septr 0.1.0__tar.gz

septr-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 LintGRC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

septr-0.1.0/PKG-INFO

@@ -0,0 +1,90 @@
+Metadata-Version: 2.4
+Name: septr
+Version: 0.1.0
+Summary: Runtime security middleware for vibe-coded apps
+License: MIT
+Project-URL: Homepage, https://github.com/LintGRC/septr
+Project-URL: Repository, https://github.com/LintGRC/septr
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Provides-Extra: flask
+Requires-Dist: flask>=2.0; extra == "flask"
+Provides-Extra: fastapi
+Requires-Dist: fastapi>=0.100; extra == "fastapi"
+Requires-Dist: uvicorn>=0.20; extra == "fastapi"
+Dynamic: license-file
+
+# septr — runtime security middleware for Python
+
+Protects FastAPI and Flask apps at runtime: secrets leaking in responses,
+BOLA/IDOR, missing auth, business-logic tampering, PII, prompt injection,
+SSRF, and missing rate limits. Auto-verified against the Septr backend,
+with per-engine SOC 2 evidence for your dashboard.
+
+## Install
+
+```bash
+pip install septr
+```
+
+Add your key to `.env`:
+
+```
+SEPTR_API_KEY=septr_live_...
+```
+
+## FastAPI
+
+```python
+from fastapi import FastAPI
+from septr.adapters.fastapi import SeptrASGIMiddleware
+import os
+
+app = FastAPI()
+
+app.add_middleware(
+    SeptrASGIMiddleware,
+    api_key=os.getenv("SEPTR_API_KEY"),
+)
+```
+
+## Flask
+
+```python
+from flask import Flask
+from septr.adapters.flask import SeptrFlask
+import os
+
+app = Flask(__name__)
+# ... your routes ...
+app.wsgi_app = SeptrFlask(app.wsgi_app, {"apiKey": os.getenv("SEPTR_API_KEY")})
+```
+
+## Config
+
+| Option | Type | Default | Description |
+|---|---|---|---|
+| `apiKey` | str | env `SEPTR_API_KEY` | Backend API key |
+| `strictMode` | bool | `False` | Block instead of detect |
+| `secrets` | bool | `True` | Secret/PII detection + response scrubbing |
+| `bola` | bool | `True` | BOLA/IDOR detection |
+| `rateLimit` | bool | `True` | Per-route rate limiting |
+| `inputSanitize` | bool | `True` | SQLi/XSS/NoSQLi sanitization |
+| `ssrf` | bool | `True` | SSRF heuristics |
+| `promptInjection` | bool | `True` | Prompt-injection shielding |
+| `aiRateLimit` | bool | `True` | Rate limiting for AI endpoints |
+| `tamper` | bool | `True` | Business-logic tamper detection |
+| `missingAuth` | bool | `True` | Missing-auth detection |
+| `stripFields` | list[str] | `[]` | Fields to strip from responses |
+| `telemetry_url` | str | `https://api.septr.com/v1/events` | Telemetry endpoint |
+
+## Environment variables
+
+- `SEPTR_API_KEY` — your project key
+- `SEPTR_SILENCE_ENV_WARNING` — set to `1` to silence the fail-loud
+  missing-key warning
+
+## License
+
+MIT

septr-0.1.0/README.md

@@ -0,0 +1,73 @@
+# septr — runtime security middleware for Python
+
+Protects FastAPI and Flask apps at runtime: secrets leaking in responses,
+BOLA/IDOR, missing auth, business-logic tampering, PII, prompt injection,
+SSRF, and missing rate limits. Auto-verified against the Septr backend,
+with per-engine SOC 2 evidence for your dashboard.
+
+## Install
+
+```bash
+pip install septr
+```
+
+Add your key to `.env`:
+
+```
+SEPTR_API_KEY=septr_live_...
+```
+
+## FastAPI
+
+```python
+from fastapi import FastAPI
+from septr.adapters.fastapi import SeptrASGIMiddleware
+import os
+
+app = FastAPI()
+
+app.add_middleware(
+    SeptrASGIMiddleware,
+    api_key=os.getenv("SEPTR_API_KEY"),
+)
+```
+
+## Flask
+
+```python
+from flask import Flask
+from septr.adapters.flask import SeptrFlask
+import os
+
+app = Flask(__name__)
+# ... your routes ...
+app.wsgi_app = SeptrFlask(app.wsgi_app, {"apiKey": os.getenv("SEPTR_API_KEY")})
+```
+
+## Config
+
+| Option | Type | Default | Description |
+|---|---|---|---|
+| `apiKey` | str | env `SEPTR_API_KEY` | Backend API key |
+| `strictMode` | bool | `False` | Block instead of detect |
+| `secrets` | bool | `True` | Secret/PII detection + response scrubbing |
+| `bola` | bool | `True` | BOLA/IDOR detection |
+| `rateLimit` | bool | `True` | Per-route rate limiting |
+| `inputSanitize` | bool | `True` | SQLi/XSS/NoSQLi sanitization |
+| `ssrf` | bool | `True` | SSRF heuristics |
+| `promptInjection` | bool | `True` | Prompt-injection shielding |
+| `aiRateLimit` | bool | `True` | Rate limiting for AI endpoints |
+| `tamper` | bool | `True` | Business-logic tamper detection |
+| `missingAuth` | bool | `True` | Missing-auth detection |
+| `stripFields` | list[str] | `[]` | Fields to strip from responses |
+| `telemetry_url` | str | `https://api.septr.com/v1/events` | Telemetry endpoint |
+
+## Environment variables
+
+- `SEPTR_API_KEY` — your project key
+- `SEPTR_SILENCE_ENV_WARNING` — set to `1` to silence the fail-loud
+  missing-key warning
+
+## License
+
+MIT

septr-0.1.0/pyproject.toml

@@ -0,0 +1,24 @@
+[project]
+name = "septr"
+version = "0.1.0"
+description = "Runtime security middleware for vibe-coded apps"
+readme = "README.md"
+license = { text = "MIT" }
+requires-python = ">=3.9"
+dependencies = []
+optional-dependencies = { flask = ["flask>=2.0"], fastapi = ["fastapi>=0.100", "uvicorn>=0.20"] }
+
+[project.urls]
+Homepage = "https://github.com/LintGRC/septr"
+Repository = "https://github.com/LintGRC/septr"
+
+[build-system]
+requires = ["setuptools>=68.0"]
+build-backend = "setuptools.build_meta"
+
+[tool.setuptools.packages.find]
+include = ["septr*"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+python_files = ["test_*.py"]