SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Python security-tool Projects
-
Project mention: Show HN: Customizable OSINT dashboard to monitor the situation | news.ycombinator.com | 2026-01-12
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
UFW blocks ports. fail2ban blocks behavior. Together they form your server's intrusion response layer — UFW narrows the attack surface, fail2ban watches the traffic that gets through and bans the IPs that misbehave.
-
prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
Project mention: CIS AWS v3.0 in 60 Seconds: Automate Compliance with Terraform | dev.to | 2026-03-27And you're probably guessing that I'm not the first person to have the idea - we need to automate this. AWS Security Hub maps 37 controls. Prowler all of them. However, none of them answer the question of how to fix them (at least not by copy-pasting).
-
Network security and reconnaissance are essential skills for cybersecurity professionals. In this blog post, we will build a Python-based network scanner that performs ARP scanning, port scanning, and DNS resolution using the scapy, socket, dns.resolver, and threading libraries. We will also use rich for better console output.
-
Project mention: AI Is Breaking Two Vulnerability Cultures — And Vibe Coders Are About to Get Caught in the Middle | dev.to | 2026-05-08
# .pre-commit-config.yaml - repo: https://github.com/zricethezav/gitleaks rev: v8.18.0 hooks: - id: gitleaks # catches accidental secret commits - repo: https://github.com/PyCQA/bandit rev: 1.7.5 hooks: - id: bandit # catches common Python security antipatterns
-
-
-
-
Nettacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
-
GitHub Repo
-
-
pocsuite3
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
-
-
-
-
Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
-
-
evillimiter
Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access
-
-
cve-bin-tool
The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
-
requests-ip-rotator
A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
-
extract_otp_secrets
Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.
- that opened a new need for "safe TOTP replication with offline access", and that's how I ended-up running my own vaultwarden instance and using the bitwarden clients across devices.
I'm glad I did, and I can't recommend it more. IIRC, this¹ helped tremendously along the way.
¹: https://github.com/scito/extract_otp_secrets
-
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python security-tools discussion
Python security-tools related posts
-
Show HN: AI-native red-team for penetration testing and vulnerability research
-
Show HN: Z3r0 – Multi-agent red team collaboration platform
-
How to Stop Leaking AWS Keys to GitHub (And What to Do When You Already Did)
-
AI Is Breaking Two Vulnerability Cultures — And Vibe Coders Are About to Get Caught in the Middle
-
Sourcery vs mypy: Type Checking vs AI Refactoring (2026)
-
Show HN: I built a Python-based app for Windows security diagnostics
-
Show HN: I built a Python-based app for Windows security diagnostics
-
A note from our sponsor - SaaSHub
www.saashub.com | 15 Jun 2026
Index
What are some of the best open-source security-tool projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | spiderfoot | 18,137 |
| 2 | Fail2Ban | 17,971 |
| 3 | prowler | 13,991 |
| 4 | scapy | 12,352 |
| 5 | bandit | 8,087 |
| 6 | monkey | 6,998 |
| 7 | NetExec | 5,598 |
| 8 | AutoSploit | 5,240 |
| 9 | Nettacker | 5,229 |
| 10 | IntelOwl | 4,596 |
| 11 | TorBot | 4,113 |
| 12 | pocsuite3 | 3,845 |
| 13 | chipsec | 3,261 |
| 14 | llm-guard | 3,062 |
| 15 | opencve | 2,737 |
| 16 | Reconnoitre | 2,189 |
| 17 | rapidscan | 2,059 |
| 18 | evillimiter | 1,981 |
| 19 | dronesploit | 1,945 |
| 20 | cve-bin-tool | 1,701 |
| 21 | requests-ip-rotator | 1,658 |
| 22 | extract_otp_secrets | 1,621 |
| 23 | pygod | 1,492 |
Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com