Security Codex plugins

Publisher description

…igh-risk identities; inspect incident timelines, evidence, and insights; look up devices, monitored applications, and audit logs; and run investigative searches across your tenant. You can also triage from chat — set incident status, verdict, and resolution notes, or add an identity to the watch lis…

Publisher subtitle

Find and get apps in your org

Publisher description

AccessOwl lets organizations manage access to SaaS apps. Users can browse available apps and request access as needed.

Publisher

FORTRESS APPS LLC

Publisher description

…nly information about digital privacy risks and data broker exposure. It explains how personal data appears online, how removal services work, and answers common questions about scans, monitoring, and protection options. This ChatGPT app does not run scans, show personal scan results, perform remova…

Publisher description

…tible client) to the Ansvar Gateway and run compliance work directly in that assistant: regulatory gap analyses, threat models (STRIDE/LINDDUN, TARA), DPIAs and audit preparation, grounded in more than 300 curated corpora of EU and international legislation, case law, preparatory works, regulator gu…

Publisher description

…y and determines whether it may proceed, must be held, or requires additional authority. When human approval is required, Decionis can request verified approval through Presence and re-evaluate the action using the resulting signed evidence. Every evaluation produces a verifiable Decision Dossier an…

Publisher full description

…e counts, and security recommendations. You can also check whether an email address or phone number appears in known data breaches. Results describe known exposure; they do not reveal leaked passwords. When you ask, Guardio can guide setup of its protection in a supported browser and receive your fe…

Publisher description

ProofX protects your digital content with cryptographic signatures. What you can do: - Protect your articles, poems, scripts, code, and text with tamper-proof cryptographic proof - Verify if content is registered with ProofX using a content ID or has…

Publisher description

…nctions and scam flags, score a suspicious email for phishing signals, and look up whether an email appears in known data breaches. Free, no signup, no API key. Verdicts are FLAGGED or unknown — the tools never report anything as safe, because absence of evidence is not evidence of absence.

Publisher description

…ic check comparing the tool's declared behavior against what its code actually does — catching the gap between "read-only market data" and code that can move your funds.

Publisher capabilities · listing

Security Remediation Investigation Application Security Agentic Workflows Agentic Remediation Agentic AppSec

Publisher full description

Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more.

Publisher capabilities · listing

API discovery DAST scan configuration CI/CD security guidance Finding triage

Publisher keywords · listing

application-security dast api-security openapi nightvision

Publisher description

NightVision application security workflows for local development and CI/CD.

Publisher full description

Guide NightVision API discovery, DAST scan configuration, CI/CD integration, and security-finding triage using the local NightVision CLI.

Publisher description

Evidence-backed application security workflows for finding, validating, and fixing vulnerabilities.

Publisher full description

Review applications with an evidence-first security workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes.

Publisher keywords · listing

defender-xdr soc security-investigation kql microsoft-graph sentinel

Publisher description

…ded, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API.

Publisher full description

…nto transparent KQL and executes bounded, read-only Defender XDR queries through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution.

Publisher description

Find configured website logins, macOS passwords, publishing and cloud service tokens, model API keys, or SSH key paths in a user-maintained local YAML file; inject only the selected value into an authorized trusted process without printing secrets.

Publisher full description

Keybook 是供本机已授权任务使用的凭据目录。首次使用时，告诉它你现有凭据 YAML 文件的绝对路径；它会在本地检查格式，只保存路径。以后无需反复粘贴密码或 API Key，直接让 AI 继续原任务即可。 需要登录网站时，可查找 web 分类中的用户名、邮箱、指定密码变体和 PIN；需要本机授权时，可分别查找 system 中的 macOS 登录密码或登录钥匙串密码。发布 npm 包、上传 Hugging Face 模型或数据集、推送 Docker 镜像、操作 GitHub/GitLab、部署 Cloudflare 时，可按名称查找 services…

Publisher full description

Cloudflare Security reviews Cloudflare account configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and ve…