Subcategories
Packages
Scans Git repositories and source code for secrets, API keys, and other sensitive data using pattern matching, with support for custom rules and incremental scanning.
Detects and redacts personally identifiable information (PII) in text using regex, NER, and optional local LLM layers, replacing sensitive data with reversible pseudonyms while preserving meaning for downstream AI systems.
Malduck provides cryptographic, compression, and memory-analysis utilities for malware research, including AES, Blowfish, ChaCha20, Serpent, aPLib decompression, and tools to parse PE/ELF binaries and memory dumps.
Parses and manipulates Windows security descriptors, ACLs, and ACEs in pure Python without requiring Windows-specific libraries or system calls.
However, note that the project is aging—last updated in May 2024—so verify that its feature set and compatibility match your specific Windows security descriptor…
Verifies Yubico One Time Passwords (OTPs) using the validation protocol version 2.0, communicating with Yubico's API servers to authenticate hardware tokens.
OTXv2 is a Python client for AlienVault's Open Threat Exchange API, enabling you to query threat intelligence data and manage security indicators programmatically.
However, it has been dormant since 2021-04-02—no maintenance for over 1960 days.
Parses and reads NTFS file systems, the primary file system used by Windows operating systems, enabling programmatic access to NTFS structures and data.
Decodes, validates, and parses AWS Cognito JWT tokens in FastAPI applications, supporting both HTTP and WebSocket authentication without handling sign-up or sign-in.
However, maintenance is aging (last commit 495 days ago), so evaluate whether the package's feature set meets your needs and whether you are comfortable with slower…
A command-line tool for testing and manipulating JSON Web Tokens (JWTs), including modification, signing, verification, and exploitation of common JWT vulnerabilities.
Install it if you regularly perform JWT security assessments or CTF challenges.
Parse, manipulate, and generate MAEC (Malware Attribute Enumeration and Characterization) v4.1 content via low-level XML schema bindings and higher-level Python classes.
No—not for new projects.
pyscard provides Python bindings to interact with smartcard readers and cards, enabling applications to read, write, and authenticate using physical smartcards.
Implements the SAML 2.0 Identity Provider side for Django applications, enabling federated authentication and single sign-on (SSO) by building on PySAML2.
Install it if you need to operate a federated authentication server.
Retrieves profile and metadata information about Databricks workspace resources through a Python SDK, primarily for use by security analysis tooling.
However, the aging maintenance status and unclear license terms warrant verification before production use; confirm with Databricks that the package is appropriate…
Lib4VEX parses and generates VEX (Vulnerability Exploitability eXchange) documents in OpenVEX, CycloneDX, and CSAF formats, providing a unified abstraction layer for vulnerability information across these specifications.
Sanitizes SVG files by removing malicious elements, attributes, and restricting data URL MIME types through a Python wrapper around the svg-hush Rust library.
However, verify the license terms before use in proprietary or commercial contexts, and confirm that svg-hush's threat model matches your security requirements.
Python SDK and CLI tool for interacting with Conjur OSS secrets management appliance, providing methods to get, set, and manage variables and policies.
A boto3 plugin that integrates AWS S3 Access Grants as a permission layer for S3 clients, enabling fine-grained access control through S3 Access Grants credentials.
However, the 385-day gap since the last release and unclear license metadata warrant verification before production deployment.
Garak is a command-line tool that probes large language models for security vulnerabilities, testing for hallucination, data leakage, prompt injection, misinformation, toxicity, jailbreaks, and other failure modes.
However, the unclear license status requires verification before use in commercial or restricted contexts.
Ropper displays binary file metadata and searches for ROP gadgets across multiple architectures and file formats to help build return-oriented programming chains.
However, the aging maintenance status (532 days since last release) means you should verify compatibility with your target binaries and consider whether the tool's…
Creates and verifies cryptographically signed Trust Records that prove an AI agent ran under a specific policy in a verified hardware environment, touching classified data and invoking identified tools.
However, it is in Alpha (v0.2) and explicitly marked for developer preview—do not rely on it in production without reviewing the Limitations page.
Keeper Commander is a command-line and terminal UI tool for managing Keeper Password Manager and KeeperPAM vaults, supporting vault access, administrative tasks, password rotation, session management, and REST service deployment.
Provides a Python client library to interact with Bitwarden's password management and secrets storage platform, enabling programmatic access to vaults and credentials.
FastAPI middleware that integrates Keycloak for OIDC-based authentication and authorization, validating access tokens and enforcing role-based access control on endpoints.
However, verify the license before use in commercial settings, and note that maintenance is aging (215 days since last release)—acceptable for stable middleware but…
Flask-Paranoid detects and blocks session hijacking by validating that each request originates from the same IP address and user agent as the initial session, clearing the session if either changes.
Generates and analyzes CSAF 2.0 documents, which describe product vulnerabilities and their remediation status in a standardized format.
However, do not expect bug fixes or new features—evaluate whether the current feature set and stability meet your long-term needs before adopting it in a critical…
Sigmatools provides command-line utilities and a Python library for working with Sigma detection rules—a vendor-agnostic format for describing log-based security detections.
ca9 analyzes Python package supply chains to determine whether flagged CVEs are actually reachable from your application code, combining static import tracing, dependency inventory, and optional runtime coverage to separate actionable vulnerabilities from unreachable alerts.
Parses source code into a queryable graph of functions, classes, calls, and semantic annotations using tree-sitter and rustworkx for security and code-structure analysis.
BBOT is a multipurpose reconnaissance and vulnerability scanner that automates subdomain enumeration, web crawling, email discovery, and security scanning across targets ranging from domains to IP ranges to URLs.
However, verify that AGPL-3.0 licensing aligns with your use case, and be aware that the 36 runtime dependencies add complexity.
Boofuzz is a network protocol fuzzing framework that generates malformed or unexpected data to test network services for robustness and security vulnerabilities.
Interact with Windows Active Directory by reading and manipulating directory service internals through Python, providing native classes and functions for AD operations.
However, the aging maintenance status (194 days since last release) and narrow use case (Windows AD-specific) mean it's not a general-purpose tool—install only if…
A Python client library for authenticating with and controlling TotalConnect2 alarm systems, supporting arming/disarming and status queries.
Install it if you need programmatic control of a TotalConnect alarm system from Python—particularly if you're building a Home Assistant integration or custom automation.
ppdeep computes fuzzy hashes (CTPH/ssdeep) to measure similarity between inputs rather than testing for exact equality, useful in digital forensics and malware detection.
Install it if you need fuzzy hashing; skip it if you only need exact-match hashing or cryptographic digests.
Volatility 3 is a memory forensics framework that extracts and analyzes digital artifacts from volatile RAM samples across Windows, Linux, and macOS systems.
Install it if you need to analyze memory dumps; skip it if you have no forensic analysis requirements.
Kingfisher is a command-line secret scanner that detects, validates, and triages leaked API keys, tokens, and credentials across code repositories, cloud storage, chat platforms, and CI pipelines using 1,089 built-in rules and live validation against provider APIs.
Wrapper around the 1Password CLI that lets you query and retrieve secrets, documents, and credentials from a 1Password vault programmatically.
This package is a deprecated alias that redirects users to zaproxy, the renamed successor package for OWASP ZAP v2.4 integration.
Extends alarmdecoder with three Home Assistant-compatible arming methods (arm_home, arm_away, arm_night) that generate panel-specific key sequences for Honeywell and DSC security systems.