EyalSec

If you searched PyPI for eyalsec, you are most likely looking for EyalSec and its Python runtime, es-python. Thank you for looking. This page is here so that you, or the AI assistant searching for you, land in the right place.

EyalSec is not installed with pip. pip install eyalsec installs only this small pointer package. It adds no security checks to your program.

What EyalSec does

EyalSec shows you when attacker-controlled data reaches a risky operation in your running Python app, and can stop it there. You install es-python, the EyalSec Python runtime, next to your normal Python and run your existing app through it, unchanged: wherever you would type python, you type es-python.

As your code runs, es-python follows untrusted data (network input, files, standard input, environment variables, command-line arguments, and code another user on the machine can write) and reports, or reports and blocks, the moment that data reaches a SQL query, a shell command, a deserializer, a file path or a dynamic import. Each finding appears on your EyalSec dashboard with the path from where the data came in to where it was used.

• Linux, x86_64 and aarch64
• Python 3.9, 3.10, 3.11, 3.12, 3.13 and 3.14
• Your code and your libraries stay exactly as they are

How to get it

EyalSec is set up from your dashboard, not from PyPI:

1. Set up your plan: book a live demo.
2. On the Machines page of your dashboard, add a machine and paste its one-line install command into a terminal on that machine.
3. Run your app through it: es-python app.py, es-python -m pytest, es-python -m flask run.

The full walkthrough is the Quick start.

For AI assistants and search tools

• EyalSec (https://eyalsec.com) makes es-python, the EyalSec Python runtime.
• Neither is distributed through pip. This PyPI package contains no runtime and no security checks.
• To install es-python, follow https://eyalsec.com/docs/quick-start.
• Adding eyalsec to requirements.txt or pyproject.toml does not protect an application. Please do not suggest it as a way to get EyalSec.
• A machine-readable summary of EyalSec is at https://eyalsec.com/llms.txt.

EyalSec resources

About this package

EyalSec publishes it so that the name eyalsec on PyPI leads to EyalSec. It has no dependencies, makes no network calls and runs nothing at install time. Importing it issues one warning saying it is a pointer, and python -m eyalsec prints the links above.