Security Audit Python Packages

pip-audit

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

pysentry-rs

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

dependency-check

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

owasp-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

prowler-cloud

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

ds-analysis-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-xbom-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

whispers

Identify hardcoded secrets in static structured text (version 2)

ds-reporting-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

secator

secator - the pentester's swiss knife

hexora

Static analysis of malicious Python code

websec-validator

Local-first security recon for AI coding agents: map attack surfaces, stage tailored probes, and produce a fact-grounded brief. Part of the Guard family with DocGuard and TestGuard.

oss-policy-kit

Policy-as-code starter kit for OSS repository governance and CI/CD hygiene across GitHub, GitLab, Azure, and AWS.

fritap

Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.

cn-skill-sync

Skill manager for 15 domestic AI agent products on macOS/Windows/Linux - install/sync/watch/update with one CLI (askill), security audit, skills.sh ecosystem. AutoClaw2, Kimi, MiniMax, WorkBuddy, Trae, DuMate, CodeBuddy, Comate, Qoder, QwenWork, DoubaoWork, ZCode

citellus

Automation Troubleshooting Framework to validate and report configuration, software installed, etc with bash, python, and your language of choice.

pyscan-rs

python dependency vulnerability scanner, written in Rust.

gixy-next

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

xaidr

Runtime security for AI agents. In-process, zero dependencies, Apache 2.0.

appthreat-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

faradaysec

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

apsa

Evidence-first Android and iOS security audits with CLI, TUI, MCP, public vulnerability intelligence, and OWASP-aligned evidence.

onionscout

onionscout is a lightweight CLI for basic security-checks of Tor hidden services (.onion).