Stream helps developers build engaging apps that scale to millions with performant and flexible Chat, Feeds, Moderation, and Video APIs and SDKs powered by a global edge network and enterprise-grade infrastructure. Learn more →
Top 23 Python security-tool Projects
-
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
Project mention: Fighting bots by implementing fast TCP fingerprinting with eBPF | news.ycombinator.com | 2025-06-29
something like https://github.com/renanqts/xdpdropper or cilium's host firewall or https://github.com/boylegu/TyrShield exist or https://github.com/ebpf-security/xdp-firewall today and implement ebpf filter based firewalling.
Of these there is a sample integration for XDPDropper to fail2ban that never got merged https://github.com/fail2ban/fail2ban/pull/3555/files -- I don't think anyone else has really worked on that junction of functionality yet.
There's also wazuh which seems to package ebpf tooling up with a ton of detection and management components, but its not a simple to deploy as fail2ban.
-
prowler
Prowler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more. It helps for continuos monitoring, security assessments and audits, incident response, compliance, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, ENS and more
11. Prowler
-
Project mention: python-dublin-traceroute VS scapy - a user suggested alternative | libhunt.com/r/python-dublin-traceroute | 2025-03-05
-
bbot is a recursive internet scanner that supports Python-based modules.
-
Static Analysis: Tools like Bandit or SonarQube to catch code-level issues.
-
-
Stream
Stream - Scalable APIs for Chat, Feeds, Moderation, & Video. Stream helps developers build engaging apps that scale to millions with performant and flexible Chat, Feeds, Moderation, and Video APIs and SDKs powered by a global edge network and enterprise-grade infrastructure.
-
-
-
Nettacker
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
Project mention: Nettacker: Open-Source Automated Penetration Testing and Vulnerability Scanner | news.ycombinator.com | 2024-09-03 -
-
pocsuite3
pocsuite3 is an open-sourced remote vulnerability testing framework developed by the Knownsec 404 Team.
-
-
-
-
Reconnoitre
A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, along with writing out recommendations for further testing.
-
-
In this story, we will create our first AI agents using Agent Development Kit. AI agents will be integrated with Google OSV, MITRE, KEV, and a bit of Google search. AI agents will enrich data about given vulnerabilities with public data from different sources to help prioritize (triage) problems.
-
-
Project mention: Securing and enhancing LLM prompts & outputs: A guide using Amazon Bedrock and open-source solutions | dev.to | 2024-10-01
Image source:https://llm-guard.com/
-
evillimiter
Tool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access.
-
requests-ip-rotator
A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
> Ge0rg3’s code is “open source,” in that anyone can copy it and reuse it non-commercially. As it happens, there is a newer version of this project that was derived or “forked” from Ge0rg3’s code — called “async-ip-rotator” — and it was committed to GitHub in January 2025 by DOGE captain Marko Elez.
Original code: https://github.com/Ge0rg3/requests-ip-rotator
Forked: https://github.com/markoelez/async-ip-rotator
Code is pretty much the same, with comments removed, some `async` sprinkled in and minor changes (I bet this was just pasted into LLM with prompt to make it async, but if that worked why not).
Except... Original GPL3 license is gone. Obviously not something you would expect DOGE people to understand or respect.
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Python security-tools discussion
Python security-tools related posts
-
App Security: Common Attacks & How to Prevent Them
-
Bandit: Find common security issues in Python code
-
🔒 Bandit: Python Static Application Security Testing Guide
-
Doge Worker's Code Supports NLRB Whistleblower
-
Building AI Agents to Prioritize CVEs — A Google ADK Guide
-
Panic at the CVE-o-theque [video]
-
🛡️ How to Use Bandit as a SAST Tool for Your Python App
-
A note from our sponsor - Stream
getstream.io | 17 Jul 2025
Index
What are some of the best open-source security-tool projects in Python? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | spiderfoot | 14,772 |
| 2 | Fail2Ban | 14,815 |
| 3 | prowler | 11,844 |
| 4 | scapy | 11,554 |
| 5 | bbot | 8,746 |
| 6 | bandit | 7,167 |
| 7 | monkey | 6,827 |
| 8 | AutoSploit | 5,117 |
| 9 | NetExec | 4,410 |
| 10 | Nettacker | 4,332 |
| 11 | IntelOwl | 4,203 |
| 12 | pocsuite3 | 3,741 |
| 13 | TorBot | 3,359 |
| 14 | consoleme | 3,190 |
| 15 | chipsec | 3,072 |
| 16 | Reconnoitre | 2,159 |
| 17 | opencve | 2,095 |
| 18 | osv.dev | 1,920 |
| 19 | rapidscan | 1,861 |
| 20 | llm-guard | 1,836 |
| 21 | evillimiter | 1,737 |
| 22 | requests-ip-rotator | 1,587 |
| 23 | dronesploit | 1,575 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com