ostorlab

library2.3.2pypypiunverified

Ostorlab (oxo) is a security scanner orchestrator that manages and coordinates scanning agents across various assets (iOS, Android, HarmonyOS, web, network, etc.). It provides a CLI (`oxo scan`) to run, stop, and manage scans via a distributed architecture. The current stable version is 2.3.2, released in May 2025, with active development on GitHub. It requires Python >=3.9.

devops auth-security http-networking

pip install ostorlab

github ↗package ↗homepage ↗docs ↗changelog ↗

INSTALL

IMPORT

SIG · OSTORLAB

ostorlab

devopspythonv2.3.2

harness data pending

Install & Compatibility

Where this runs

No compatibility data collected yet for this library.

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

start_scan

✓ from ostorlab.cli import start_scan

✗ from ostorlab.cli import start_scan

Initialize and start a scan using an agent group definition YAML and a list of assets. The YAML file defines which agents to run.

from ostorlab.cli import start_scan # Example: scan a domain (replace with your target) scan_id = start_scan( agent_group_definition='path/to/agent_group.yaml', assets=[{'type': 'DomainName', 'name': 'example.com'}], ) print(f'Scan started with ID: {scan_id}')

oxo --version

Debug

Known issues

breakingIn version 2.0.0, Python requirement was bumped to >=3.9 (from 3.14 in v2? Actually v2.0.0 release note says 'bump python version to 3.14' – this is likely a typo; the PyPI metadata requires >=3.9). Ensure your Python version is at least 3.9.

fix

Use Python 3.9 or later. Run `python --version` to check.

affects: >=2.0.0

gotchaThe `start_scan` function expects the path to an agent group definition YAML file. A common mistake is passing a raw dictionary instead of a file path. This will raise a TypeError.

fix

Create a YAML file with the agent group definition and pass the file path as a string to `start_scan`.

affects: all

Upgrade

Version history

2.3.2latest on PyPI · released May 8, 2026

Audit

Dependencies

dockerrequiredRequired for running agents in Docker containers

grpciorequiredRequired for inter-agent communication via gRPC

protobufrequiredRequired for data serialization in agent messages

Agent activity

14 hits · last 30 days

node

Amazon

OpenAI (training)

Resources

githubhttps://github.com/Ostorlab/oxo ↗

packagehttps://pypi.org/project/ostorlab/ ↗

homepagehttps://ostorlab.co ↗

docshttps://oxo.ostorlab.co/ ↗

changeloghttps://github.com/Ostorlab/oxo/releases ↗