diff --git a/pkgs/by-name/ba/badkeys/package.nix b/pkgs/by-name/ba/badkeys/package.nix
new file mode 100644
index 000000000000..11a7aec3b144
--- /dev/null
+++ b/pkgs/by-name/ba/badkeys/package.nix
@@ -0,0 +1,45 @@
+{
+  lib,
+  fetchFromGitHub,
+  python3Packages,
+}:
+python3Packages.buildPythonApplication rec {
+  pname = "badkeys";
+  version = "0.0.10";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "badkeys";
+    repo = "badkeys";
+    rev = "v${version}";
+    hash = "sha256-4vIPOKU/R+wASEx4OQHjtP6mJSKJDtPgQB968vuT24Y=";
+  };
+
+  build-system = with python3Packages; [
+    setuptools
+    setuptools-scm
+  ];
+
+  dependencies = with python3Packages; [
+    cryptography
+    gmpy2
+  ];
+
+  optional-dependencies = with python3Packages; [
+    dnspython
+    paramiko
+  ];
+
+  nativeCheckInputs = with python3Packages; [ pytestCheckHook ];
+
+  pythonImportsCheck = [ "badkeys" ];
+
+  meta = {
+    description = "Tool to find common vulnerabilities in cryptographic public keys";
+    homepage = "https://badkeys.info/";
+    changelog = "https://github.com/badkeys/badkeys/releases/tag/${src.rev}";
+    mainProgram = "badkeys";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ getchoo ];
+  };
+}