Alternatives to bandit
Other tools in this directory that do similar work, with a verified install command for each. bandit itself: install bandit.
dnsgen
DNSGen is a powerful and flexible DNS name permutation tool designed for security researchers and penetration testers. It generates intelligent domain
ruff
An extremely fast Python linter and code formatter, written in Rust
black
The uncompromising Python code formatter
trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
eslint
Find and fix problems in your JavaScript code
scc
Sloc, Cloc and Code: scc is a very fast accurate code counter with complexity calculations and COCOMO estimates written in pure Go
credo
A static code analysis tool for the Elixir language with a focus on code consistency and teaching
autorest
OpenAPI (f.k.a Swagger) Specification code generator. Supports C#, PowerShell, Go, Java, Node.js, TypeScript, Python
autopep8
A tool that automatically formats Python code to conform to the PEP 8 style guide
opengrep
🔎 Static code analysis engine to find security issues in code
weggli
weggli is a fast and robust semantic search tool for C and C++ codebases. It is designed to help security researchers identify interesting functionali
kubeaudit
kubeaudit helps you audit your Kubernetes clusters against common security controls
dep-tree
Tool for helping developers keep their code bases clean and decoupled. It allows visualising a code base complexity using a 3d force-directed graph of
uv
An extremely fast Python package and project manager, written in Rust
git
Git Source Code Mirror - This is a publish-only repository but pull requests can be turned into patches to the mailing list via GitGitGadget (https://
prettier
Prettier is an opinionated code formatter
pyenv
Simple Python version management
fd
A simple, fast and user-friendly alternative to 'find'
poetry
Python packaging and dependency management made easy
VSCodium
binary releases of VS Code without MS branding/telemetry/licensing
pipenv
Python Development Workflow for Humans
cloc
cloc counts blank lines, comment lines, and physical lines of source code in many programming languages
mypy
Optional static typing for Python
nebula
A scalable overlay networking tool with a focus on performance, simplicity and security
How we picked these
We match on what the tool does and how it installs, then order by how widely each project is used. We're not saying these are better or worse than bandit — that depends on what you're building. We're saying they're the projects people reach for in the same situations, and each one has an install command we checked against its documentation.
bandit is developed by its own authors and this page is an independent reference; we are not affiliated with or sponsored by any project listed, and nothing here is a paid placement.