Security Audit Python Packages

pip-audit

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

pysentry-rs

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

dependency-check

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

whispers

Identify hardcoded secrets in static structured text (version 2)

owasp-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-analysis-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-xbom-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-reporting-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

prowler-cloud

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

pyscan-rs

python dependency vulnerability scanner, written in Rust.

fritap

Simplifying SSL/TLS traffic analysis for researchers by making SSL decryption effortless.

hexora

Static analysis of malicious Python code

oss-policy-kit

Policy-as-code starter kit for OSS repository governance and CI/CD hygiene across GitHub, Azure, and AWS.

citellus

Utility for running set of tests against a Live System or a snapshot/sosreport

appthreat-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

secator

secator - the pentester's swiss knife

urllib3-lts

Long-Term Support (LTS) security fork of urllib3 with backported CVE fixes for Python 3.7 and 3.8.

ssh-mitm

SSH-MITM - ssh audits made simple

zapcli

A simple tool for interacting with OWASP ZAP from the commandline.

gixy-next

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

advisor-agent

Opus-led Claude Code agent team — strategist plans, Sonnet runners read and fix. Live two-way review-and-fix pipeline. Zero API calls.

faradaysec

Open Source Vulnerability Management Platform

frost

Unit testing framework for test driven security of AWS, GCP, Heroku and more.