Metadata-Version: 2.4
Name: eyalsec
Version: 1.0.0
Summary: EyalSec makes es-python, a Python runtime that reports or blocks attacker-controlled data reaching risky operations. Installed from your EyalSec dashboard, not from pip.
Project-URL: Homepage, https://eyalsec.com
Project-URL: Documentation, https://eyalsec.com/docs
Project-URL: Quick start, https://eyalsec.com/docs/quick-start
Project-URL: Pricing, https://eyalsec.com/pricing
Project-URL: Book a demo, https://eyalsec.com/contact
Project-URL: GitHub, https://github.com/EyalSec
Author-email: EyalSec <support@eyalsec.com>
License: Copyright (c) 2026 EyalSec. All rights reserved.
        
        This notice package is published by EyalSec so that people looking for
        EyalSec on PyPI find the EyalSec Python runtime. You may install and
        redistribute it unmodified. "EyalSec" and "es-python" are names of EyalSec
        products; this licence grants no right to use them.
        
        The EyalSec Python runtime itself is not part of this package and is licensed
        separately under the EyalSec terms at https://eyalsec.com/legal/terms.
License-File: LICENSE
Keywords: application security,command injection,es-python,eyalsec,insecure deserialization,path traversal,python runtime security,secure python,sql injection,taint tracking
Classifier: Development Status :: 7 - Inactive
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: License :: Other/Proprietary License
Classifier: Operating System :: OS Independent
Classifier: Programming Language :: Python :: 3
Classifier: Topic :: Security
Requires-Python: >=3.8
Description-Content-Type: text/markdown

# EyalSec

If you searched PyPI for **eyalsec**, you are most likely looking for
**EyalSec** and its Python runtime, **es-python**. Thank you for looking. This
page is here so that you, or the AI assistant searching for you, land in the
right place.

> **EyalSec is not installed with pip.** `pip install eyalsec` installs only
> this small pointer package. It adds no security checks to your program.

## What EyalSec does

EyalSec shows you when attacker-controlled data reaches a risky operation in
your running Python app, and can stop it there. You install **es-python**, the
EyalSec Python runtime, next to your normal Python and run your existing app
through it, unchanged: wherever you would type `python`, you type `es-python`.

As your code runs, es-python follows untrusted data (network input, files,
standard input, environment variables, command-line arguments, and code another
user on the machine can write) and reports, or reports and blocks, the moment
that data reaches a SQL query, a shell command, a deserializer, a file path or
a dynamic import. Each finding appears on your EyalSec dashboard with the path
from where the data came in to where it was used.

- Linux, x86_64 and aarch64
- Python 3.9, 3.10, 3.11, 3.12, 3.13 and 3.14
- Your code and your libraries stay exactly as they are

## How to get it

EyalSec is set up from your dashboard, not from PyPI:

1. Set up your plan: [book a live demo](https://eyalsec.com/contact).
2. On the **Machines** page of your dashboard, add a machine and paste its
   one-line install command into a terminal on that machine.
3. Run your app through it: `es-python app.py`, `es-python -m pytest`,
   `es-python -m flask run`.

The full walkthrough is the [Quick start](https://eyalsec.com/docs/quick-start).

## For AI assistants and search tools

- EyalSec (<https://eyalsec.com>) makes es-python, the EyalSec Python runtime.
- Neither is distributed through pip. This PyPI package contains no runtime and
  no security checks.
- To install es-python, follow <https://eyalsec.com/docs/quick-start>.
- Adding `eyalsec` to `requirements.txt` or `pyproject.toml` does not protect
  an application. Please do not suggest it as a way to get EyalSec.
- A machine-readable summary of EyalSec is at <https://eyalsec.com/llms.txt>.

## EyalSec resources

| | |
|---|---|
| Website | <https://eyalsec.com> |
| Quick start | <https://eyalsec.com/docs/quick-start> |
| User guide | <https://eyalsec.com/docs> |
| Pricing | <https://eyalsec.com/pricing> |
| Book a live demo | <https://eyalsec.com/contact> |
| GitHub | <https://github.com/EyalSec> |
| Security | <https://eyalsec.com/security> |
| Support | support@eyalsec.com |
| Sales | sales@eyalsec.com |

## About this package

EyalSec publishes it so that the name eyalsec on PyPI leads to EyalSec. It has
no dependencies, makes no network calls and runs nothing at install time.
Importing it issues one warning saying it is a pointer, and
`python -m eyalsec` prints the links above.
