COMPETITOR MONITORING FOR PLUGIN DEVELOPERS

Security Codex plugins

Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.

Explore 11,756 plugins across 14 categories.

Selected:SEC ×Security ×

Follow up to 3 plugins for free. Newest means first added to our catalog, not the publisher’s release date.

Security plugins 50

Plugin growth →

1–36 of 50 Export this page ↓

All words must match. Use quotes for an exact phrase.

Compare plugins by developer and category
Plugin / developer	Category	Follow
Above SecurityAbove SecurityAbove brings your identity-security data into ChatGPT. Ask in plain language to list open incidents and high-risk identities; inspect inc... Plugin name Above Security Show in context → 1 more matching sources Publisher description Above brings your identity-security data into ChatGPT. Ask in plain language to list open incidents and high-risk identities; inspect incident timelines, evidence, and insights; look up devices, monitored applications, and audi… Show in context →	SecurityVersion 1.0.0	View details →
Aikido SecurityAikido SecurityShip secure code Plugin name Aikido Security Show in context → 3 more matching sources Publisher subtitle Ship secure code Show in context → Publisher keywords · listing aikido security sast secrets iac sca scanning vulnerability Show in context → Publisher full description Scan the code you write or change for vulnerabilities, exposed secrets, and infrastructure-as-code (IaC) issues. Connect to Aikido Security to pull the matching findings from your feed Show in context →	SecurityVersion 1.0.0	View details →
Aivana Security InvestigatorAivanaGuided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API. Plugin name Aivana Security Investigator Show in context → 2 more matching sources Publisher keywords · listing defender-xdr soc security-investigation kql microsoft-graph sentinel Show in context → Publisher description Guided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API. Show in context →	SecurityVersion 1.1.1	View details →
Authorized Security ReviewIssam ChaabanEvidence-based security reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools. Plugin name Authorized Security Review Show in context → 5 more matching sources Package name authorized-security-review Show in context → Publisher subtitle Authorized security testing Show in context → Publisher name · package Personal Security Workflows Show in context → Publisher description Evidence-based security reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools. Show in context → Publisher full description An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or th… Show in context →	SecurityVersion 1.0.1	View details →
Cloudflare SecurityThe Doers FirmAudit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Plugin name Cloudflare Security Show in context → 3 more matching sources Package name cloudflare-security Show in context → Publisher description …t and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Show in context → Publisher full description Cloudflare Security reviews Cloudflare account configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to p… Show in context →	SecurityVersion 0.1.1	View details →
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Plugin name Codex Security Show in context → 5 more matching sources Package name codex-security Show in context → Publisher subtitle Security scanning for your codebase Show in context → Publisher keywords · listing security code-review diff-review appsec threat-modeling Show in context → Publisher description Codex Security workflows for security scans, analysis, and investigation. Show in context → Publisher full description Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts. Show in context →	SecurityVersion 0.1.32	View details →
Codex Security CloudOpenAICloud security scans, findings, and continuous repository monitoring. Plugin name Codex Security Cloud Show in context → 3 more matching sources Publisher keywords · listing security cloud vulnerabilities repositories Show in context → Publisher description Cloud security scans, findings, and continuous repository monitoring. Show in context → Publisher full description Codex Security Cloud brings cloud security scans, findings, and continuous repository monitoring into your workspace. Show in context →	SecurityVersion 0.1.1	View details →
Frame Security ScanFrame (lambdasec)Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. Plugin name Frame Security Scan Show in context → 5 more matching sources Package name frame-security-scan Show in context → Publisher keywords · listing security sast vulnerability scan taint analysis code fixes Show in context → Publisher Frame (lambdasec) Show in context → Publisher description Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. Show in context → Publisher full description Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. The workflow checks that the Frame CLI is installed (and points you to the README install steps if it is not, without install… Show in context →	SecurityVersion 0.1.2	View details →
Orca SecurityOrca SecurityExtend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Or... Plugin name Orca Security Show in context → 1 more matching sources Publisher description Extend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answer factors i… Show in context →	SecurityVersion 1.0.0	View details →
Prompt Injection SecurityThe Doers FirmAssess prompt injection exposure in prompts, AI workflows, retrieved content, and tool designs with evidence-based findings and mitigations. Plugin name Prompt Injection Security Show in context →	SecurityVersion 0.1.0	View details →
Security Advisory Scoutaleff-githubEvidence-first security advisory triage with NVD, OSV, FIRST EPSS, and CISA KEV. Plugin name Security Advisory Scout Show in context → 4 more matching sources Package name security-advisory-scout Show in context → Publisher keywords · listing security CVE GHSA advisories EPSS CISA KEV OSV Show in context → Publisher description Evidence-first security advisory triage with NVD, OSV, FIRST EPSS, and CISA KEV. Show in context → Publisher full description Investigate CVE, GHSA, and OSV security advisories using source evidence from NVD and OSV, FIRST EPSS exploitation probability, and CISA KEV known-exploitation information. Discover candidate CVEs, check supported package versions,… Show in context →	SecurityVersion 0.1.1	View details →
Tahr SecurityTahr Security IncEvidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Plugin name Tahr Security Show in context → 5 more matching sources Publisher subtitle Evidence-backed app security Show in context → Publisher Tahr Security Inc Show in context → Publisher name · package Yack Security Inc Show in context → Publisher description Evidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Show in context → Publisher full description Review applications with an evidence-first security workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes. Show in context →	SecurityVersion 0.3.3	View details →
Vibe Code Security ReviewerThe Doers FirmAdvanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Plugin name Vibe Code Security Reviewer Show in context → 4 more matching sources Package name vibe-code-security-reviewer Show in context → Publisher subtitle Audit real security risks Show in context → Publisher description Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Show in context → Publisher full description Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks a… Show in context →	SecurityVersion 0.1.0	View details →
VIDOC Security ReviewVidoc Security LabVIDOC Security Review by Vidoc Security Lab: review source code for security issues, validate suspected findings, and prepare reports wit... Plugin name VIDOC Security Review Show in context → 7 more matching sources Package name security-review Show in context → Publisher subtitle Security reviews by VIDOC Show in context → Publisher capabilities · listing Security code review Finding validation Review reporting Show in context → Publisher keywords · listing vidoc security code-review vulnerability-review Show in context → Publisher Vidoc Security Lab Show in context → Publisher description VIDOC Security Review by Vidoc Security Lab: review source code for security issues, validate suspected findings, and prepare reports with supporting evidence using three defined skills. Show in context → Publisher full description VIDOC Security Review brings security code review workflows from Vidoc Security Lab to ChatGPT and Codex. For developers and application security teams, its three defined skills review supplied code or diff… Show in context →	SecurityVersion 0.1.1	View details →
AgentGuardsAgentGuardsSecurity scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell comman... Publisher subtitle Security scans for AI agents Show in context → 4 more matching sources Publisher capabilities · listing Scan text for prompt injection and jailbreaks Detect leaked secrets and personal data Check shell commands before running them Scan code for vulnerabilities and secrets Show in context → Publisher keywords · listing security prompt-injection jailbreak secrets guardrails Show in context → Publisher description Security scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell commands before running them; scan code for vulnerabilities and hardc… Show in context → Publisher full description …s, emails, documents, issues, other tools' output) for prompt injection, jailbreak attempts, leaked secrets and personal data before acting on it. - Check a shell command before running it: destructive deletes, credential reads, data exfiltration, force pushes and infrastructure changes are flagged… Show in context →	SecurityVersion 1.0.4	View details →
Ansvar GatewayAnsvar AIAnsvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. C... Publisher subtitle Laws, Security and Compliance Show in context → 1 more matching sources Publisher description Ansvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. Customers connect the AI assistant they already use (Claude, Microsoft Copilot, ChatGPT or any MCP-co… Show in context →	SecurityVersion 1.0.0	View details →
ArrowMemArrowMemSecurity and privacy tools for people running AI on their own hardware, plus answers about ArrowMem's privacy design. The check tools wor... Publisher subtitle Check and secure your local AI Show in context → 2 more matching sources Publisher description Security and privacy tools for people running AI on their own hardware, plus answers about ArrowMem's privacy design. The check tools work only from diagnostic output you paste; they do not connect to… Show in context → Publisher full description Security and privacy tools for people running AI on their own hardware, plus answers about ArrowMem's privacy design. You can check whether your self-hosted model server is reachable from outside your… Show in context →	SecurityVersion 1.0.1	View details →
AttackerViewAttackerViewPassive website security check for any domain: security headers, HTTPS and TLS, DNS, and email authentication (SPF, DKIM, DMARC), in seco... Publisher subtitle Website security check Show in context → 3 more matching sources Publisher capabilities · listing Check security headers and Content Security Policy Check the HTTPS redirect and TLS configuration Check DNS, DNSSEC and CAA records Check SPF, DKIM, DMARC and MTA-STS Show in context → Publisher description Passive website security check for any domain: security headers, HTTPS and TLS, DNS, and email authentication (SPF, DKIM, DMARC), in seconds. Show in context → Publisher full description Ask whether a website is set up securely and get an answer in seconds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC… Show in context →	SecurityVersion 1.0.1	View details →
BastionBastion TechnologiesConnect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance statu... Publisher subtitle Manage security and compliance Show in context → 1 more matching sources Publisher description Connect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance status across SOC 2, ISO 27001, HIPAA, and GDPR. Drill into failing tests, upload evidence, and submit control… Show in context →	SecurityVersion 1.0.0	View details →
BitdefenderBitdefenderBitdefender provides digital security tools to help users check suspicious links and phone numbers, generate passwords, check their digit... Publisher subtitle Digital security tools Show in context → 1 more matching sources Publisher description Bitdefender provides digital security tools to help users check suspicious links and phone numbers, generate passwords, check their digital footprint, and find security products suited to their needs. Show in context →	SecurityVersion 2.0.1	View details →
BreezeBreeze SecurityBreeze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity ... Publisher subtitle Explore security posture Show in context → 2 more matching sources Publisher Breeze Security Show in context → Publisher description Breeze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity risk data through ChatGPT and Codex. Show in context →	SecurityVersion 1.0.0	View details →
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex. Publisher subtitle Endor security workflows Show in context → 4 more matching sources Publisher capabilities · listing Security Remediation Investigation Application Security Agentic Workflows Agentic Remediation Agentic AppSec Show in context → Publisher keywords · listing endor-labs security sca sast codex Show in context → Publisher description Endor Labs security workflows and setup for Codex. Show in context → Publisher full description Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more. Show in context →	SecurityVersion 2.2.4	View details →
NightVisionNightVision Security, Inc.NightVision application security workflows for local development and CI/CD. Publisher subtitle Secure apps with NightVision Show in context → 5 more matching sources Publisher capabilities · listing API discovery DAST scan configuration CI/CD security guidance Finding triage Show in context → Publisher keywords · listing application-security dast api-security openapi nightvision Show in context → Publisher NightVision Security, Inc. Show in context → Publisher description NightVision application security workflows for local development and CI/CD. Show in context → Publisher full description Guide NightVision API discovery, DAST scan configuration, CI/CD integration, and security-finding triage using the local NightVision CLI. Show in context →	SecurityVersion 0.2.0	View details →
Radar LiteRed SiftAnalyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores ... Publisher subtitle Domain security with Red Sift Show in context → 1 more matching sources Publisher description Analyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores on a radar chart, and generates a summary with prioritized findings and remediation guidance. Try prompts like: - Radar… Show in context →	SecurityVersion 2.0.0	View details →
SafeguardSafeguardSafeguard helps users inspect software supply chain risk from ChatGPT, including vulnerabilities, SBOMs, findings, projects, components, ... Publisher subtitle Secure software supply chain Show in context →	SecurityVersion 1.0.0	View details →
SkarnSkarn Software OÜAudit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, r... Publisher subtitle AI session security scanner Show in context → 3 more matching sources Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context → Publisher description …d skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context → Publisher full description Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads… Show in context →	SecurityVersion 0.27.0	View details →
AnomityAnomityAsk about your organization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, c... Publisher capabilities · listing Read your organization's AI security posture Triage policy findings Investigate a managed device Review MCP servers and AI accounts Review the audit trail and compliance readiness Approve allowlist items you confirm (admins, whe… Show in context → 3 more matching sources Publisher keywords · listing security ai-governance shadow-ai mcp compliance Show in context → Publisher description Ask about your organization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, compliance readiness and the allowlist. Skills turn the answers into posture briefings, finding t… Show in context → Publisher full description Anomity shows a security team every AI tool running on its managed devices: coding agents, MCP servers, skills and instruction files, browser AI use, personal versus corporate AI accounts, and the credentials those t… Show in context →	SecurityVersion 0.1.0	View details →
Authorised OSINT ToolkitRobert LaneNine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Publisher capabilities · listing …SINT reviews Assess organisational attack surfaces Review email and cloud exposure Analyse identity security architecture Design exposure monitoring processes Quantify and prioritise security risk Produce evidence-led security reports Show in context → 3 more matching sources Publisher keywords · listing defensive-osint attack-surface exposure-analysis security risk Show in context → Publisher description Nine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Show in context → Publisher full description …authorised organisational OSINT, attack-surface analysis, email and cloud exposure review, identity-security assurance, monitoring design, risk quantification and evidence-led reporting. The replacement planning, identity and exposure-analysis skills exclude credentials, account enumeration, authent… Show in context →	SecurityVersion 1.1.0	View details →
GuardioGuardioCheck suspicious links, review known data leaks, and understand your Guardio protection. Publisher capabilities · listing …messages Look up known email and phone breaches Review account protection and scan activity Review security recommendations Set up browser protection Send requested product feedback Show in context → 1 more matching sources Publisher full description …io account to review protection setup, scan activity, recent data leaks, linked-service counts, and security recommendations. You can also check whether an email address or phone number appears in known data breaches. Results describe known exposure; they do not reveal leaked passwords. When you ask… Show in context →	SecurityVersion 0.2.2	View details →
Have I Been SquattedHave I Been SquattedAnalyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to... Publisher capabilities · listing …nd follow managed takedown cases (organization admins) Send one result to a connected SIEM, chat or security control and check its delivery (organization admins) Show in context → 2 more matching sources Publisher keywords · listing security typosquatting lookalike-domains certificate-transparency brand-protection takedowns threat-intelligence mcp Show in context → Publisher full description …operations team before any report reaches a registrar or host. Sending a response changes your own security tools; the monitored domain itself is never blocked. Removing a monitored domain or deleting a rule cannot be undone. Example prompts - "Show this week's lookalike detections for my organizat… Show in context →	SecurityVersion 1.1.2	View details →
ScreenataScreenataScreenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 4... Publisher capabilities · listing Review audit readiness Investigate compliance failures Draft security policies Collect evidence Verify approved fixes Show in context → 3 more matching sources Publisher keywords · listing …e soc2 hipaa iso27001 iso42001 grc audit soc-2 iso-27001 iso-42001 audit-readiness compliance-tools security-assessment evidence-collection policy-drafting cloud-security startups Show in context → Publisher description Screenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001 audits. Assess infrastructure, investigate failing compliance checks, review proposed fixes, verify results… Show in context → Publisher full description Screenata manages security compliance and audit preparation for startups. Track audit-cycle readiness for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001, investigate failing security checks and collect eviden… Show in context →	SecurityVersion 0.1.2	View details →
Awesome Maintainer DefenseDUC THANG LUURead-only repository governance and GitHub Actions risk audits with reviewable patches. Publisher keywords · listing github-actions repository-security governance maintainers audit Show in context →	SecurityVersion 1.1.1	View details →
Diopter AIDiopter AI IncCheck whether an image, video, or audio clip was generated or manipulated by AI. Publisher keywords · listing deepfake ai detection voice cloning image forensics security Show in context →	SecurityVersion 1.0.0	View details →
DMARCwiseDMARCwiseMonitor, analyze, and manage email authentication with DMARCwise. Publisher keywords · listing dmarc spf dkim email-security Show in context →	SecurityVersion 0.1.0	View details →
nebtynebty GmbHnebty is the early warning system against brand impersonation. See the lookalike domains, phishing sites, fake profiles and scam ads targ... Publisher keywords · listing brand-protection security monitoring Show in context → 1 more matching sources Publisher full description …miss false positives, always within your team's existing permissions. Connect your nebty account in seconds via secure OAuth. New scans and takedown requests run in the nebty dashboard, where nebty handles the removal for you. Show in context →	SecurityVersion 0.2.0	View details →
PasskeyBridgePasskeyBridge LLCRead-only access to your PasskeyBridge organization's identity signals, audit events, alerts, posture findings, passkey coverage and pend... Publisher keywords · listing passkeybridge passkeys identity security audit log Show in context → 1 more matching sources Publisher full description …ty threat response service. This plugin gives read-only access to your organization's PasskeyBridge security data. It cannot change anything: all 10 tools are read-only. Connecting: an administrator of your PasskeyBridge organization signs in and approves the connection on PasskeyBridge's consent pa… Show in context →	SecurityVersion 1.0.0	View details →

Catalog results: live query. The homepage cache is not used for this view.