Depheal
Offline Python CVE vulnerability scanner...
9 followers
Offline Python CVE vulnerability scanner...
9 followers
Depheal scans your Python projects for known CVE vulnerabilities instantly - no internet needed. Zero dependencies, pure local security scanning using AST analysis. Find critical bugs in seconds, fix them immediately. Built for developers who care about security but hate complexity. Open source, available on PyPI.
Free
Launch Team
Render: Get up to $100K in startup creditsThe fastest way to launch and scale your startup in the cloud
Promoted
Ran it against an old flask project and it caught a requests CVE i had completely missed, all offline in under a second. The pure local approach is genuinely useful for air-gapped work.
really cool that this runs offline, that part is honestly super underrated. one thing i keep wondering though is whether you could add support for requirements.txt and pyproject.toml scanning too, since a lot of projects have transitive deps that the actual source code doesnt directly import but still pulls in vulnerable versions. would round out the tool nicely
The pure local AST analysis is a really thoughtful call, especially for devs handling sensitive code who can't just pipe everything to a cloud scanner. Love that it ships with zero dependencies too.
Love the offline-first approach, super practical for CI pipelines and air-gapped environments. One thing that would make this even more useful is auto-generating the minimal version bump or pin needed to resolve each flagged CVE, so devs can just copy-paste the fix into their requirements file instead of digging through advisories.