Bandit is a tool designed to find common security issues in Python code.
Alternatives To Bandit
Project NameStarsDownloadsRepos Using ThisPackages Using ThisMost Recent CommitTotal ReleasesLatest ReleaseOpen IssuesLicenseLanguage
8 days ago464gpl-3.0C++
Free and Open Source Reverse Engineering Platform powered by rizin
3 days ago9March 05, 2022196apache-2.0Python
Bandit is a tool designed to find common security issues in Python code.
Dependencycheck5,08031814 hours ago106September 14, 2022412apache-2.0Java
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
3 days agogpl-3.0Shell
This is a multi-use bash script for Linux systems to audit wireless networks.
Faraday3,941115 days ago23January 10, 202237gpl-3.0Python
Open Source Vulnerability Management Platform
Retire.js3,2762,1221482 days ago102September 14, 20221otherJavaScript
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
Mistune2,2398,879367a month ago35July 14, 202218bsd-3-clausePython
A fast yet powerful Python Markdown parser with renderers and plugins.
17 hours ago18July 12, 20222,572otherPHP
Security, performance, marketing, and design tools — Jetpack is made by WordPress experts to make WP sites safer and faster, and help you grow your traffic.
Sudo_pair1,169116 months ago5March 27, 202016apache-2.0Rust
Plugin for sudo that requires another human to approve and monitor privileged sudo sessions
Elasticsearch Readonlyrest Plugin944
9 days ago34June 25, 20228gpl-3.0Scala
Free Elasticsearch security plugin and Kibana security plugin: super-easy Kibana multi-tenancy, Encryption, Authentication, Authorization, Auditing
Alternatives To Bandit
Select To Compare

Alternative Project Comparisons
Build Status Docs Status Latest Version Python Versions Format License Discord

A security linter from PyCQA


Bandit is a tool designed to find common security issues in Python code. To do this Bandit processes each file, builds an AST from it, and runs appropriate plugins against the AST nodes. Once Bandit has finished scanning all the files it generates a report.

Bandit was originally developed within the OpenStack Security Project and later rehomed to PyCQA.

Bandit Example Screen Shot

Show Your Style

Security Status

Use our badge in your project's README!

using Markdown:

[![security: bandit](](

using RST:

.. image::
    :alt: Security Status


Python AST module documentation:

Green Tree Snakes - the missing Python AST docs:

Documentation of the various types of AST nodes that Bandit currently covers or could be extended to cover:

Popular Security Projects
Popular Plugin Projects
Popular Security Categories
Related Searches

Get A Weekly Email With Trending Projects For These Categories
No Spam. Unsubscribe easily at any time.
Security Tools
Static Code Analysis
Security Scanner