We're hiring! View our open positions here.
Detect and fix vulnerable dependencies with the most comprehensive Python, Java, and JavaScript security scanner. Backed by 4x more vulnerability data than public databases and seamlessly integrates into any development workflow.
In 2024 alone, over 500,000 malicious packages were detected - a 156% increase from the previous year. With attackers now weaponizing vulnerabilities within hours instead of months, unscanned dependencies pose an immediate risk to your systems. Safety CLI provides the essential visibility and protection you need against this rapidly evolving threat landscape.
Deploy Safety CLI in seconds across development machines, CI/CD pipelines, and production systems.
Stop wasting time on false positives. Safety CLI prioritizes vulnerabilities based on actual risk to your code, with precise reachability analysis and verified fix recommendations.
Safety CLI leverages our proprietary vulnerability database, detecting 4x more security issues than public sources. Every scan is backed by our team of security researchers and AI-powered analysis.
# Get started by instaling Safety
pip install safety
#Authenticate your CLI
safety auth
#Navigate to your project
cd "python project"
#Run your first security scan
safety scan
Dependency vulnerabilities detected:
jinja2==3.1.4 [1 vulnerability found]
A vulnerability in the Jinja compiler allows an attacker...
Update jinja2==3.1.4 to jinja2==3.1.5 to fix 1 vulnerability
View Scan Results: https://platform.safetycli.com/Safety CLI leverages our proprietary security intelligence to detect 4x more vulnerabilities than public databases. Our cybersecurity team proactively monitors package releases and code changes, with AI-powered analysis detecting vulnerability signals that others miss.
Scanning at every stage of development
Safety delivers real-time vulnerability detection across your dependency tree, from local development environments all the way through CI/CD and into Production. Shift-Left and detecting security threats as early in the development lifecycle as possibel.
Expert-verified fixes and remediation steps
Safety's team of cybersecurity researchers monitor signals and changes in millions of open-source packages. We verify every fix to ensure our recommendations are accurate and include detailed technical advisories for every vulnerability.
Safety 3.3.2 scanning
Project: get-safety
Environment: development
Scan policy: fetched from Safety Platform
Python detected. Found 4 Python requirements files
and 3 Python environments
Dependency vulnerabilities detected:
jinja2==3.1.4 [1 vulnerability found]
-> Vuln ID 74735:
A vulnerability in the Jinja compiler allows...
Learn more: https://platform.safetycli.com
Update jinja2==3.1.4 to jinja2==3.1.5 to fix 1 vulnerability
Tested 1236 dependencies for security issues using policy fetched from Safety Platform
1 vulnerabilities found, 3 ignored due to policy.
1 fixes suggested, resolving 1 vulnerabilities.
View Scan Results: https://platform.safetycli.com/register
Safety supports Python versions >=3.7. Further details on supported versions, as well as options to run Safety CLI on versions <3.7 using a Docker image are available in our Documentation Hub.
Step 1
# Run this command in your terminal to install Safety
pip install safetyStep 2
# Register for a free account via the CLI or via
# https://platform.safetycli.com/register
safety auth loginStep 3
# Using the Terminal, navigate to a project, e.g. cd my/project/.
safety scanStep 4
#Clear, Actionable Recommendations:
Dependency vulnerabilities detected:
jinja2==3.1.4 [1 vulnerability found]
-> Vuln ID 74735:
A vulnerability in the Jinja compiler allows an attacker who can
control both the content and filename of a te...
Update jinja2==3.1.4 to jinja2==3.1.5 to fix 1 vulnerability
View Scan Results: https://platform.safetycli.com/Step 5
Stop supply chain attacks at the source. Safety Firewall prevents the installation of malicious, vulnerable, and non-compliant open-source dependencies.
