Subcategories
Packages
Provides MSAL-based authentication for Microsoft Agents, handling token acquisition from Azure AD so agents can securely communicate with Microsoft services including Teams, Graph API, and Azure resources.
Install it if you are using the Microsoft Agents framework and need to authenticate with Azure resources.
Parses and converts Sigma detection rules into queries for various security backends and log analysis platforms, replacing the legacy sigmac toolchain with a modular, vendor-agnostic design.
Install it if you work with Sigma rules or need to convert detection logic across SIEM platforms.
A Python client library for retrieving secrets from Delinea Secret Server and Platform via REST APIs, supporting multiple authentication methods.
However, maintenance is aging (284 days since last release), so verify compatibility with your Secret Server version and check for any API changes.
Python bindings for YARA-X, a pattern-matching engine for malware detection and forensic analysis. Compile rules and scan binary data to identify matching patterns.
Install it if you need rule-based pattern matching for malware detection, forensics, or threat hunting.
abi3audit scans Python extension wheels and shared objects for violations of the stable ABI (abi3) specification, detecting when extensions are incorrectly tagged or compiled against incompatible CPython versions.
abi3info exposes CPython's limited API and stable ABI (abi3) metadata as queryable Python dictionaries, letting you look up information about functions, macros, structs, typedefs, and data symbols available in the stable ABI.
A Python wrapper for Censys APIs that lets you search internet-wide data on hosts, certificates, and services, manage attack surface assets, and run queries from the command line.
However, review the deprecation notice carefully: if you are starting a new project, evaluate censys-platform as your long-term choice.
Tarsafe wraps Python's tarfile module to prevent path traversal attacks during tar extraction, providing a drop-in replacement for the standard library's extractall() method.
Generates audio and image CAPTCHAs for use in web applications and security workflows, with support for custom voice and font data.
However, the aging maintenance status (last release over a year ago) and beta classification suggest evaluating whether the feature set meets your needs before…
API client library for GitGuardian's secret detection service, enabling detection of over 200 types of secrets and security vulnerabilities in text content.
Install it if you need to integrate GitGuardian's secret detection into Python workflows—it's the official client and used by GitGuardian Shield itself.
Pysodium is a Python wrapper around libsodium that provides access to authenticated encryption, key exchange, signing, hashing, and password hashing functions.
oslo.policy enforces role-based access control (RBAC) policies across OpenStack services by parsing and evaluating policy rules.
Python client for the Twilio Authy two-factor authentication API, supporting one-time passwords via SMS/voice, soft tokens (TOTP), and push authentication.
Validates access tokens and manages user authentication and authorization for B2B applications backed by PropelAuth, including organization membership, role, and permission checks.
libsast is a static application security testing library that scans code using regex-based pattern matching and semantic analysis to find security issues.
Oso Cloud client provides a Python wrapper for authorization-as-a-service, enabling permission checks, resource filtering, and role queries against a remote Oso Cloud API.
However, you must already have an Oso Cloud account and be willing to add a network dependency to every authorization decision.
Reads configuration files in INI, TOML, or JSON format through a single unified interface, abstracting away format-specific syntax differences.
However, be aware that maintenance is dormant—last release was 933 days ago—so consider whether you need active support or can tolerate a stable, unchanging library.
Secweb applies security headers (CSP, HSTS, X-Frame-Options, and 13 others) to FastAPI and Starlette applications with minimal configuration and no external runtime dependencies.
Exposes the Starlark interpreter (a Python-like language) to Python via PyO3 bindings, enabling sandboxed execution of untrusted code with deterministic, hermetic evaluation.
However, verify the license terms first—the package metadata does not declare an explicit license, which could be a blocker for commercial or restricted-license…
Vonage Verify package provides Python integration with Vonage's Verify API for 2-factor authentication via SMS, Voice, WhatsApp, Email, and Silent Authentication.
Regexploit analyzes regular expressions to identify those vulnerable to Regular Expression Denial of Service (ReDoS) attacks and generates example malicious input strings that trigger catastrophic backtracking.
However, maintenance is dormant (last release March 2021), so treat it as a stable utility rather than an actively developed project.
Advocate wraps the requests library to prevent SSRF attacks by validating HTTP request destinations before connection, blocking access to internal addresses and handling DNS rebinding attacks.
A minimal client library for querying and managing TAXII 2.X threat intelligence servers, supporting server discovery, collection access, object retrieval, and submission.
However, verify that your target TAXII server version is compatible and that you don't require Python versions beyond 3.9.
Audits AWS cloud security posture by checking IAM, network, storage, and compliance configurations using native boto3 clients, producing prioritized findings with MITRE ATT&CK mappings and compliance framework evidence.
Python bindings to libssh that provide SSH client functionality tailored for Ansible, enabling programmatic SSH connections and operations from Python.
The copyleft license (LGPLv2+) requires careful review in proprietary contexts.
Analyzes PDF files to identify potentially malicious content by examining structural characteristics and embedded objects, usable both as a command-line tool and as a Python library.
Scans AI Agent Skills for prompt injection, data exfiltration, and malicious code using pattern-based detection, LLM analysis, and behavioral dataflow inspection.
However, do not rely on it as your sole security control: the documentation explicitly warns that clean scans do not guarantee safety, and human code review remains…
PyRIC provides programmatic control over Linux wireless interfaces, allowing you to enumerate, configure, and manipulate WiFi cards directly from Python without relying on command-line tools.
No, not recommended for new projects.
pyClamd provides a Python interface to the Clamd daemon, enabling virus detection in Python applications by communicating with a running ClamAV service.
Read, write, and manipulate KeePass password database files (KDBX3 and KDBX4 formats) programmatically, including entries, groups, attachments, and OTP codes.
A Django password validator that uses pattern matching and dictionary analysis (via zxcvbn) to estimate actual password strength instead of applying fixed rules, and provides translatable feedback to guide users toward stronger passwords.
Parses, extracts, and recreates UEFI firmware volumes, including BIOS, OptionROM, Intel ME, and other firmware formats from binary files.
A Python SDK for interacting with Google Security Operations (Chronicle/SecOps) SIEM, wrapping the API to support UDM searches, entity lookups, IoCs, alert management, case management, and detection rule management.
Adds JSON Web Token (JWT) authentication to Django GraphQL APIs, handling token generation, verification, and refresh through GraphQL mutations and middleware.
Bashkit is a sandboxed bash interpreter for Python that runs bash scripts in-process with native bindings to a Rust core, providing full bash syntax support and 164 built-in commands without containers or subprocess overhead.
threatwire provides real-time network packet inspection and threat signature matching for building IDS/IPS pipelines in Python, combining packet capture, protocol decoding, and a pluggable signature engine with built-in IOC rules.
Provides Python bindings to access the Doppler API for managing secrets and configuration from your applications.
However, note that the package is dormant—no active maintenance since mid-2024—so evaluate whether the stable API surface and lack of recent updates align with your…
A Python client library for the Snyk API that enables programmatic vulnerability assessment, project management, and dependency testing across multiple package ecosystems.
However, verify that the API surface matches your target Snyk instance version, and monitor for breaking changes that this client may not track.
Python client library for querying and managing authorization policies in a Cerbos authorization service, supporting both gRPC and HTTP protocols with sync and async modes.
Sanic JWT adds JWT-based authentication and authorization to Sanic web applications, protecting endpoints and managing authentication scopes through a configurable OAuth flow.
However, it is dormant—last updated in June 2022—so it is best suited for mature Sanic applications that do not require frequent framework upgrades.