Vulnerability Management Python Packages

ca9

CA9 is a local evidence engine for Python AppSec triage. It sits after scanners and before engineers waste time, proving which findings matter.

python-gvm

Greenbone Vulnerability Management Python Library

package-doctor

Scan Python dependencies for exploited CVEs and abandoned packages that handle untrusted input, ranked by CISA KEV and EPSS. Runs in CI and as a Claude Code hook.

secobserve-mcp

MCP server for SecObserve: triage vulnerability findings, manage products and rules, import scan reports and SBOMs, generate VEX documents

qualysapi

Python connector for the Qualys API

gvm-tools

Remote control your Greenbone Community Edition or Greenbone Enterprise Appliance

vexcalibur

General-purpose VEX toolkit for SBOM-driven vulnerability exploitability workflows.

faradaysec

Open-source and AI-powered cybersecurity tools for offensive security, vulnerability management, and autonomous pentesting. Built by hackers in Latin America, used worldwide.

faraday-cli

Faraday's Command Line Interface

vamp-penreport

Professional Pentest Report Aggregator — VampSecure Labs

cve-prioritizer

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.

cra24

CRA Article 14 dossiers from an embedded Linux build tree. Scan Yocto or Buildroot, decide affectedness with the evidence shown, emit CSAF, OpenVEX and SRP with the statutory clock running. Zero runtime dependencies, offline-capable.

nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management

vamp-cve-oracle

VampSecure Labs: CVE intelligence engine — NVD API v2 + OTX (AsyncIO)

certcc-ssvc

Stakeholder-Specific Vulnerability Categorization

vulnparse-pin

A Vulnerability Intelligence and Decision Support Engine — Making Vulnerability Triage Faster and Remediation Decisions Explainable

patch-tuesday-mcp

MCP server for Microsoft Patch Tuesday - query MSRC security updates, CVEs, and KBs with EPSS + CISA KEV enrichment. No API keys. Works with Claude, Copilot, Cursor, and any MCP client.

vulnpilot

Turn vulnerability scan data into prioritized action. Runs locally. Your data never leaves your machine.

ec2patcher

Local web GUI to analyze and patch Ubuntu and Amazon Linux EC2 servers from CVE reports (Canonical, ALAS, NVD). pipx install ec2patcher

pyvfeed

Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions

nikasha

Proof, not prose. Fact-check vulnerability reports against the real code at the exact version they name: an evidence dossier and sandboxed reproduction for incoming reports.

art14

Which SBOM vulnerabilities trigger an EU Cyber Resilience Act Article 14 reporting decision and why.

opencve

Vulnerability Intelligence Platform

ospd

OSPd is a framework for vulnerability scanners which share the same communication protocol: OSP (Open Scanner Protocol)