COMPETITOR MONITORING FOR PLUGIN DEVELOPERS

Security Codex plugins

Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.

Explore 11,707 plugins across 14 categories.

Selected:IT ×Security ×

Follow up to 3 plugins for free. Newest means first added to our catalog, not the publisher’s release date.

Security plugins 77

Plugin growth →

1–36 of 77 Export this page ↓

All words must match. Use quotes for an exact phrase.

Compare plugins by developer and category
Plugin / developer	Category	Follow
Above SecurityAbove SecurityAbove brings your identity-security data into ChatGPT. Ask in plain language to list open incidents and high-risk identities; inspect inc... Plugin name Above Security Show in context → 1 more matching sources Publisher description Above brings your identity-security data into ChatGPT. Ask in plain language to list open incidents and high-risk identities; inspect incident timelines, evidence, and insights; look up devices, monitored applications, and… Show in context →	SecurityVersion 1.0.0	View details →
Aikido SecurityAikido SecurityShip secure code Plugin name Aikido Security Show in context → 2 more matching sources Publisher keywords · listing aikido security sast secrets iac sca scanning vulnerability Show in context → Publisher full description Scan the code you write or change for vulnerabilities, exposed secrets, and infrastructure-as-code (IaC) issues. Connect to Aikido Security to pull the matching findings from your feed Show in context →	SecurityVersion 1.0.0	View details →
Aivana Security InvestigatorAivanaGuided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API. Plugin name Aivana Security Investigator Show in context → 3 more matching sources Publisher keywords · listing defender-xdr soc security-investigation kql microsoft-graph sentinel Show in context → Publisher description Guided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API. Show in context → Publisher full description …es through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution. Show in context →	SecurityVersion 1.1.1	View details →
AnomityAnomityAsk about your organization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, c... Plugin name Anomity Show in context → 5 more matching sources Package name anomity Show in context → Publisher capabilities · listing Read your organization's AI security posture Triage policy findings Investigate a managed device Review MCP servers and AI accounts Review the audit trail and compliance readiness Approve allowlist items you confirm (admins, when ena… Show in context → Publisher keywords · listing security ai-governance shadow-ai mcp compliance Show in context → Publisher description Ask about your organization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, compliance readiness and the allowlist. Skills turn the answers into posture briefings, finding triage… Show in context → Publisher full description Anomity shows a security team every AI tool running on its managed devices: coding agents, MCP servers, skills and instruction files, browser AI use, personal versus corporate AI accounts, and the credent… Show in context →	SecurityVersion 0.1.0	View details →
Authorised OSINT ToolkitRobert LaneNine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Plugin name Authorised OSINT Toolkit Show in context → 4 more matching sources Publisher capabilities · listing …ve OSINT reviews Assess organisational attack surfaces Review email and cloud exposure Analyse identity security architecture Design exposure monitoring processes Quantify and prioritise security risk Produce evidence-led security reports Show in context → Publisher keywords · listing defensive-osint attack-surface exposure-analysis security risk Show in context → Publisher description Nine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Show in context → Publisher full description A nine-skill toolkit for authorised organisational OSINT, attack-surface analysis, email and cloud exposure review, identity-security assurance, monitoring design, risk quantification and evidence-led reporting. The re… Show in context →	SecurityVersion 1.1.0	View details →
Authorized Security ReviewIssam ChaabanEvidence-based security reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools. Plugin name Authorized Security Review Show in context → 6 more matching sources Package name authorized-security-review Show in context → Publisher subtitle Authorized security testing Show in context → Publisher capabilities · listing Read Write Interactive Show in context → Publisher name · package Personal Security Workflows Show in context → Publisher description Evidence-based security reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools. Show in context → Publisher full description An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Cod… Show in context →	SecurityVersion 1.0.1	View details →
BitdefenderBitdefenderBitdefender provides digital security tools to help users check suspicious links and phone numbers, generate passwords, check their digit... Plugin name Bitdefender Show in context → 2 more matching sources Publisher subtitle Digital security tools Show in context → Publisher description Bitdefender provides digital security tools to help users check suspicious links and phone numbers, generate passwords, check their digital footprint, and find security products suited to their needs. Show in context →	SecurityVersion 2.0.1	View details →
Cloudflare SecurityThe Doers FirmAudit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Plugin name Cloudflare Security Show in context → 4 more matching sources Package name cloudflare-security Show in context → Publisher capabilities · listing Analyze Write Show in context → Publisher description Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Show in context → Publisher full description Cloudflare Security reviews Cloudflare account configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produc… Show in context →	SecurityVersion 0.1.1	View details →
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Plugin name Codex Security Show in context → 6 more matching sources Package name codex-security Show in context → Publisher subtitle Security scanning for your codebase Show in context → Publisher capabilities · listing Interactive Read Write Show in context → Publisher keywords · listing security code-review diff-review appsec threat-modeling Show in context → Publisher description Codex Security workflows for security scans, analysis, and investigation. Show in context → Publisher full description Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts. Show in context →	SecurityVersion 0.1.32	View details →
Codex Security CloudOpenAICloud security scans, findings, and continuous repository monitoring. Plugin name Codex Security Cloud Show in context → 5 more matching sources Publisher subtitle Find and fix vulnerabilities across your repositories Show in context → Publisher capabilities · listing Interactive Read Write Show in context → Publisher keywords · listing security cloud vulnerabilities repositories Show in context → Publisher description Cloud security scans, findings, and continuous repository monitoring. Show in context → Publisher full description Codex Security Cloud brings cloud security scans, findings, and continuous repository monitoring into your workspace. Show in context →	SecurityVersion 0.1.1	View details →
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex. Plugin name Endor Labs Agent Kit Show in context → 5 more matching sources Package name endor-labs-agent-kit Show in context → Publisher subtitle Endor security workflows Show in context → Publisher capabilities · listing Security Remediation Investigation Application Security Agentic Workflows Agentic Remediation Agentic AppSec Show in context → Publisher keywords · listing endor-labs security sca sast codex Show in context → Publisher description Endor Labs security workflows and setup for Codex. Show in context →	SecurityVersion 2.2.4	View details →
Frame Security ScanFrame (lambdasec)Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. Plugin name Frame Security Scan Show in context → 4 more matching sources Package name frame-security-scan Show in context → Publisher keywords · listing security sast vulnerability scan taint analysis code fixes Show in context → Publisher description Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. Show in context → Publisher full description Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. The workflow checks that the Frame CLI is installed (and points you to the README install steps if it is not, without installing a… Show in context →	SecurityVersion 0.1.2	View details →
Is It Legit by M8venM8ven Inc.Is It Legit is the consumer brand-trust tool from M8ven. Given a brand name or URL, it analyzes 100+ trust signals and returns a verdict ... Plugin name Is It Legit by M8ven Show in context → 1 more matching sources Publisher description Is It Legit is the consumer brand-trust tool from M8ven. Given a brand name or URL, it analyzes 100+ trust signals and returns a verdict (safe / caution / avoid) with key findings. Designed for "is this… Show in context →	SecurityVersion 1.0.0	View details →
Orca SecurityOrca SecurityExtend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Or... Plugin name Orca Security Show in context → 1 more matching sources Publisher description Extend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answer factors in rea… Show in context →	SecurityVersion 1.0.0	View details →
Prompt Injection SecurityThe Doers FirmAssess prompt injection exposure in prompts, AI workflows, retrieved content, and tool designs with evidence-based findings and mitigations. Plugin name Prompt Injection Security Show in context → 3 more matching sources Publisher capabilities · listing Analyze Write Show in context → Publisher description Assess prompt injection exposure in prompts, AI workflows, retrieved content, and tool designs with evidence-based findings and mitigations. Show in context → Publisher full description …ool workflows for prompt-injection risks. Get evidence-linked attack-path analysis, calibrated severity and confidence, layered mitigations, and safe regression tests. Results are advisory and cannot guarantee prevention. Customer support: https://thedoersfirm.com/support. Show in context →	SecurityVersion 0.1.0	View details →
Radar LiteRed SiftAnalyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores ... Plugin name Radar Lite Show in context → 2 more matching sources Publisher subtitle Domain security with Red Sift Show in context → Publisher description Analyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores on a radar chart, and generates a summary with prioritized findings and remediation guidance. Try prompts like: - Radar Lite… Show in context →	SecurityVersion 2.0.0	View details →
Security Advisory Scoutaleff-githubEvidence-first security advisory triage with NVD, OSV, FIRST EPSS, and CISA KEV. Plugin name Security Advisory Scout Show in context → 5 more matching sources Package name security-advisory-scout Show in context → Publisher keywords · listing security CVE GHSA advisories EPSS CISA KEV OSV Show in context → Publisher aleff-github Show in context → Publisher description Evidence-first security advisory triage with NVD, OSV, FIRST EPSS, and CISA KEV. Show in context → Publisher full description Investigate CVE, GHSA, and OSV security advisories using source evidence from NVD and OSV, FIRST EPSS exploitation probability, and CISA KEV known-exploitation information. Discover candidate CVEs, check supported package versions, and… Show in context →	SecurityVersion 0.1.1	View details →
Tahr SecurityTahr Security IncEvidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Plugin name Tahr Security Show in context → 6 more matching sources Publisher subtitle Evidence-backed app security Show in context → Publisher capabilities · listing Read Write Show in context → Publisher Tahr Security Inc Show in context → Publisher name · package Yack Security Inc Show in context → Publisher description Evidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Show in context → Publisher full description Review applications with an evidence-first security workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes. Show in context →	SecurityVersion 0.3.3	View details →
Vibe Code Security ReviewerThe Doers FirmAdvanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Plugin name Vibe Code Security Reviewer Show in context → 5 more matching sources Package name vibe-code-security-reviewer Show in context → Publisher subtitle Audit real security risks Show in context → Publisher capabilities · listing Analyze Write Show in context → Publisher description Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Show in context → Publisher full description Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and mi… Show in context →	SecurityVersion 0.1.0	View details →
VIDOC Security ReviewVidoc Security LabVIDOC Security Review by Vidoc Security Lab: review source code for security issues, validate suspected findings, and prepare reports wit... Plugin name VIDOC Security Review Show in context → 7 more matching sources Package name security-review Show in context → Publisher subtitle Security reviews by VIDOC Show in context → Publisher capabilities · listing Security code review Finding validation Review reporting Show in context → Publisher keywords · listing vidoc security code-review vulnerability-review Show in context → Publisher Vidoc Security Lab Show in context → Publisher description VIDOC Security Review by Vidoc Security Lab: review source code for security issues, validate suspected findings, and prepare reports with supporting evidence using three defined skills. Show in context → Publisher full description VIDOC Security Review brings security code review workflows from Vidoc Security Lab to ChatGPT and Codex. For developers and application security teams, its three defined skills review supplied code or diffs, va… Show in context →	SecurityVersion 0.1.1	View details →
Is This AI Agent Safe?Greenlit BooksAsk whether an AI agent, MCP server or coding tool is safe to use and get a dated verdict from Greenlit Books, with the setup steps that ... Package name greenlit-books Show in context → 4 more matching sources Publisher capabilities · listing Tells you whether a named AI agent, MCP server or coding tool is safe to use, with the review's link Gives the setup steps a review recommends before you connect a tool to your code or accounts Checks a statement about AI agents against 564 claims, each with a citation and its b… Show in context → Publisher Greenlit Books Show in context → Publisher description …sk whether an AI agent, MCP server or coding tool is safe to use and get a dated verdict from Greenlit Books, with the setup steps that make it safer. Also answers how and why questions about AI agents from the books' free chapters and concepts, with links to the passages, checks statements against… Show in context → Publisher full description …t, MCP server, coding assistant or AI product is safe to use, and get a straight verdict from Greenlit Books, with the setup steps that make it safer and a link to the full review. Each verdict comes from reading the product's own code, docs and settings, and says which version it read and when. The… Show in context →	SecurityVersion 1.0.2	View details →
AgentGuardsAgentGuardsSecurity scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell comman... Publisher subtitle Security scans for AI agents Show in context → 4 more matching sources Publisher capabilities · listing …t leaked secrets and personal data Check shell commands before running them Scan code for vulnerabilities and secrets Show in context → Publisher keywords · listing security prompt-injection jailbreak secrets guardrails Show in context → Publisher description Security scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell commands before running them; scan code for vulnerabilities and hardcoded… Show in context → Publisher full description …output) for prompt injection, jailbreak attempts, leaked secrets and personal data before acting on it. - Check a shell command before running it: destructive deletes, credential reads, data exfiltration, force pushes and infrastructure changes are flagged with a risk level and a reason. - Scan sour… Show in context →	SecurityVersion 1.0.4	View details →
Ansvar GatewayAnsvar AIAnsvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. C... Publisher subtitle Laws, Security and Compliance Show in context → 1 more matching sources Publisher description Ansvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. Customers connect the AI assistant they already use (Claude, Microsoft Copilot, ChatGPT or any MCP-compati… Show in context →	SecurityVersion 1.0.0	View details →
Atbash SafetyAtbash AISet up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy. Publisher subtitle Check actions with Atbash Show in context → 2 more matching sources Publisher description Set up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy. Show in context → Publisher full description Connect an Atbash agent, manage its name, purpose, risk, or active state with browser approval, and check explicitly submitted actions against Atbash safety policies. The desktop helper keeps agent private keys in local configuratio… Show in context →	SecurityVersion 0.3.4	View details →
AttackerViewAttackerViewPassive website security check for any domain: security headers, HTTPS and TLS, DNS, and email authentication (SPF, DKIM, DMARC), in seco... Publisher subtitle Website security check Show in context → 3 more matching sources Publisher capabilities · listing Check security headers and Content Security Policy Check the HTTPS redirect and TLS configuration Check DNS, DNSSEC and CAA records Check SPF, DKIM, DMARC and MTA-STS Show in context → Publisher description Passive website security check for any domain: security headers, HTTPS and TLS, DNS, and email authentication (SPF, DKIM, DMARC), in seconds. Show in context → Publisher full description Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration… Show in context →	SecurityVersion 1.0.1	View details →
Awesome Maintainer DefenseDUC THANG LUURead-only repository governance and GitHub Actions risk audits with reviewable patches. Publisher subtitle Audit repository trust safely Show in context → 3 more matching sources Publisher keywords · listing github-actions repository-security governance maintainers audit Show in context → Publisher description Read-only repository governance and GitHub Actions risk audits with reviewable patches. Show in context → Publisher full description Inspect repository policy, GitHub Actions trust boundaries, and moderation automation without network access or repository mutation; generate reviewable remediation patches on request. Show in context →	SecurityVersion 1.1.1	View details →
BastionBastion TechnologiesConnect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance statu... Publisher subtitle Manage security and compliance Show in context → 1 more matching sources Publisher description Connect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance status across SOC 2, ISO 27001, HIPAA, and GDPR. Drill into failing tests, upload evidence, and submit controls for… Show in context →	SecurityVersion 1.0.0	View details →
BreezeBreeze SecurityBreeze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity ... Publisher subtitle Explore security posture Show in context → 2 more matching sources Publisher Breeze Security Show in context → Publisher description Breeze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity risk data through ChatGPT and Codex. Show in context →	SecurityVersion 1.0.0	View details →
DecionisBinariesDecionis is an execution-authority layer for AI agents. Before an agent takes a consequential action, Decionis evaluates the proposed act... Publisher subtitle Execution Authority Show in context → 1 more matching sources Publisher description Decionis is an execution-authority layer for AI agents. Before an agent takes a consequential action, Decionis evaluates the proposed action against organization policy and determines whether it may proceed, must be held, or requir… Show in context →	SecurityVersion 1.0.1	View details →
DMARCwiseDMARCwiseMonitor, analyze, and manage email authentication with DMARCwise. Publisher subtitle Monitor email authentication Show in context → 4 more matching sources Publisher capabilities · listing Read Write Show in context → Publisher keywords · listing dmarc spf dkim email-security Show in context → Publisher description Monitor, analyze, and manage email authentication with DMARCwise. Show in context → Publisher full description Inspect monitored domains, DMARC statistics and sending sources, SPF records and lookup chains, and DKIM selectors. Enable, update, or disable hosted DMARC using your authorized DMARCwise organization. Show in context →	SecurityVersion 0.1.0	View details →
Jacana Scam CheckJacana, Inc.Not sure if that message is legit? Jacana Scam Check analyzes suspicious texts, emails, and DMs to identify common fraud tactics. Paste t... Publisher subtitle Check if it's a scam Show in context → 1 more matching sources Publisher description Not sure if that message is legit? Jacana Scam Check analyzes suspicious texts, emails, and DMs to identify common fraud tactics. Paste the message and get a clear risk assessment with specific red flags and recommended next steps.… Show in context →	SecurityVersion 2.0.1	View details →
NightVisionNightVision Security, Inc.NightVision application security workflows for local development and CI/CD. Publisher subtitle Secure apps with NightVision Show in context → 5 more matching sources Publisher capabilities · listing API discovery DAST scan configuration CI/CD security guidance Finding triage Show in context → Publisher keywords · listing application-security dast api-security openapi nightvision Show in context → Publisher NightVision Security, Inc. Show in context → Publisher description NightVision application security workflows for local development and CI/CD. Show in context → Publisher full description Guide NightVision API discovery, DAST scan configuration, CI/CD integration, and security-finding triage using the local NightVision CLI. Show in context →	SecurityVersion 0.2.0	View details →
PalisadeSamuel ChenardPalisade helps email teams investigate SPF, DKIM, DMARC, and MTA-STS issues. Review monitored domains, DMARC pass rates and sending sourc... Publisher subtitle Monitor email deliverability Show in context → 1 more matching sources Publisher description Palisade helps email teams investigate SPF, DKIM, DMARC, and MTA-STS issues. Review monitored domains, DMARC pass rates and sending sources, inspect DNS and SPF records, and retrieve remediation tasks with supporting evidence. Use the results to prioritize fixes and prepare DNS change p… Show in context →	SecurityVersion 1.0.0	View details →
PasskeyBridgePasskeyBridge LLCRead-only access to your PasskeyBridge organization's identity signals, audit events, alerts, posture findings, passkey coverage and pend... Publisher subtitle Identity alerts and audit logs Show in context → 4 more matching sources Publisher capabilities · listing Summarize identity signals over a time window List audit events, including failed or denied actions List fired alerts and find the ones not yet acknowledged Review identity-provider posture findings with remediation… Show in context → Publisher keywords · listing passkeybridge passkeys identity security audit log Show in context → Publisher description Read-only access to your PasskeyBridge organization's identity signals, audit events, alerts, posture findings, passkey coverage and pending recovery requests. Show in context → Publisher full description PasskeyBridge is an identity threat response service. This plugin gives read-only access to your organization's PasskeyBridge security data. It cannot change anything: all 10 tools are read-only. Connecting: an administrator… Show in context →	SecurityVersion 1.0.0	View details →
RegSentrySoxoa LLCInspect static tracking signals on an authorized public website, observe bounded browser behavior before consent and after supported reje... Publisher subtitle Check website tracking Show in context → 1 more matching sources Publisher description Inspect static tracking signals on an authorized public website, observe bounded browser behavior before consent and after supported reject-all or accept-all controls, compare dated observations, and export a plain-text evidence report. Incomplete phases stay… Show in context →	SecurityVersion 1.2.1	View details →
SkarnSkarn Software OÜAudit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, r... Publisher subtitle AI session security scanner Show in context → 3 more matching sources Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context → Publisher description Audit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context → Publisher full description Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the s… Show in context →	SecurityVersion 0.27.0	View details →

Catalog results: live query. The homepage cache is not used for this view.