Install

AttackMap needs Python 3.11 or later. It isn’t on PyPI: releases come from GitHub, the M&L AI package index and the Homebrew tap.

Homebrew

The CLI with all 15 official analyzer plugins:

brew install mlaify/tap/attackmap

uv or pip, from the package index

The CLI with every analyzer plugin, from pkg.mlaify.io:

uv tool install "attackmap[all]" --index mlaify=https://pkg.mlaify.io/pypi/simple/ --index-strategy first-index

Core only, straight from GitHub (add analyzers later with attackmap suggest . --install or -m <name>):

pipx install git+https://github.com/mlaify/AttackMap.git

The [llm] extra adds the Anthropic and OpenAI SDKs for the API backends of the AI review. The CLI backends (claude, codex) need nothing extra.

The macOS app

A native front end that drives the same CLI. The cask installs the CLI too:

brew install --cask mlaify/tap/attackmap-app

Or download the DMG from AttackMap-mac releases. It needs macOS 15 or later.

Check it

attackmap --help
attackmap modules        # the analyzers installed
attackmap analyze /path/to/repo --output reports

Then open reports/defensive-review.md. The quickstart walks through the reports, and the install guide covers CI.