Pysa: Open-Source Tool For Python Security Bug Detection

Pysa, a powerful tool used by Facebook to identify and eliminate security vulnerabilities in Python code, is now open-source.

Facebook has open-sourced Pysa, an internal tool used on Instagram to detect and fix bugs in the huge Python codebase of the app. Pysa can automatically identify vulnerable code snippets written by Facebook engineers before they are integrated into the social network’s systems.

It is a static analyzer tool meaning it works by scanning code in a “static” form before the code is compiled. It hunts for common patterns that are usually observed in bugs and flags the potential issues in the code.