SecurityKit

Automated security scanning for blockchain nodes via JSON-RPC. No SSH, no agents. 8 checks covering critical vulnerabilities. Markdown reports for compliance.

Quick Start

pip install securitykit

# Scan a node
securitykit scan --rpc-url https://eth.llamarpc.com

# JSON output for CI/CD
securitykit scan --rpc-url $NODE_URL --output json

# Generate audit report
securitykit report --rpc-url $NODE_URL --output audit.md

Security Checks

Audit Reports

The report command generates a markdown file with:

• • Target URL
• • Findings table (rule ID, check, severity, status)
• • Summary counts (passed, failed, skipped)
• • Remediation section for every failed check

Attach to SOC2 evidence, internal security reviews, or validator onboarding checklists.

Custom Checks

Every check is a function: (rpc_url: str) → Finding

from securitykit.models import Finding, Severity, Status

def check_max_peers(rpc_url: str) -> Finding:
    result = _rpc_call(rpc_url, "net_peerCount")
    peers = int(result.get("result", "0x0"), 16)
    if peers > 100:
        return Finding(
            rule_id="CUSTOM-001",
            title="Excessive peer count",
            severity=Severity.MEDIUM,
            status=Status.FAIL,
            detail=f"{peers} peers (max: 100)",
            remediation="Set --maxpeers flag",
        )
    return Finding(
        rule_id="CUSTOM-001", title="Peer count normal",
        severity=Severity.MEDIUM, status=Status.PASS,
        detail=f"{peers} peers",
    )

# Add to ALL_CHECKS list in checks.py — auto-picked up by CLI

CLI Reference