Security Tools Python Packages

bandit

Bandit is a tool designed to find common security issues in Python code.

zizmor

Static analysis for GitHub Actions (and more)

scapy

Scapy: the Python-based interactive packet manipulation program & library.

csp-toolkit

Content Security Policy analysis, bypass detection, and CI gating. 21 weakness checks with A+ to F grading, 79 known bypass domains, SARIF output, and a GitHub Action.

flake8-bandit

Automated security testing using bandit and flake8.

pygitguardian

Python API client library for the GitGuardian API

oschmod

chmod for Windows, macOS and Linux

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

llm-guard

The Security Toolkit for LLM Interactions

njsscan

njsscan is a semantic aware SAST tool that can find insecure code patterns in your Node.js applications.

pysentry-rs

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

kingfisher-bin

Detect secrets + live validation. Map blast radius. Revoke fast. Use the CLI or embed in Rust and Python.

trufflehog

Find, verify, and analyze leaked credentials

nessus-file-reader

CLI tool and python module which enables you to parse nessus scan files from Nessus and Tenable.SC by (C) Tenable, Inc.

keepercommander

Keeper Commander is a python-based CLI and SDK interface to the Keeper Security platform. Provides administrative controls, reporting, import/export and vault management.

aig-skill-scan

A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation.

certora-cli

The Certora Prover is the state-of-the-art security tool for automated formal verification of smart contracts running on EVM-based chains, Solana and Stellar

flask-unsign

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

pyonenote

A python library to parse OneNote (.one) files

python-msi

Pure Python library for reading, parsing, and extracting the contents of Windows installer (.msi) files

myjwt

A cli for cracking, testing vulnerabilities on Json Web Token(JWT)

libre-devops-helpers

🧰 A fast, read-only CLI and Python helpers for Entra ID, Defender XDR, Sentinel, Intune, Azure, Microsoft Graph, PIM, Logic Apps and ServiceNow. The ldo command signs in as you; also shipped as container images.

pypcapkit

Python-based Comprehensive Network Packet Analysis Library

cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.