Vulnerability Detection Python Packages

safety

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

flake8-bandit

Automated security testing using bandit and flake8.

python-gvm

Greenbone Vulnerability Management Python Library

dependency-check

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

appthreat-vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

skjold

Security audit Python project dependencies against security advisory databases.

aboutcode-hashid

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

aboutcode-federated

Federated data utilities

miesc

Multi-layer Intelligent Evaluation for Smart Contracts — 35 analysis modules, 9 defense layers, one command. Pre-audit triage for Ethereum, Starknet, and beyond.

vulnparse-pin

Vulnerability Intelligence and Decision Support Engine - Parse, enrich, prioritize, and report on security scan results.

fpvs

Fast Python Vulnerability Scanner

vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

agent-audit

Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 49 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.

immunipy

A Python SCA tool that acts as a watchdog, keeping an eye out for security vulnerabilities and reporting them promptly, written in Rust.

phi-complexity

Audit de code par les invariants du nombre d'or (phi).

codesight

Semantic security verification CLI for scanner alerts and AI-written code

metlo

Metlo is an open-source API security platform.

pyraider

Using PyRaider You can scan installed dependencies known security vulnerabilities. It uses publicly known exploits, vulnerabilities database.

sarix

Code analysis CLI - code review, bugs, security, docs, refactoring. Multi-provider LLM, SARIF output, CI-ready.

appthreat-vulndb

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.2, purl, and vers.

serpant

A CLI tool for scanning directories for vulnerabilities

open-source-insights-api

Library to consume project Open Source Insights Project from Google

kitsec

Pentesting, made easy.

not-particularly

BTC utils