Application Security capabilities support

The following application security capabilities are supported in the Python library, for the specified tracer version:

Note: Threat Protection requires enabling Remote Configuration, which is included in the listed minimum tracer version.

Supported deployment types

Language and framework compatibility

Supported Python versions

The Python Application Security Client library follows a versioning policy that specifies the support level for the different versions of the library and Python runtime.

Two release branches are supported:

And the library supports the following runtimes:

Web framework compatibility

• Attacker source HTTP request details
• Tags for the HTTP request (status code, method, etc)
• Distributed Tracing to see attack flows through your applications

Application Security Capability Notes

• Software Composition Analysis is supported on all frameworks

Supported frameworks

Support for query strings is not available for Flask.

Data store compatibility

Datastore tracing provides:

• timing request to response
• query info (for example, a sanitized query string)
• error and stacktrace capturing

Application Security Capability Notes

• Software Composition Analysis is supported on all frameworks.
• Threat Protection also works at the HTTP request (input) layer, and so works for all databases by default, even those not listed in the table below.

The Python library supports the database API specifications and supports all generic SQL databases. This includes databases such as SQLite, Mysql, Postgres and MariaDB.

User Authentication Frameworks compatibility

Integrations to User Authentication Frameworks provide:

• User login events, including the user IDs
• Account Takeover detection monitoring for user login events