Security Scanner Python Packages

bandit

Bandit is a tool designed to find common security issues in Python code.

ostorlab

OXO is a security scanning orchestrator for the modern age.

pysentry-rs

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

agent-bom

Open security scanner for AI supply chain and infrastructure: agents, MCP, containers, cloud, GPU, and runtime with blast-radius analysis.

pythx

A Python library for the MythX smart contract security analysis platform

mcpsafetywarden

MCP servers expose tools with no information about what they actually do at runtime. mcpsafetywarden sits between your agent and any MCP server, profiling tool behavior, blocking destructive calls, and running active security audits before you trust them in a workflow.

sunglasses

Sunglasses for AI agents. Protection layer + neighborhood watch.

compose-lint

Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.

agent-audit-kit

Static scanner for MCP-connected AI agent pipelines — 200 rules across 11 categories, 12 compliance frameworks, OWASP Agentic 10/10 + MCP 10/10, GitHub Action, SARIF, 48h CVE-to-rule SLA.

tartufo

Searches through git repositories for high entropy strings and secrets, digging deep into commit history

armorer-guard

Fast local Rust scanner for AI-agent prompt injection, credential leaks, exfiltration, and risky tool calls

gixy-next

Gixy-Next: NGINX Configuration Security Scanner & Performance Checker

n0s1

Secret Scanner for Slack, Jira, Confluence, Asana, Wrike, Linear, Zendesk, GitHub, and GitLab

agent-discover-scanner

The industry-standard Agentic Identity & Inventory Scanner. Automatically inventory autonomous agents (LangChain, AutoGen, CrewAI, PydanticAI) using static analysis, network heuristics, and eBPF. Foundational tool for AIBOM compliance and AgentOps governance.

securescan

Security scanning without the SaaS tax. Multi-scanner orchestration, baseline diffing, SBOM + SARIF, signed everything — runs in your terminal, your CI, or a dashboard you own.

cloud-audit

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

kcwarden

Automatically audit your Keycloak configuration for security issues

esd

Enumeration Sub Domains(枚举子域名)

mitrecve

Get all CVE corresponding to a specific keyword or list of keywords from the MITRE database.

vpmx

Resumable, trackable script orchestration for VPS and local environments. Security scanning, rollback, crash recovery.

iamarmor

IAM Policy Analyzer & Fixer

faraday-agent-dispatcher

Faraday agent dispatcher to communicate an agent to faraday

ignyt

The fastest Python code quality engine — type checking, security scanning, dead code detection, complexity analysis & auto-fix in one Rust binary. Replaces mypy, flake8, bandit, vulture, radon, black & isort. 10-100x faster.

dirbpy

This is the new version of dirb in python