From 48f415a25006242799d193141e43e7c11ac467d5 Mon Sep 17 00:00:00 2001 From: Tommaso Bona Date: Sat, 20 Sep 2025 18:21:44 +0200 Subject: [PATCH 1/7] Create index.html --- index.html | 1154 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 1154 insertions(+) create mode 100644 index.html diff --git a/index.html b/index.html new file mode 100644 index 0000000..3371fde --- /dev/null +++ b/index.html @@ -0,0 +1,1154 @@ + + + + + + PySpector - Next-Gen Python Security Scanner + + + + + + +
+ + + + + +
+
+
+ +

Next-Gen Python Security Scanner

+

+ High-performance SAST framework powered by Rust, engineered for modern Python development workflows with advanced AI/LLM security scanning capabilities. +

+
+ + Star on GitHub + + + Contribute + +
+
+
+ 338+ + Security Rules +
+
+ 100+ + AI/LLM Rules +
+
+ 95 + GitHub Stars +
+
+ 1 + Stable Beta Release +
+
+
+
+
+ + +
+
+

Performance Benchmarks

+
+
+
+
+
+
+
+ +

+ Independent performance testing demonstrates PySpector's competitive advantages in SAST scanning speed while maintaining comprehensive security analysis. +

+ +
+
+
+

PERFORMANCE BENCHMARK CHARTS

+ PySpector Performance Benchmarks +
+
+ +
+
+
+
+
+

[SPEED ADVANTAGE]

+

71% faster scanning than traditional tools through Rust-powered parallel analysis

+
+
+
+
+
+

[SCALABILITY]

+

Maintains high throughput on large codebases (500k+ lines of code)

+
+
+
+
+
+

[RESOURCE PROFILE]

+

Optimized for modern multi-core environments with adequate memory allocation

+
+
+
+
+ +
+
+
+
+
+
+

Benchmark Methodology

+

+ Performance testing conducted on Debian-based Linux VM (2 cores, 4GB RAM) across 5 major Python repositories (13k-530k lines of code). + Average of multiple runs with CPU settling periods. Head-to-head comparison against Bandit and Semgrep using identical configurations. +

+
+
+
+ + +
+
+

Core Capabilities

+
+
+
+
+
+
+
+
+
+
+
+
+ +
+

Rust-Powered Performance

+

+ Leverages a high-performance Rust core for lightning-fast analysis, avoiding the performance overhead of traditional Python-based tools. +

+
+
+
+ +
+

AI/LLM Security

+

+ Specialized ruleset with 100+ checks for AI applications, including prompt injection, insecure model loading, and dangerous agent tool usage. +

+
+
+
+ +
+

Multi-Layered Analysis

+

+ Combines regex pattern matching, AST analysis, and inter-procedural taint analysis for comprehensive vulnerability detection. +

+
+
+
+ +
+

CI/CD Integration

+

+ Git hooks, cron scripts, and multiple output formats (JSON, HTML, SARIF) for seamless integration into development workflows. +

+
+
+
+ +
+

OWASP Coverage

+

+ Built-in rules covering OWASP Top 10 vulnerabilities and beyond, with customizable TOML-based rule definitions. +

+
+
+
+ +
+

Smart Baseline

+

+ Interactive triage mode with baselining capabilities to focus on new and relevant security findings in each scan. +

+
+
+
+
+ + +
+
+

Hybrid Architecture

+
+
+
+
+
+
+
+
+
+

+ PySpector combines Python's flexibility with Rust's performance for optimal results. +

+
+
+
+

[ Python CLI ]

+

Handles arguments, config, and AST generation

+
+
>>
+
+

[ Rust Core ]

+

Parallel analysis with call graph construction

+
+
>>
+
+

[ Results ]

+

Structured findings with multiple output formats

+
+
+
+
+
+ + +
+
+

Quick Start

+
+
+
+
+
+
+
+
+ 
# Install PySpector
+pip install .
+
+# Scan a Python project
+pyspector scan /path/to/your/project
+
+# Enable AI/LLM security rules
+pyspector scan /path/to/your/project --ai
+
+# Generate HTML report
+pyspector scan /path/to/your/project -o report.html -f html
+
+# Scan remote repository
+pyspector scan --url https://github.com/username/repo.git
+
+# Interactive triage mode
+pyspector triage report.json
+
+
+
+ + +
+
+

Join the Mission

+

+ Help build the future of Python security scanning. Contribute to our growing ecosystem of security researchers and developers. +

+
+ + Star on GitHub + + + Contribute + + + Report Issues + +
+
+
+ + + + + + + From 7fdfe0a72e70ba2cd34fd8b3072a7c1b3d47d696 Mon Sep 17 00:00:00 2001 From: Tommaso Bona Date: Mon, 22 Sep 2025 16:57:25 +0200 Subject: [PATCH 2/7] Update index.html --- index.html | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/index.html b/index.html index 3371fde..6e789a0 100644 --- a/index.html +++ b/index.html @@ -760,12 +760,12 @@

Next-Gen Python Security Scanner

- 338+ + 240+ Security Rules
- 100+ - AI/LLM Rules + 45+ + AI/LLM-specific Rules
95 From 142c1ecf25784f273dd67246fc5ca5619eb59f08 Mon Sep 17 00:00:00 2001 From: Tommaso Bona Date: Mon, 22 Sep 2025 22:03:02 +0200 Subject: [PATCH 3/7] Update index.html SecurityCert's Community Project --- index.html | 34 ++++++++++++++++++++++++++++------ 1 file changed, 28 insertions(+), 6 deletions(-) diff --git a/index.html b/index.html index 6e789a0..14b2e32 100644 --- a/index.html +++ b/index.html @@ -11,11 +11,11 @@ --bg-dark: #000000; --bg-card: #0a0a0a; --bg-surface: #111111; - --text-primary: #ffffff; - --text-secondary: #888888; - --text-muted: #666666; - --accent: #ffffff; - --accent-dim: #cccccc; + --text-primary: #9b3d82; + --text-secondary: #78105e; + --text-muted: #5a244d; + --accent: #9b3d82; + --accent-dim: #7a3067; --border: #222222; --border-light: #333333; } @@ -700,6 +700,27 @@ border: 1px solid var(--border); opacity: 0.2; } + + /* New cyberpunk subtitle style */ + .logo-sub { + font-size: 1.2rem; + font-weight: 600; + color: var(--text-secondary); + text-transform: uppercase; + letter-spacing: 2px; + margin-top: -5px; + margin-left: 3px; + font-family: 'Courier New', monospace; + } + + .logo-sub .logo-link { + color: var(--text-secondary); + text-decoration: none; + } + .logo-sub .logo-link:hover { + color: var(--text-primary); + text-shadow: 0 0 5px var(--text-primary); + } @@ -712,6 +733,7 @@
PySpector
+
Powered By SecurityCert
  • Features
    • @@ -765,7 +787,7 @@

    Next-Gen Python Security Scanner

45+ - AI/LLM-specific Rules + AI/LLM Rules
95 From 7d100457d022fa1d6a494e3822ebe656aa256d38 Mon Sep 17 00:00:00 2001 From: Tommaso Bona Date: Wed, 29 Oct 2025 15:12:32 +0100 Subject: [PATCH 4/7] Update statistics in index.html --- index.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/index.html b/index.html index 14b2e32..5389fe2 100644 --- a/index.html +++ b/index.html @@ -790,11 +790,11 @@

Next-Gen Python Security Scanner

AI/LLM Rules
- 95 + 108 GitHub Stars
- 1 + 3 Stable Beta Release
From 4d5716205f4d8e477e21980367cf9587d37e5740 Mon Sep 17 00:00:00 2001 From: Tommaso Bona Date: Fri, 9 Jan 2026 12:12:31 +0100 Subject: [PATCH 5/7] Update print statement from 'Hello' to 'Goodbye' --- index.html | 1652 ++++++++++++++++------------------------------------ 1 file changed, 497 insertions(+), 1155 deletions(-) diff --git a/index.html b/index.html index 5389fe2..b84a51f 100644 --- a/index.html +++ b/index.html @@ -1,758 +1,377 @@ - - - PySpector - Next-Gen Python Security Scanner - - - + + PySpector - High-Performance Python SAST + + + + + + + + + + - -
- - - - - -
-
-
- -
- - -
-
-

Performance Benchmarks

-
-
-
-
-
-
-
- -

- Independent performance testing demonstrates PySpector's competitive advantages in SAST scanning speed while maintaining comprehensive security analysis. -

- -
-
-
-

PERFORMANCE BENCHMARK CHARTS

- PySpector Performance Benchmarks -
-
- -
-
-
-
-
-

[SPEED ADVANTAGE]

-

71% faster scanning than traditional tools through Rust-powered parallel analysis

-
-
-
-
-
-

[SCALABILITY]

-

Maintains high throughput on large codebases (500k+ lines of code)

-
-
-
-
-
-

[RESOURCE PROFILE]

-

Optimized for modern multi-core environments with adequate memory allocation

-
-
-
-
- -
-
-
-
-
-
-

Benchmark Methodology

-

- Performance testing conducted on Debian-based Linux VM (2 cores, 4GB RAM) across 5 major Python repositories (13k-530k lines of code). - Average of multiple runs with CPU settling periods. Head-to-head comparison against Bandit and Semgrep using identical configurations. -

-
-
-
- - -
-
-

Core Capabilities

-
-
-
-
-
-
-
-
-
-
-
-
- -
-

Rust-Powered Performance

-

- Leverages a high-performance Rust core for lightning-fast analysis, avoiding the performance overhead of traditional Python-based tools. -

-
-
-
- -
-

AI/LLM Security

-

- Specialized ruleset with 100+ checks for AI applications, including prompt injection, insecure model loading, and dangerous agent tool usage. -

-
-
-
- -
-

Multi-Layered Analysis

-

- Combines regex pattern matching, AST analysis, and inter-procedural taint analysis for comprehensive vulnerability detection. -

-
-
-
- -
-

CI/CD Integration

-

- Git hooks, cron scripts, and multiple output formats (JSON, HTML, SARIF) for seamless integration into development workflows. -

-
-
-
- -
-

OWASP Coverage

-

- Built-in rules covering OWASP Top 10 vulnerabilities and beyond, with customizable TOML-based rule definitions. -

-
-
-
- -
-

Smart Baseline

-

- Interactive triage mode with baselining capabilities to focus on new and relevant security findings in each scan. -

-
-
-
-
- - -
-
-

Hybrid Architecture

-
-
-
-
-
-
-
-
-
-

- PySpector combines Python's flexibility with Rust's performance for optimal results. -

-
-
-
-

[ Python CLI ]

-

Handles arguments, config, and AST generation

-
-
>>
-
-

[ Rust Core ]

-

Parallel analysis with call graph construction

-
-
>>
-
-

[ Results ]

-

Structured findings with multiple output formats

-
-
-
-
-
- - -
-
-

Quick Start

-
-
-
-
-
-
-
-
- 
# Install PySpector
-pip install .
-
-# Scan a Python project
-pyspector scan /path/to/your/project
-
-# Enable AI/LLM security rules
-pyspector scan /path/to/your/project --ai
-
-# Generate HTML report
-pyspector scan /path/to/your/project -o report.html -f html
-
-# Scan remote repository
-pyspector scan --url https://github.com/username/repo.git
-
-# Interactive triage mode
-pyspector triage report.json
-
-
-
- - -
-
-

Join the Mission

-

- Help build the future of Python security scanning. Contribute to our growing ecosystem of security researchers and developers. -

-
- - Star on GitHub - - - Contribute - - - Report Issues - -
-
-
- - - - - + └─────────┘ └─────────┘ + +
+ +

The first hybrid SAST
for Real-World Python Codebases

+ +

+ PySpector is a static analysis security testing framework for Python, + combining a Rust-powered analysis core with AST parsing, + inter-procedural taint tracking, and first-class AI and LLM security rules. +

+ +
+ View on GitHub + Quick Start +
+
+
+
240+Security Rules
+
45+AI and LLM Rules
+
19,000+PyPI Downloads
+
SARIFCI and CD Ready
+
OpenCommunity Driven
+
RustParallel Engine
+
+
+ + + +
+
+

Core Capabilities

+

+ Designed for security engineers and developers who need speed, + transparency, and extensibility. +

+ +
+

Rust-Powered Analysis

Parallel execution for large Python repositories.

+

Inter-Procedural Taint Tracking

Tracks data flows across call graphs.

+

AI and LLM Security

Rules for prompt injection and unsafe agents.

+

Multi-Layered Detection

Regex, AST, and semantic checks combined.

+

CI and CD Integration

JSON, HTML, and SARIF outputs.

+

Extensible Rules

TOML-based rule definitions.

+

Plugin System

Post-processing and custom workflows.

+

Interactive Triage

TUI-based triage and baseline management.

+
+
+
+ +
+
+

Hybrid Architecture

+

+ A clean separation between orchestration and analysis keeps PySpector fast and maintainable. +

+ +
+

Python CLI

Configuration, AST generation, rule loading.

+

Rust Core

Parallel analysis engine with taint propagation.

+

Results Layer

Console, JSON, HTML, SARIF, and interactive TUI.

+
+
+
+ +
+
+

Quick Start

+ + 
# Install from PyPI
+pip install pyspector
+
+# Scan a project
+pyspector scan ./project
+
+# Enable AI and LLM rules
+pyspector scan ./project --ai
+
+# Generate HTML report
+pyspector scan ./project -f html -o report.html
+
+# Scan remote repository
+pyspector scan --url https://github.com/user/repo.git
+
+# Interactive triage
+pyspector triage report.json
+
+
+ +
+
+
+

Contribute to PySpector

+

+ PySpector is an open source security project built by practitioners. + Contributions are welcome in rule development, Rust and Python core improvements, + documentation, testing, and security research. +

+ +
+ Star on GitHub + Contributing Guide + Good First Issues +
+
+
+
+ + + From 74093e830705431290d17eda855b0957f42ab144 Mon Sep 17 00:00:00 2001 From: Tommaso Bona Date: Tue, 27 Jan 2026 21:04:57 +0100 Subject: [PATCH 6/7] Implement API Playground for repository scanning Added API Playground section with input fields and scan functionality. --- index.html | 292 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 292 insertions(+) diff --git a/index.html b/index.html index b84a51f..437352e 100644 --- a/index.html +++ b/index.html @@ -361,6 +361,7 @@ Features Architecture Usage + API Playground Contribute GitHub @@ -475,6 +476,297 @@

Quick Start

+
+
+

API Playground

+

+ Try PySpector's REST API directly from your browser. Scan public repositories with customizable options. +

+ +
+
+ + + +
+ + + +
+ + + + +
+ +
+
+ Scan Results + +
+ 
Results will appear here...
+
+
+ +
+

Want to start using PySpector directly on your machine? Check our Quick Start!

+
+
+
+ + + + +
From f15eba615cfaba251e5876087147426cd039f0d5 Mon Sep 17 00:00:00 2001 From: Tommaso Bona Date: Fri, 6 Feb 2026 12:41:23 +0100 Subject: [PATCH 7/7] Update index.html --- index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.html b/index.html index 437352e..2de355d 100644 --- a/index.html +++ b/index.html @@ -407,7 +407,7 @@

The first hybrid SAST
for Real-World Python Codebases

240+Security Rules
45+AI and LLM Rules
-
19,000+PyPI Downloads
+
6,000+PyPI Downloads
SARIFCI and CD Ready
OpenCommunity Driven
RustParallel Engine