

docksec

AI-powered Docker security scanner that explains vulnerabilities in plain English. An OWASP Lab Project.

owasp-logger

OWASP-compliant structured security event logger for Python applications.

agent-sre

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

crucible-security

pytest for AI agents - Autonomous red-teaming, behavioral monitoring & security testing for LLM agents

aina-scan

Enterprise SAST — Python/Java/C/C++/TypeScript/C#/Go/Rust — tree-sitter AST, 7-language support, interprocedural taint (3-hop BFS), AINA L3 causal chains, i18n (en/ko), 6-report output

cloudcomponents-cdk-pull-request-approval-rule

A collection of higher-level reusable cdk constructs

cloudcomponents-cdk-pull-request-check

A collection of higher-level reusable cdk constructs