Data / Repositories / Security / Python
Python Security repositories on GitHub: 33 ranked by stars
33 public Python repositories tagged Security are on GitHub, with 160,703 stars between them; 25 had a push in the last 30 days. The most starred: usestrix/strix (68,539), prowler-cloud/prowler (15,030), maurosoria/dirsearch (14,951).
SpecStream is the live web data engine for teams and agents. It reads open-source repositories on GitHub and keeps what it reads, and this page groups that reading by topic. Ask for the repositories you track by topic, language, license or activity, and new ones and changes arrive in your sheet, CRM, Slack or agent.
Every repository, most starred first
| Repository | What it is | Stars | Forks | License | Last push | Read |
|---|---|---|---|---|---|---|
| usestrix/strix | Open-source AI penetration testing tool to find and fix your app’s vulnerabilities. | 68,539 | 7,595 | Apache-2.0 | Oct 14 | Oct 14 |
| prowler-cloud/prowler | Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment. | 15,030 | 2,433 | Apache-2.0 | Oct 14 | Oct 14 |
| maurosoria/dirsearch | Web path scanner | 14,951 | 2,453 | Oct 7 | Oct 14 | |
| firerpa/lamda | Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida, proxy/VPN/frp/P2P networking, MCP/Agent… | 8,600 | 1,163 | MIT | Sep 27 | Oct 14 |
| Tencent/AI-Infra-Guard | A full-stack AI Red Teaming platform securing AI ecosystems via Agent Scan, Skills Scan, MCP scan, AI Infra scan and LLM jailbreak evaluation. | 6,868 | 661 | Apache-2.0 | Oct 14 | Oct 14 |
| microsoft/agent-governance-toolkit | AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top… | 6,427 | 1,133 | MIT | Oct 13 | Oct 14 |
| ivre/ivre | Network recon framework. Build your own, self-hosted and fully-controlled alternatives to Shodan / ZoomEye / Censys and GreyNoise, run your Passive DNS service, build your… | 4,175 | 699 | GPL-3.0 | Oct 1 | Oct 14 |
| jekil/awesome-hacking | Awesome hacking is an awesome collection of hacking tools. | 4,008 | 642 | May 16 | Oct 11 | |
| TracecatHQ/tracecat | Open-source security automation platform for teams and AI agents | 3,836 | 433 | AGPL-3.0 | Oct 14 | Oct 14 |
| gmh5225/awesome-game-security | awesome game security [Welcome to PR] | 3,600 | 512 | MIT | Oct 14 | Oct 14 |
| mikeroyal/Digital-Forensics-Guide | Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics. | 3,181 | 400 | Jan 4, 2024 | Oct 11 | |
| snyk/agent-scan | Security scanner for AI agents, MCP servers and agent skills. | 3,138 | 288 | Apache-2.0 | Oct 14 | Oct 14 |
| hslatman/awesome-industrial-control-system-security | A curated list of resources related to Industrial Control System (ICS) security. | 2,033 | 490 | Apache-2.0 | Oct 10, 2025 | Oct 11 |
| wgpsec/AboutSecurity | Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。 | 1,790 | 248 | Oct 10 | Oct 14 | |
| ossf/cve-bin-tool | The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2… | 1,777 | 670 | GPL-3.0 | Oct 7 | Oct 11 |
| OpenOSINT/OpenOSINT | AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only. | 1,753 | 278 | MIT | Oct 13 | Oct 14 |
| Ge0rg3/requests-ip-rotator | A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing. | 1,679 | 173 | GPL-3.0 | Jul 13 | Sep 21 |
| mukul975/cve-mcp-server | Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more. | 1,624 | 269 | Apache-2.0 | Oct 1 | Oct 14 |
| scadastrangelove/awesome-ai-security-tools | A curated list of public-source, research, and commercial tools for AI security and AI-assisted cybersecurity — autotriage, agent security, AI/ML supply chain, pentest agents, AI… | 1,602 | 401 | Oct 8 | Oct 11 | |
| cisco-ai-defense/mcp-scanner | Scan MCP servers for potential threats & security findings. | 1,090 | 143 | Apache-2.0 | Oct 13 | Oct 14 |
| morluto/awesome-reverse-engineering | Curated reverse-engineering tools and learning resources for binaries, apps, firmware, formats, and protocols. | 1,052 | 239 | CC0-1.0 | Oct 20 | Oct 21 |
| hashgraph-online/hol-guard | Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime. | 892 | 158 | Apache-2.0 | Oct 14 | Oct 14 |
| Wh0am123/MCP-Kali-Server | MCP configuration to connect AI agent to a Linux machine. | 848 | 171 | MIT | Mar 17 | Oct 14 |
| FuzzingLabs/mcp-security-hub | A growing collection of MCP servers bringing offensive security tools to AI assistants. Nmap, Ghidra, Nuclei, SQLMap, Hashcat and more. | 800 | 102 | MIT | Apr 8 | Oct 8 |
| PaulDuvall/ai-development-patterns | A comprehensive collection of AI development patterns for building software with AI assistance, organized by implementation maturity and development lifecycle phases. Includes… | 663 | 55 | MIT | Oct 13 | Oct 14 |
| gensecaihq/Wazuh-MCP-Server | Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, HIPAA, NIST CSF, ISO 27001)… | 251 | 65 | MIT | Oct 9 | Oct 14 |
| frishtik/osint-tools-mcp-server | MCP server exposing multiple OSINT tools for AI assistants like Claude | 244 | 32 | MIT | Aug 7, 2025 | Oct 14 |
| tumf/mcp-shell-server | Secure MCP server for whitelisted shell command execution with stdin, argv pipelines, timeouts, and structured audit logging. | 201 | 51 | MIT | Oct 14 | Oct 14 |
| charlesjones-dev/ai-agent-plugins | Plugins for git and project workflows, code audits and release checks. All 13 run in Claude Code, and 8 also run in Codex and Cursor. | 35 | 3 | MIT | Oct 14 | Oct 14 |
| olanokhin/openresearch-mcp | Zero-auth, security-hardened cross-domain research MCP server: web, academic, GitHub, news, weather, macro/finance, SEC, biomedical, Bluesky, YouTube. SSRF and prompt-injection… | 11 | 1 | Apache-2.0 | Jul 8 | Oct 14 |
| eltociear/skill-audit-mcp | Static security scanner for MCP servers, agent skills & plugins: 17 attack patterns / 60 regex signatures, calibrated to a 1% false-positive rate over 196 public MCP servers. In… | 5 | 1 | MIT | Sep 30 | Oct 14 |
| munimtechnologies/self-hosted-ai-security-checklist | Safe defaults and one-line tests for self-hosted AI: Ollama, Open WebUI, vLLM, LiteLLM, ComfyUI, n8n, Dify, Langflow, Flowise, RAGFlow, AnythingLLM. By MV2 of Munim, Inc., with AI… | 0 | 0 | Oct 14 | Oct 14 | |
| tomelias10/mcp-drift-check | Static MCP package-reference mutability checker: Python CLI and GitHub Action. No discovered server execution. Broader config/baseline tools: Orynval Labs. | 0 | 5 | MIT | Oct 11 | Oct 14 |
Other languages
- Rust 16
- TypeScript 15
- Go 13
- C 3
- HTML 3
Related topics
- MCP 36
- Cybersecurity 20
- AI agents 19
- Model Context Protocol 18
- Awesome list 16
- AI 16
- Security tools 15
- MCP server 15
- Rust 14
- Hacking 13
- Agents 13
- Devsecops 12
Read from GitHub by SpecStream between September 21, 2026 and October 21, 2026; each row shows the day its repository was read. Stars and pushes change every day, and the GitHub page is the current one. Forks and archived repositories are left out.