Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 13,023 plugins across 14 categories.
Follow up to 3 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 14
Plugin growth →All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
Awesome Maintainer DefenseDUC THANG LUURead-only repository governance and GitHub Actions risk audits with reviewable patches. Publisher keywords · listing github-actions repository-security governance maintainers audit Show in context →4 more matching sourcesPublisher description Read-only repository governance and GitHub Actions risk audits with reviewable patches. Show in context → |
SecurityVersion 1.1.1 | View details → |
AnomityAnomityAsk about your organization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, c... Publisher capabilities · listing Read your organization's AI security posture Triage policy findings Investigate a managed device Review MCP servers and AI accounts Review the audit trail and compliance readiness Approve allowlist items you confirm (admins, when enabled) Show in context →4 more matching sourcesPublisher full description Anomity shows a security team every AI tool running on its managed devices: coding agents, MCP servers, skills and instruction files, browser AI use, personal versus corporate AI accounts, and the credentials those tools can reach. Sens… …s. Admins can approve the items they confirm, when an owner has turned that on in Anomity Settings. Audit changes and compliance. Ask what changed in your AI tooling over the last 90 days, and where you stand on SOC 2, ISO 42001, the NIST AI RMF, the EU AI Act and the OWASP LLM Top 10. You sign in w… Show in context →Publisher description Ask about your organization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, compliance readiness and the allowlist. Skills turn the answers into posture briefings, findin… Show in context → |
SecurityVersion 0.1.0 | View details → |
PasskeyBridgePasskeyBridge LLCRead-only access to your PasskeyBridge organization's identity signals, audit events, alerts, posture findings, passkey coverage and pend... Publisher capabilities · listing Summarize identity signals over a time window List audit events, including failed or denied actions List fired alerts and find the ones not yet acknowledged Review identity-provider posture findings with remediation guidance Report organization-level passkey coverage List acc… Show in context →4 more matching sourcesPublisher full description …h passkey check. An approval lasts at most 90 days. Any administrator can revoke it under Settings, AI connectors. Every approval, tool call and revocation is written to your organization's audit log. After approval, the plugin can read: - Signal summary: counts of identity signals by event type, result and processing status over a time window of up to 30 days. - Audit events: time, acti… Show in context →Publisher description Read-only access to your PasskeyBridge organization's identity signals, audit events, alerts, posture findings, passkey coverage and pending recovery requests. Show in context → |
SecurityVersion 1.0.0 | View details → |
SkarnSkarn Software OÜAudit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, r... Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context →4 more matching sourcesPublisher description Audit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context →Publisher full description Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the session transcripts that AI coding assist… Show in context →Publisher capabilities · listing Scan AI coding sessions for leaked credentials Vet assistant hooks, MCP servers and permission grants Show in context → |
SecurityVersion 0.35.0 | View details → |
ScreenataScreenataScreenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 4... Publisher capabilities · listing Review audit readiness Investigate compliance failures Draft security policies Collect evidence Verify approved fixes Show in context →3 more matching sourcesPublisher description …manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001 audits. Assess infrastructure, investigate failing compliance checks, review proposed fixes, verify results, draft security policies from recorded answers, collect evidence and track audit-cycle readiness. Assessments require Screenata sign-in… Show in context →Publisher full description Screenata manages security compliance and audit preparation for startups. Track audit-cycle readiness for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001, investigate failing security checks and collect evidence linked to the relevant tests. Review a proposed fix before applying it, then re-run the check to verify the result. Draft security policies from your record… Show in context →Publisher keywords · listing compliance soc2 hipaa iso27001 iso42001 grc audit soc-2 iso-27001 iso-42001 audit-readiness compliance-tools security-assessment evidence-collection policy-drafting cloud-security startups Show in context → |
SecurityVersion 0.1.2 | View details → |
BlindOracle Agent TrustCraig M. Brown Publisher full description BlindOracle Agent Trust answers one question before you work with or hire an AI agent: what is its record? What works in ChatGPT today - Trust badge: a one-line badge for an agent name or wallet, built from BlindOracle's audit registry and settlement history. An agent BlindOracle has never seen comes back as UNVERIFIED with empty fields; the plugin never invents a score. - Reputation lookup: the agent's job counts on… Show in context →5 more matching sourcesPublisher capabilities · listing Look up an AI agent's trust badge by name or wallet Read an agent's job counts on BlindOracle before you hire it List BlindOracle services and which ones work here Show in context →Publisher keywords · listing ai agents trust reputation counterparty agent marketplace verification Show in context →Publisher description Trust badge, reputation lookup and service list for AI agents, with a signed content credential on every result. Includes a skill for proof of delegation: a four-step signed record of a task handed from one agent to another. Hiring, jobs, payment and d… Show in context → |
SecurityVersion 1.2.0 | View details → |
OneleetOneleet Publisher full description …rk on your security program in conversation. What you can do: - Compliance: find controls that are failing or not started, read the checks behind a control, and track framework requirements, audit readiness and your compliance journey. - Monitoring: review automated monitors and the assets failing them, rerun a monitor, or snooze one with a reason. - Evidence and policies: list evidence a… Show in context →2 more matching sourcesPublisher capabilities · listing Review compliance controls and checks Track monitors and failing assets Review evidence and policies Manage risks and vendor assessments Run access reviews Review security findings Manage trust center requests Show in context →Publisher keywords · listing security compliance soc 2 iso 27001 audit vendor risk grc Show in context → |
SecurityVersion 1.0.0 | View details → |
Vibe Code Security ReviewerThe Doers FirmAdvanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Publisher subtitle Audit real security risks Show in context →2 more matching sourcesPublisher description Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Show in context →Publisher full description Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and misuse, inputs, secrets, uploads, dependencies, data exposure, AI to… Show in context → |
SecurityVersion 0.1.0 | View details → |
WolfiaWolfia Publisher full description Wolfia keeps a company's approved security, privacy and compliance knowledge in sync: policies, audit reports, trust center documents and past questionnaire answers. Connect it to ChatGPT and ChatGPT answers from that approved knowledge instead of guessing, cites the source of every answer, and acts with your own Wolfia role. With Wolfia in ChatGPT y… Show in context →3 more matching sourcesPublisher capabilities · listing …ce questions with citations Find policies, reports and trust center documents Look up past questionnaire answers Review, edit and approve questionnaire answers Export finished questionnaires Show in context →Publisher keywords · listing security questionnaires compliance trust center knowledge base Show in context →Publisher description Answer security questionnaires and customer security questions from your approved Wolfia knowledge base, with a citation for every answer. Show in context → |
SecurityVersion 1.0.0 | View details → |
Ansvar GatewayAnsvar AI Publisher description Ansvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. Customers connect the AI assistant they already use (Claude, Microsoft Copilot, ChatGPT or any MCP-compatible client) to the Ansv… …irectly in that assistant: regulatory gap analyses, threat models (STRIDE/LINDDUN, TARA), DPIAs and audit preparation, grounded in more than 300 curated corpora of EU and international legislation, case law, preparatory works, regulator guidance and security standards. Every answer carries paragraph… Show in context →1 more matching sources |
SecurityVersion 1.0.0 | View details → |
Above SecurityAbove Security Publisher description Above brings your identity-security data into ChatGPT. Ask in plain language to list open incidents and high-risk identities; inspect incident timelines, evidence, and insights; look up devices, monitored applications, and audit logs; and run investigative searches across your tenant. You can also triage from chat — set incident status, verdict, and resolution notes, or add an identity to the watch list. Access requires… Show in context → |
SecurityVersion 1.0.0 | View details → |
CookieYesCookieYes Limited Publisher description …ew your GDPR and CCPA compliance settings. Update your cookie banner in seconds. Typical requests: "Audit my site for GDPR compliance", "Is my cookie banner active?", "Run a cookie scan and show me what you find", "Check my CCPA opt-out setup". CookieYes supports GDPR, CCPA/CPRA, US state privacy la… …g cookie banners. The connector covers consent management, cookie scans, and compliance checks in plain conversation. Show in context → |
SecurityVersion 1.0.0 | View details → |
DecionisBinaries Publisher description Decionis is an execution-authority layer for AI agents. Before an agent takes a consequential action, Decionis evaluates the proposed action against organization policy and determines whether it may proceed, must be held, or requires additional… …ed evidence. Every evaluation produces a verifiable Decision Dossier and cryptographic evidence for audit and accountability. Use Decionis to govern agent-initiated payments, refunds, commerce operations, enterprise workflows, infrastructure changes, and other high-impact actions. Decionis authorize… Show in context → |
SecurityVersion 1.0.1 | View details → |
OSINT Exposure RadarKöksal Kayalı Publisher full description …ized, passive sources. Intended for security, compliance and risk practitioners. It preserves uncertainty and does not replace professional review, an audit, or legal advice. Show in context → |
SecurityVersion 0.1.0 | View details → |
Catalog results: live query. The homepage cache is not used for this view.