Vulnerability Scanner Python Packages

sqlmap

Automatic SQL injection and database takeover tool

phantom-agent

Autonomous Offensive Security Intelligence - AI-powered penetration testing

fray

Open-source WAF Security Testing Platform — 7,200+ attack payloads, 98 WAF/CDN fingerprints, AI-powered bypass engine, recon pipeline, beautiful CLI output

ptai

Offensive-security MCP server with 205 wrapped tools, 17 specialist agents, and 60 SPA-aware probes for OWASP Top 10. CLI + MCP, BYO LLM. No API key needed on MCP path.

wordfence

Wordfence malware and vulnerability scanner command line utility.

medusa-security

AI-first security scanner with 76 analyzers, 9,600+ detection rules, and repo poisoning detection for AI/ML, LLM agents, and MCP servers. Scan any GitHub repo with: medusa scan --git user/repo

mcp-audit-scanner

Security scanner for MCP (Model Context Protocol) server configurations. Detects prompt injection, credential exposure, supply chain risks, and more.

reconninja

38-phase automated reconnaissance framework for security researchers

quodeq

AI-powered code quality and security scanner. Open source, MIT, runs locally. <🧭>

securescan

Security scanning without the SaaS tax. Multi-scanner orchestration, baseline diffing, SBOM + SARIF, signed everything — runs in your terminal, your CI, or a dashboard you own.

cloud-audit

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

agentseal

Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection resistance, and audit live MCP servers for tool poisoning.

embedxpl

Embedded Device Security Assessment Framework — 700 modules, 350 CVEs, 55 vendors, APT Group Engine. Covers routers, IP cameras, GPON ONTs, ISP CPEs, IoT/embedded edge.

agent-audit

Static security scanner for LLM agents — prompt injection, MCP config auditing, taint analysis. 49 rules mapped to OWASP Agentic Top 10 (2026). Works with LangChain, CrewAI, AutoGen.

alnur

ALNUR — Open-source end-to-end security vulnerability scanner. Detects CVEs, hardcoded secrets, architecture flaws, and port risks across Node.js, Python, PHP, Go, Rust, Java, .NET, Ruby and more

velonus

AI-native security copilot for Python developers. Scans for secrets, vulnerabilities, and dependency CVEs — then tells you how to fix them.

secscan-tool

Automated web security scanner with HTML/Markdown/JSON reports and AI-tailored remediation

nettacker

Automates information gathering, vulnerability scanning and aids penetration testing engagements in general

numasec

The AI Agent for Cyber Security.

basilisk-ai

LLM/AI Application Red Teaming Framework — Break Every Mind

bawbel-mcp

MCP server exposing Bawbel Scanner as agent-callable tools. Scan MCP servers, skill files, and system prompts for AVE vulnerabilities mid-conversation.

commi3

Is an Automated Commando Line Tool for pentesting and other fun stuff

soweak

OWASP LLM Top 10 security middleware framework for Python.

selvo

Linux dependency blast-radius ranker — surfaces highest-value CVE patch opportunities