python-gvm

What it is and what it does

python-gvm is a Python library that wraps the Greenbone Management Protocol (GMP) and Open Scanner Protocol (OSP) to enable remote control of Greenbone vulnerability management systems. It abstracts the underlying XML-based communication protocols, allowing developers to authenticate, retrieve vulnerability data, manage tasks, and interact with Greenbone Community Edition installations and Enterprise Appliances through straightforward Python method calls. The library uses lxml for XML parsing and httpx for HTTP communication, with paramiko available for SSH-based connections.

The package is actively maintained by Greenbone AG, supports Python 3.10 through 3.14, and is classified as Production/Stable. It handles the complexity of GMP/OSP protocol details so users can focus on vulnerability management workflows rather than protocol mechanics. The library is typically used by security teams and automation platforms that need programmatic access to Greenbone scanning and reporting capabilities.

Use it for:

• Automate vulnerability scanning workflows by remotely creating, scheduling, and retrieving results from Greenbone tasks.
• Build custom dashboards or reporting tools that aggregate vulnerability data from Greenbone installations.
• Integrate Greenbone scanning into CI/CD pipelines to perform automated security assessments on deployments.
• Develop security orchestration scripts that coordinate vulnerability management across multiple Greenbone instances.
• Query and export vulnerability data in custom formats for compliance reporting or third-party analysis.

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Python library that abstracts the Greenbone Management Protocol (GMP) and Open Scanner Protocol (OSP) to remotely control Greenbone vulnerability management systems.

Yes. The package is actively maintained (release 11 days old), has no known vulnerabilities, supports current Python versions (3.10–3.14), and carries low install friction. The copyleft GPL-3.0-or-later license is a consideration only if you plan to distribute derivative works. Install if you need to programmatically control Greenbone vulnerability management systems; skip if you have no Greenbone infrastructure to manage.

Install

python-gvm on PyPI

pip install python-gvm

uv add python-gvm

poetry add python-gvm

Installing python-gvm

Before you install

Low friction installation with three straightforward runtime dependencies (httpx, lxml, paramiko). Actively maintained with a release 11 days old and last commit on 2026-08-10, indicating steady development.

License in practice

Licensed under GPL-3.0-or-later (copyleft). Any derivative work or modification must be distributed under the same license terms, and source code must be made available to users.

Quickstart

pip install python-gvm

from gvm.connections import UnixSocketConnection
from gvm.protocols.gmp import GMP
from gvm.transforms import EtreeTransform

connection = UnixSocketConnection()
transform = EtreeTransform()
with GMP(connection, transform=transform) as gmp:
    gmp.authenticate('user', 'pass')
    tasks = gmp.get_tasks()

Requires Python 3.10 or later. Requires a running Greenbone Management daemon accessible via Unix socket or network connection.

Verify before relying

• Whether the package works with all Greenbone Community Edition and Enterprise Appliance versions currently in use, given the documented version compatibility constraints.
• Performance characteristics and typical response times for large-scale vulnerability queries.
• Whether paramiko is used for SSH transport or only for specific connection types.

Package facts

Evidence: python_gvm-27.6.0-py3-none-any.whl

Tags

More Python Modules packages