Threat Detection Python Packages

ftagent

Flowtriq DDoS Detection Agent — real-time L3/L4/L7 traffic monitoring, incident detection, PCAP capture, and auto-mitigation

logsentinelai

LLM-powered security log analyzer: detect threats & anomalies with zero regex — just declare a Pydantic schema. Real-time Telegram alerts, SIEM-ready with Elasticsearch/Kibana. Supports OpenAI, Ollama, vLLM.

agentic-threat-hunting-framework

ATHF is a framework for agentic threat hunting - building systems that can remember, learn, and act with increasing autonomy.

visionone-filesecurity

Trend Micro VisionOne File Security SDK for python

adrian-sdk

Runtime security monitoring and control for AI agents. Catches malicious tool use, prompt injection, and policy drift in real time, before the agent acts.

websecprobe

Bypass 403

logatory

Local-first log analysis with PII redaction, threat detection, anomaly detection and LLM insights — CLI, web dashboard and REST API

pysigma-backend-victorialogs

pySigma backend that converts Sigma detection rules to LogsQL queries for VictoriaLogs

yaramint

Generate YARA rules automatically from positive and negative examples. For PII detection, secret scanning, and prompt injection.

agentfortress

🛡️ The CrowdStrike for AI Agents — Runtime protection, threat detection & security monitoring for LLM agents. Supports LangChain, CrewAI, AutoGen, OpenAI. Python • JS • Rust • Go • Ruby • .NET

stihia

Python SDK for the Stihia real-time threat detection API for AI systems.

ftagent-lite

Lightweight open-source DDoS traffic monitor. Stdout output, no account required

atlas4d

Python client for Atlas4D - Open 4D Spatiotemporal AI Platform

pyatr

Open detection standard -- like Sigma, but for AI agents. 425 rules, shipped in Microsoft AGT, Cisco AI Defense, MISP, OWASP A-S-R-H. 97.1% recall on NVIDIA garak. NIST OSCAL Path 1.

yara-gen

Automatically generate YARA rules from adversarial and benign text samples. Built for detecting indirect prompt injection attacks on RAG pipelines.

iocx-registry-keys

High‑performance iocx plugin for detecting Windows Registry keys, values, and persistence locations. Includes full test coverage, performance benchmarks, and security checks.

malwar

Static analysis engine for detecting malware in agentic AI skill files

hushspec

Portable security rules for the action boundary of AI agents

sundewsh

An open-source honeypot designed to detect and study autonomous AI agent attacks

syara

SYARA: Super YARA Rules for GenAI Era

esxi-testing-toolkit

🧰 ESXi Testing Tookit is a command-line utility designed to help security teams test ESXi detections.