---
id: bandit
version: "1.9.4"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# bandit — Security oriented static analyser for python code.

License: permissive · Maintenance: active · Popularity: top 1,000 on PyPI

## Install

pip install bandit
uv add bandit
poetry add bandit

## Description

.. image:: https://raw.githubusercontent.com/pycqa/bandit/main/logo/logotype-sm.png
    :alt: Bandit

======

.. image:: https://github.com/PyCQA/bandit/actions/workflows/pythonpackage.yml/badge.svg?branch=main
    :target: https://github.com/PyCQA/bandit/actions?query=workflow%3A%22Build+and+Test+Bandit%22+branch%3Amain
    :alt: Build Status

.. image:: https://readthedocs.org/projects/bandit/badge/?version=latest
    :target: https://readthedocs.org/projects/bandit/
    :alt: Docs Status

.. image:: https://img.shields.io/pypi/v/bandit.svg
    :target: https://pypi.org/project/bandit/
    :alt: Latest Version

.. image:: https://img.shields.io/pypi/pyversions/bandit.svg
    :target: https://pypi.org/project/bandit/
    :alt: Python Versions

.. image:: https://img.shields.io/pypi/format/bandit.svg
    :target: https://pypi.org/project/bandit/
    :alt: Format

.. image:: https://img.shields.io/badge/license-Apache%202-blue.svg
    :target: https://github.com/PyCQA/bandit/blob/main/LICENSE
    :alt: License

.. image:: https://img.shields.io/discord/825463413634891776.svg
    :target: https://discord.gg/qYxpadCgkx
    :alt: Discord

A security linter from PyCQA

* Free...

## AI interpretation — verify before relying

Bandit is a security-focused static analyzer that scans Python code for common vulnerabilities by parsing the AST and running security-check plugins against it.

Verdict: Bandit is a mature, actively maintained security linter with no known vulnerabilities, permissive licensing, and low install friction. It is well-suited for teams seeking automated detection of common Python security issues in CI/CD pipelines or local development workflows.

[View on SkillFed](https://skillfed.io/packages/bandit) · [View on PyPI](https://pypi.org/project/bandit/)