Security Audit Python Packages

pip-audit

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

pysentry-rs

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

dependency-check

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

whispers

Identify hardcoded secrets in static structured text (version 2)

owasp-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

prowler-cloud

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

hexora

Static analysis of malicious Python code

ds-analysis-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-xbom-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-reporting-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

secator

secator - the pentester's swiss knife

fritap

Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.

oss-policy-kit

Policy-as-code starter kit for OSS repository governance and CI/CD hygiene across GitHub, Azure, and AWS.

pyscan-rs

python dependency vulnerability scanner, written in Rust.

appthreat-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

gixy-next

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

zapcli

A simple tool for interacting with OWASP ZAP from the commandline.

citellus

Automation Troubleshooting Framework to validate and report configuration, software installed, etc with bash, python, and your language of choice.

tgcore

TgCore • Designed for complex systems. Made simple. A fluent DSL for building Telegram bots, APIs, and AI workflows.

ssh-mitm

SSH-MITM - ssh audits made simple

faradaysec

Open Source Vulnerability Management Platform

redteam-mcp

Active red-teaming for MCP servers. Source analysis + live exploitation + auto-fix. Claude Code plugin.

solana-rug

Open-source Solana trust and safety analysis tool for token risk scoring, rug-pull detection, on-chain analysis, SPL Token checks, Pump.fun reviews, and Hermes workflows.