Security Testing Python Packages

oss-policy-kit

Policy-as-code starter kit for OSS repository governance and CI/CD hygiene across GitHub, Azure, and AWS.

codeaudit

Codeaudit - Modern Python source code security analyzer based on distrust.

humanbound-cli

Open-source AI agent red-team engine, SDK, and CLI. Run offline or against the Humanbound Platform.

agent-security-harness

466 security tests for AI agent systems — MCP, A2A, x402/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, 5 DOIs. v4.3.0

humanbound

Open-source AI agent red-team engine, SDK, and CLI. Run offline or against the Humanbound Platform.

habu

Hacking Toolkit

crucible-security

pytest for AI agents -- test, score, and harden AI agents before production

numasec

The AI Agent for Cyber Security.

forcefield

ForceField Python SDK -- AI security in 3 lines of code. Prompt injection detection, PII redaction, security evals, tool governance. GitHub Action, pre-commit hook, Homebrew, VS Code extension.

discoursemap

Discourse forum security scanner. Written for security professionals and forum administrators.

serpant

A CLI tool for scanning directories for vulnerabilities

llama-index-forcefield

ForceField Python SDK -- AI security in 3 lines of code. Prompt injection detection, PII redaction, security evals, tool governance. GitHub Action, pre-commit hook, Homebrew, VS Code extension.

pkcs11-check

Pytest plugin and CLI for testing PKCS#11 modules — conformance, security, CVE regression, and PQC. Per-file subprocess isolation survives segfaults; Wycheproof and ACVP cross-verification.

chimera-api

Flask demo API application for resilience testing

keelson-ai

AI agent security scanner — Living Red Team

langchain-forcefield

ForceField Python SDK -- AI security in 3 lines of code. Prompt injection detection, PII redaction, security evals, tool governance. GitHub Action, pre-commit hook, Homebrew, VS Code extension.

searchpass

Default passwords search tool supporting many open source databases

mcp-stress-test

Stress testing framework for MCP security tools - simulating attacks, temporal degradation, and edge cases

pluto-ai

AI-Powered Code Security Analyzer. Pluto is a powerful CLI tool that uses AI to detect security vulnerabilities in your code.

mlsec

Collection of Python security analysis tools for ML models and infrastructure. Includes FGSM harness, model inspection, poison monitoring, and deployment security validation.

sqlinjector

Professional SQL injection testing framework for authorized security testing. Supports multiple injection types and database systems with intelligent detection and detailed reporting.

zip-shotgun

Utility script to test zip file upload functionality (and possible extraction of zip files) for vulnerabilities (aka Zip Slip)

owasp-jenkins

Want to test your applications using the latest OWASP security toolchains and the NIST National Vulnerability Database using Jenkins, Ansible and docker? :whale: :shield: :lock: