COMPETITOR MONITORING FOR PLUGIN DEVELOPERS

Security Codex plugins

Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.

Explore 11,001 plugins across 14 categories.

Selected:AI security ×Security ×

Follow up to 10 plugins for free. Newest means first added to our catalog, not the publisher’s release date.

Security plugins 31

1–31 of 31

Plugin growth → Export this page ↓

All words must match. Use quotes for an exact phrase.

Compare plugins by developer and category
Plugin / developer	Category	Follow
Aikido SecurityAikido SecurityShip secure code Plugin name Aikido Security Show in context → 3 more matching sources Publisher keywords · listing aikido security sast secrets iac sca scanning vulnerability Show in context → Publisher full description …or change for vulnerabilities, exposed secrets, and infrastructure-as-code (IaC) issues. Connect to Aikido Security to pull the matching findings from your feed Show in context → Package name aikido Show in context →	SecurityVersion 1.0.0	View details →
Aivana Security InvestigatorAivanaGuided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API. Plugin name Aivana Security Investigator Show in context → 5 more matching sources Package name aivana-xdr-investigator Show in context → Publisher capabilities · listing Direct OAuth/OBO Defender XDR KQL API Read-only cross-domain investigations Evidence packages and analyst review Show in context → Publisher keywords · listing defender-xdr soc security-investigation kql microsoft-graph sentinel Show in context → Publisher Aivana Show in context → Publisher description Guided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API. Show in context →	SecurityVersion 1.1.1	View details →
Orca SecurityOrca Security Publisher description Extend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answer factors i… …mpact from the first response. For teams that want the reasoning without writing the prompts, Orca maintains the AI Skills Hub, an open-source GitHub repo of agent skills. Type "triage alert orca-9012345" and the orca-alert-triage skill handles retrieval, analysis, and formatting. Teams can fork it,… Show in context → 2 more matching sources Plugin name Orca Security Show in context → Publisher subtitle Fix code, cloud & AI risks. Show in context →	SecurityVersion 1.0.0	View details →
Awesome Maintainer DefenseDUC THANG LUURead-only repository governance and GitHub Actions risk audits with reviewable patches. Publisher keywords · listing github-actions repository-security governance maintainers audit Show in context → 2 more matching sources Plugin name Awesome Maintainer Defense Show in context → Package name awesome-maintainer-defense Show in context →	SecurityVersion 1.1.1	View details →
Diopter AIDiopter AI IncCheck whether an image, video, or audio clip was generated or manipulated by AI. Publisher keywords · listing deepfake ai detection voice cloning image forensics security Show in context → 6 more matching sources Plugin name Diopter AI Show in context → Package name diopter-ai Show in context → Publisher subtitle Detect AI images, video, audio Show in context → Publisher Diopter AI Inc Show in context → Publisher description Check whether an image, video, or audio clip was generated or manipulated by AI. Show in context → Publisher full description Diopter AI checks whether a photo, video, or audio clip was generated or manipulated by AI. Upload a file in chat or share a link, and Diopter runs it through its trained deepfake detection models, then retur… Show in context →	SecurityVersion 1.0.0	View details →
Frame Security ScanFrame (lambdasec)Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. Publisher keywords · listing security sast vulnerability scan taint analysis code fixes Show in context → 4 more matching sources Publisher full description Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. The workflow checks that the Frame CLI is installed (and points you to the README install steps if it is not, without installing anything itself), runs frame scan, optionally adds the AI layer through a chat-completions endpoint you choose after warning that code snippets are sent to that endpoint, and reads each finding with its CWE ID, location, source and confidence. It separate… Show in context → Plugin name Frame Security Scan Show in context → Package name frame-security-scan Show in context → Publisher description Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. Show in context →	SecurityVersion 0.1.2	View details →
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Plugin name Codex Security Show in context → 6 more matching sources Package name codex-security Show in context → Publisher subtitle Security scanning for your codebase Show in context → Publisher keywords · listing security code-review diff-review appsec threat-modeling Show in context → Publisher OpenAI Show in context → Publisher description Codex Security workflows for security scans, analysis, and investigation. Show in context → Publisher full description Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts. Show in context →	SecurityVersion 0.1.32	View details →
Codex Security CloudOpenAICloud security scans, findings, and continuous repository monitoring. Plugin name Codex Security Cloud Show in context → 4 more matching sources Publisher keywords · listing security cloud vulnerabilities repositories Show in context → Publisher OpenAI Show in context → Publisher description Cloud security scans, findings, and continuous repository monitoring. Show in context → Publisher full description Codex Security Cloud brings cloud security scans, findings, and continuous repository monitoring into your workspace. Show in context →	SecurityVersion 0.1.1	View details →
Radar LiteRed SiftAnalyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores ... Publisher subtitle Domain security with Red Sift Show in context → 1 more matching sources Publisher description Analyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores on a radar chart, and generates a summary with prioritized findings and remediation guidance. Try prompts like: - Radar… Show in context →	SecurityVersion 2.0.0	View details →
SkarnSkarn Software OÜAudit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, r... Publisher subtitle AI session security scanner Show in context → 4 more matching sources Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context → Publisher full description Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the session transcrip… Show in context → Publisher capabilities · listing Scan AI coding sessions for leaked credentials Vet assistant hooks, MCP servers and permission grants Show in context → Publisher description Audit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context →	SecurityVersion 0.27.0	View details →
Above SecurityAbove Security Publisher description Above brings your identity-security data into ChatGPT. Ask in plain language to list open incidents and high-risk identities; inspect incident timelines, evidence, and insights; look up devices, monitored applications, and audit logs; and run investigative searche… Show in context → 1 more matching sources Plugin name Above Security Show in context →	SecurityVersion 1.0.0	View details →
Prompt Injection SecurityThe Doers FirmAssess prompt injection exposure in prompts, AI workflows, retrieved content, and tool designs with evidence-based findings and mitigations. Plugin name Prompt Injection Security Show in context → 2 more matching sources Publisher description Assess prompt injection exposure in prompts, AI workflows, retrieved content, and tool designs with evidence-based findings and mitigations. Show in context → Publisher full description Review prompts, AI application designs, retrieved documents, web content, and tool workflows for prompt-injection risks. Get evidence-linked attack-path analysis, calibrated severity and confidence, layered mitigatio… Show in context →	SecurityVersion 0.1.0	View details →
Security Advisory Scoutaleff-github Publisher full description Investigate CVE, GHSA, and OSV security advisories using source evidence from NVD and OSV, FIRST EPSS exploitation probability, and CISA KEV known-exploitation information. Discover candidate CVEs, check supported package versions,… …GitHub writes, or deployment. Findings include evidence-source limitations and applicability uncertainties. Show in context → 4 more matching sources Plugin name Security Advisory Scout Show in context → Package name security-advisory-scout Show in context → Publisher keywords · listing security CVE GHSA advisories EPSS CISA KEV OSV Show in context → Publisher description Evidence-first security advisory triage with NVD, OSV, FIRST EPSS, and CISA KEV. Show in context →	SecurityVersion 0.1.1	View details →
Vibe Code Security ReviewerThe Doers Firm Publisher description Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Show in context → 4 more matching sources Publisher full description Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and misuse, inputs, secrets, uploads, dependencies, data exposure, AI to… Show in context → Plugin name Vibe Code Security Reviewer Show in context → Package name vibe-code-security-reviewer Show in context → Publisher subtitle Audit real security risks Show in context →	SecurityVersion 0.1.0	View details →
DMARCwiseDMARCwiseMonitor, analyze, and manage email authentication with DMARCwise. Publisher keywords · listing dmarc spf dkim email-security Show in context → 3 more matching sources Publisher subtitle Monitor email authentication Show in context → Publisher description Monitor, analyze, and manage email authentication with DMARCwise. Show in context → Publisher full description Inspect monitored domains, DMARC statistics and sending sources, SPF records and lookup chains, and DKIM selectors. Enable, update, or disable hosted DMARC using your authorized DMARCwise organization. Show in context →	SecurityVersion 0.1.0	View details →
Ansvar GatewayAnsvar AI Publisher description Ansvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. Customers connect the AI assistant they already use (Claude, Microsoft Copilot, ChatGPT or any MCP-compatible client) to the Ansv… Show in context → 2 more matching sources Publisher subtitle Laws, Security and Compliance Show in context → Publisher Ansvar AI Show in context →	SecurityVersion 1.0.0	View details →
Authorised OSINT ToolkitRobert LaneNine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Publisher capabilities · listing Plan lawful defensive OSINT reviews Assess organisational attack surfaces Review email and cloud exposure Analyse identity security architecture Design exposure monitoring processes Quantify and prioritise security risk Produce evidence-led security reports Show in context → 3 more matching sources Publisher full description A nine-skill toolkit for authorised organisational OSINT, attack-surface analysis, email and cloud exposure review, identity-security assurance, monitoring design, risk quantification and evidence-led reporting. The replacement planning, identity and exposure-analysis skills exclude credentials, account enumeration, authent… Show in context → Publisher keywords · listing defensive-osint attack-surface exposure-analysis security risk Show in context → Publisher description Nine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Show in context →	SecurityVersion 1.1.0	View details →
GuardioGuardioCheck suspicious links, review known data leaks, and understand your Guardio protection. Publisher capabilities · listing Check suspicious links Check links in messages Look up known email and phone breaches Review account protection and scan activity Review security recommendations Set up browser protection Send requested product feedback Show in context → 1 more matching sources Publisher full description …io account to review protection setup, scan activity, recent data leaks, linked-service counts, and security recommendations. You can also check whether an email address or phone number appears in known data breaches. Results describe known exposure; they do not reveal leaked passwords. When you ask, Guardio can guide setup of its protection in a supported… Show in context →	SecurityVersion 0.2.2	View details →
Have I Been SquattedHave I Been SquattedAnalyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to... Publisher capabilities · listing Analyze any domain live: DNS, registration, hosting, HTTP, classification and a verdict, with a screenshot view Search certificate transparency logs for certificate names matching a pattern Scan a domain for registe… …nd follow managed takedown cases (organization admins) Send one result to a connected SIEM, chat or security control and check its delivery (organization admins) Show in context → 3 more matching sources Publisher keywords · listing security typosquatting lookalike-domains certificate-transparency brand-protection takedowns threat-intelligence mcp Show in context → Publisher full description Have I Been Squatted finds attacker infrastructure while it is being set up. Lookalike domains, mail servers, staging hosts and their certificates often appear before a phishing campaign launches. This plugin brings detection, investigation and response for them into ChatGPT and Codex. Enr… …operations team before any report reaches a registrar or host. Sending a response changes your own security tools; the monitored domain itself is never blocked. Removing a monitored domain or deleting a rule cannot be undone. Example prompts - "Show this week's lookalike detections for my organizat… Show in context → Publisher description Analyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to its connected tools, and manage its domains, rules and takedowns. Show in context →	SecurityVersion 1.1.2	View details →
ScreenataScreenataScreenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 4... Publisher capabilities · listing Review audit readiness Investigate compliance failures Draft security policies Collect evidence Verify approved fixes Show in context → 3 more matching sources Publisher description Screenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001 audits. Assess infrastructure, investigate failing compliance checks, review proposed fixes, verify results, draft security policies from recorded answers, collect evidence and track audit-cycle readiness. Assessments require Screenata sign-in… Show in context → Publisher full description Screenata manages security compliance and audit preparation for startups. Track audit-cycle readiness for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001, investigate failing security checks and collect evidence linked to the relevant tests. Review a proposed fix before applying it, then re-run the check to verify the result. Draft security policies from your record… Show in context → Publisher keywords · listing …e soc2 hipaa iso27001 iso42001 grc audit soc-2 iso-27001 iso-42001 audit-readiness compliance-tools security-assessment evidence-collection policy-drafting cloud-security startups Show in context →	SecurityVersion 0.1.2	View details →
ArrowMemArrowMem Publisher description Security and privacy tools for people running AI on their own hardware, plus answers about ArrowMem's privacy design. The check tools work only from diagnostic output you paste; they do not connect to your machine or network. Show in context → 2 more matching sources Publisher full description Security and privacy tools for people running AI on their own hardware, plus answers about ArrowMem's privacy design. You can check whether your self-hosted model server is reachable from outside your machine, check whether it still matches the h… Show in context → Publisher subtitle Check and secure your local AI Show in context →	SecurityVersion 1.0.1	View details →
AttackerViewAttackerView Publisher description Passive website security check for any domain: security headers, HTTPS and TLS, DNS, and email authentication (SPF, DKIM, DMARC), in seconds. Show in context → 3 more matching sources Publisher full description Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS).… Show in context → Publisher subtitle Website security check Show in context → Publisher capabilities · listing Check security headers and Content Security Policy Check the HTTPS redirect and TLS configuration Check DNS, DNSSEC and CAA records Check SPF, DKIM, DMARC and MTA-STS Show in context →	SecurityVersion 1.0.1	View details →
BastionBastion Technologies Publisher description Connect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance status across SOC 2, ISO 27001, HIPAA, and GDPR. Drill into failing tests, upload evidence, and submit controls for review. Ask your knowledge base security and compliance questions grounded in your own policies and documentation. Monitor code security findings… Show in context → 1 more matching sources Publisher subtitle Manage security and compliance Show in context →	SecurityVersion 1.0.0	View details →
nebtynebty GmbHnebty is the early warning system against brand impersonation. See the lookalike domains, phishing sites, fake profiles and scam ads targ... Publisher capabilities · listing Review lookalike domains and phishing sites Review fake profiles and scam ads Track takedowns and their history Trust or dismiss findings Show in context → 4 more matching sources Publisher keywords · listing brand-protection security monitoring Show in context → Publisher description nebty is the early warning system against brand impersonation. See the lookalike domains, phishing sites, fake profiles and scam ads targeting your company, review findings in the chat and track every takedown with its complete history.… Show in context → Publisher full description …files that copy your brand cost you customers, money and trust. nebty is the early warning system against brand impersonation: it scans the internet around the clock for lookalike domains, phishing websites, fake social media profiles, scam ads and malicious search results, scores every finding by r… Show in context → Publisher translations · package …rnsystem gegen Brand-Impersonation: nebty durchsucht das Internet rund um die Uhr nach Lookalike-Domains, Phishing-Websites, gefälschten Social-Media-Profilen, betrügerischen Anzeigen und schädlichen Suchergebnissen, bewertet jeden Fund nach Risiko und lässt gefährliche Fälschungen bei Registraren,… Show in context →	SecurityVersion 0.2.0	View details →
PasskeyBridgePasskeyBridge LLC Publisher full description …ty threat response service. This plugin gives read-only access to your organization's PasskeyBridge security data. It cannot change anything: all 10 tools are read-only. Connecting: an administrator of your PasskeyBridge organization signs in and approves the connection on PasskeyBridge's consent pa… …h passkey check. An approval lasts at most 90 days. Any administrator can revoke it under Settings, AI connectors. Every approval, tool call and revocation is written to your organization's audit log. After approval, the plugin can read: - Signal summary: counts of identity signals by event type, re… Show in context → 2 more matching sources Publisher capabilities · listing Summarize identity signals over a time window List audit events, including failed or denied actions List fired alerts and find the ones not yet acknowledged Review identity-provider posture findings with remediation guidance Report organization-level passkey coverage List acc… Show in context → Publisher keywords · listing passkeybridge passkeys identity security audit log Show in context →	SecurityVersion 1.0.0	View details →
ScamCheckmmccoAnalyze a message, a link or a sender for fraud/phishing risk signals with a deterministic heuristic model, and get safety tips and offic... Publisher keywords · listing security fraud phishing scam safety url email Show in context → 1 more matching sources Publisher full description ScamCheck analyzes a message (email, SMS, private message), a single link or domain, or a sender (email address or number) and returns the fraud and phishing risk signals it detects — for example urgency and pressure, a request to p… Show in context →	SecurityVersion 0.1.0	View details →
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Publisher keywords · listing plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code Show in context →	SecurityVersion 0.1.5	View details →
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex. Publisher capabilities · listing Security Remediation Investigation Application Security Agentic Workflows Agentic Remediation Agentic AppSec Show in context → 3 more matching sources Publisher keywords · listing endor-labs security sca sast codex Show in context → Publisher description Endor Labs security workflows and setup for Codex. Show in context → Publisher full description Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more. Show in context →	SecurityVersion 2.2.2	View details →
ScanMalwareTriop AB Publisher full description ScanMalware helps security teams investigate suspicious and phishing URLs. It renders a URL in a sandboxed browser, records what the page loaded and did, and keeps public scans in a searchable archive, so one reported phishing page can lead to the rest of its campaign. With this plugin you can: - Look up what the archive already knows about a domain, URL or IP address: the scanner's verdict and risk factors, network requests, indicators, TLS and JARM details,… Show in context → 2 more matching sources Publisher keywords · listing phishing threat-intelligence url-scanning osint security mcp Show in context → Publisher description …: the ScanMalware MCP server plus a skill for pivoting from one phishing URL to the rest of its campaign. Show in context →	SecurityVersion 1.0.0	View details →
CVE Risk CheckAgent Tools Publisher full description Triage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what version… …s the GitHub Advisory Database and other open databases. The advisories' CVE ids are then checked against the CISA exploited list and EPSS. The answer is the few packages to fix first, each with a priority (malicious, exploited, likely, routine or unknown), a one-line reason and the version to upgra… Show in context → 1 more matching sources Publisher description Triage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what version… Show in context →	SecurityVersion 1.2.0	View details →
OSINT Exposure RadarKöksal Kayalı Publisher full description Review an organization’s public exposure through authorized, passive sources. Intended for security, compliance and risk practitioners. It preserves uncertainty and does not replace professional review, an audit, or legal advice. Show in context →	SecurityVersion 0.1.0	View details →