fray

library3.5.235pypypi✓ verified 81d ago

Fray is an open-source WAF (Web Application Firewall) security testing platform. Version 3.5.235 includes 7,200+ attack payloads, 98 WAF/CDN fingerprints, an AI-powered bypass engine, a recon pipeline, and beautiful CLI output. It supports Python >=3.8 and is actively maintained.

http-networking testing devops auth-security

pip install fray

github ↗package ↗docs ↗changelog ↗

INSTALL

IMPORT

SIG · FRAY

fray

http-networkingpythonv3.5.235

Install

3.3s avg

Import

—

Disk

40MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v3.5.235 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 0.000s · 39.9MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 3.3s · import 0.000s · 40MB

40MB installed

● package 40MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

load_waf_intel

✓ from fray import load_waf_intel

✗ from fray import Fray

Basic usage of Fray to scan a target URL. Requires an optional API key for certain features.

from fray import Fray # Initialize scanner scanner = Fray( target="http://example.com", api_key=os.environ.get("FRAY_API_KEY", ""), threads=10 ) # Run scan result = scanner.scan() print(result.summary())

fray --version

Debug

Known issues

gotchaFray uses multithreading and can generate a high volume of requests. Ensure you have permission to test the target and that your network/rate limits are not exceeded.

fix

Use the `threads` parameter to limit concurrency, or set rate limits via `max_rps`.

affects: all

deprecatedOlder versions (before 3.0) used `from fray import FrayScanner` and `fray.scan()` function. These patterns are deprecated.

fix

Upgrade to 3.x and use `from fray import Fray` and the instance-based `scan()` method.

affects: <3.0.0

gotchaThe AI bypass engine may require an internet connection and may incur costs if using third-party APIs. Check the documentation for configuration.

fix

Check the 'bypass' module configuration in the fray documentation.

affects: all

Upgrade

Version history

3.5.235latest on PyPI · released Mar 18, 2026

Audit

Dependencies

No dependency data recorded yet.

Agent activity

31 hits · last 30 days

node

OpenAI (training)

Resources

githubhttps://github.com/dalisecurity/fray ↗

packagehttps://pypi.org/project/fray/ ↗

docshttps://github.com/dalisecurity/fray/tree/hugo/docs ↗

changeloghttps://github.com/dalisecurity/fray/blob/hugo/CHANGELOG.md ↗