Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 12,705 plugins across 14 categories.
Follow up to 3 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 61
Plugin growth →All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
BlindOracle Agent TrustCraig M. BrownTrust badge, reputation lookup and service list for AI agents, with a signed content credential on every result. Includes a skill for pro... Plugin name BlindOracle Agent Trust Show in context →5 more matching sourcesPublisher capabilities · listing Look up an AI agent's trust badge by name or wallet Read an agent's job counts on BlindOracle before you hire it List BlindOracle services and which ones work here Show in context →Publisher keywords · listing ai agents trust reputation counterparty agent marketplace verification Show in context →Publisher description Trust badge, reputation lookup and service list for AI agents, with a signed content credential on every result. Includes a skill for proof of delegation: a four-step signed record of a task handed fr… Show in context →Publisher full description BlindOracle Agent Trust answers one question before you work with or hire an AI agent: what is its record? What works in ChatGPT today - Trust badge: a one-line badge for an agent name or wallet, built from BlindOracle… Show in context → |
SecurityVersion 1.2.0 | View details → |
RegSentrySoxoa LLCInspect static tracking signals on an authorized public website, observe bounded browser behavior before consent and after supported reje... Plugin name RegSentry Show in context →4 more matching sourcesPublisher description Inspect static tracking signals on an authorized public website, observe bounded browser behavior before consent and after supported reject-all or accept-all controls, compare dated observations, and export a plain-… Show in context → |
SecurityVersion 1.2.1 | View details → |
Streamingo Face BlurStreamingo.aiAutomates face blurring in video and image files to streamline privacy compliance and data anonymization. Streamingo detects and obfuscat... Plugin name Streamingo Face Blur Show in context →2 more matching sourcesPublisher description Automates face blurring in video and image files to streamline privacy compliance and data anonymization. Streamingo detects and obfuscates faces across media without destroying context, helping developers and data teams safely share, process, or publis… Show in context → |
SecurityVersion 1.0.0 | View details → |
Awesome Maintainer DefenseDUC THANG LUURead-only repository governance and GitHub Actions risk audits with reviewable patches. Publisher subtitle Audit repository trust safely Show in context →1 more matching sourcesPublisher full description Inspect repository policy, GitHub Actions trust boundaries, and moderation automation without network access or repository mutation; generate reviewable remediation patches on request. Show in context → |
SecurityVersion 1.1.1 | View details → |
CertScore.ai Privacy ScannerCertScore.ai, LLCScan public websites for fast preliminary cookie/tracker evidence, then continue to persisted privacy findings, typed GPC response compar... Publisher subtitle GDPR, cookies & trackers Show in context →1 more matching sourcesPublisher description Scan public websites for fast preliminary cookie/tracker evidence, then continue to persisted privacy findings, typed GPC response comparisons, bounded Accept and Reject observations, policy signals, and HTTPS/TLS. Results preserve provenance and ex… Show in context → |
SecurityVersion 2.0.0 | View details → |
CVE Risk CheckAgent ToolsTriage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole d... Publisher subtitle CVE and dependency triage Show in context →3 more matching sourcesPublisher capabilities · listing …y or routine Ranks a batch of up to 10 CVEs with the most urgent first Reads an npm, pnpm, yarn, Poetry, uv, Cargo or Go lockfile and names the 3 packages to upgrade first, with the fix Matches package versions to OSV.dev advisories in 8 ecosystems, including npm, PyPI, Go, Maven and crates.io Lists… Show in context →Publisher description Triage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what… Show in context →Publisher full description Triage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what… Show in context → |
SecurityVersion 1.2.0 | View details → |
Frame Security ScanFrame (lambdasec)Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. Publisher subtitle Scan, triage, fix, re-scan Show in context →1 more matching sourcesPublisher full description …ame README describes as proven reachable, from model-only findings that are leads to check. It then triages false positives, proposes fixes with frame fix as a diff for you to review, changes files only after you agree, and re-scans to confirm. Benchmark numbers are quoted only from the Frame README… Show in context → |
SecurityVersion 0.1.2 | View details → |
Have I Been SquattedHave I Been SquattedAnalyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to... Publisher subtitle Catch attacker infrastructure Show in context →4 more matching sourcesPublisher capabilities · listing Analyze any domain live: DNS, registration, hosting, HTTP, classification and a verdict, with a screenshot view Search certificate transparency logs for certificate names matching a pattern Scan a domain for registered and live typosqu… Show in context →Publisher keywords · listing security typosquatting lookalike-domains certificate-transparency brand-protection takedowns threat-intelligence mcp Show in context →Publisher description Analyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to its connected tools, and manage its domains, rules and takedowns. Show in context →Publisher full description Have I Been Squatted finds attacker infrastructure while it is being set up. Lookalike domains, mail servers, staging hosts and their certificates often appear before a phishing campaign launches. This plugin brings detection, investigation a… Show in context → |
SecurityVersion 1.1.2 | View details → |
Security Advisory Scoutaleff-githubEvidence-first security advisory triage with NVD, OSV, FIRST EPSS, and CISA KEV. Publisher subtitle Evidence-first CVE triage Show in context →2 more matching sourcesPublisher capabilities · listing Triage advisory evidence Check package versions Compare OSV records Show in context →Publisher description Evidence-first security advisory triage with NVD, OSV, FIRST EPSS, and CISA KEV. Show in context → |
SecurityVersion 0.1.1 | View details → |
AnomityAnomityAsk about your organization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, c... Publisher capabilities · listing Read your organization's AI security posture Triage policy findings Investigate a managed device Review MCP servers and AI accounts Review the audit trail and compliance readiness Approve allowlist items you confirm (admins, when enabled) Show in context →2 more matching sourcesPublisher description …ts, compliance readiness and the allowlist. Skills turn the answers into posture briefings, finding triage, device investigations and allowlist reviews. Show in context →Publisher full description …curity team every AI tool running on its managed devices: coding agents, MCP servers, skills and instruction files, browser AI use, personal versus corporate AI accounts, and the credentials those tools can reach. Sensors deployed through your device management report that inventory to the Anomity c… Show in context → |
SecurityVersion 0.1.0 | View details → |
EtugenEtugenInvestigate malicious infrastructure, threat indicators, WHOIS records and ATT&CK techniques with Etugen. Publisher capabilities · listing IP and indicator enrichment C2 and malware infrastructure hunting Pivoting on certificates, JARM and ASN Risk scoring with reasons WHOIS and reverse WHOIS ASN and network lookups MITRE ATT&CK techniques Show in context →3 more matching sourcesPublisher keywords · listing threat intelligence threat hunting cti ioc enrichment c2 malware infrastructure whois mitre att&ck soc Show in context →Publisher description Investigate malicious infrastructure, threat indicators, WHOIS records and ATT&CK techniques with Etugen. Show in context →Publisher full description Etugen keeps track of malicious infrastructure on the internet, like command-and-control servers, malware hosts, phishing kits and attacker directories left open to the web. Connect your Etugen account and you can… Show in context → |
SecurityVersion 1.0.0 | View details → |
nebtynebty GmbHnebty is the early warning system against brand impersonation. See the lookalike domains, phishing sites, fake profiles and scam ads targ... Publisher capabilities · listing Review lookalike domains and phishing sites Review fake profiles and scam ads Track takedowns and their history Trust or dismiss findings Show in context →3 more matching sourcesPublisher description …phishing sites, fake profiles and scam ads targeting your company, review findings in the chat and track every takedown with its complete history. New scans and takedown requests run in the nebty dashboard. Show in context →Publisher full description Fake shops, phishing sites and fake profiles that copy your brand cost you customers, money and trust. nebty is the early warning system against brand impersonation: it scans the internet around the clock for lookalike domains, phishing websites, fake social media profiles, scam ads and maliciou… Show in context →Publisher translations · package …-Shops, Phishing-Seiten und gefälschte Profile, die Ihre Brand kopieren, kosten Kunden, Geld und Vertrauen. nebty ist das Frühwarnsystem gegen Brand-Impersonation: nebty durchsucht das Internet rund um die Uhr nach Lookalike-Domains, Phishing-Websites, gefälschten Social-Media-Profilen, betrügerisch… Show in context → |
SecurityVersion 0.2.0 | View details → |
NightVisionNightVision Security, Inc.NightVision application security workflows for local development and CI/CD. Publisher capabilities · listing API discovery DAST scan configuration CI/CD security guidance Finding triage Show in context →1 more matching sourcesPublisher full description Guide NightVision API discovery, DAST scan configuration, CI/CD integration, and security-finding triage using the local NightVision CLI. Show in context → |
SecurityVersion 0.2.0 | View details → |
OneleetOneleetWork with your Oneleet security and compliance workspace: controls, monitors, evidence, policies, risks, vendors, access reviews, devices... Publisher capabilities · listing Review compliance controls and checks Track monitors and failing assets Review evidence and policies Manage risks and vendor assessments Run access reviews Review security findings Manage trust center requests Show in context →2 more matching sourcesPublisher description Work with your Oneleet security and compliance workspace: controls, monitors, evidence, policies, risks, vendors, access reviews, devices, security findings and trust center. Show in context →Publisher full description …rity and compliance platform that runs SOC 2, ISO 27001 and other compliance programs alongside penetration testing, attack surface monitoring, code security and device management. The Oneleet plugin connects ChatGPT and Codex to your Oneleet workspace so you can review and work on your security pro… Show in context → |
SecurityVersion 1.0.0 | View details → |
PrevidianPrevidianEarly warning when vulnerabilities move into active exploitation, for a connected Enterprise account. Publisher capabilities · listing Search known exploited vulnerabilities Read honeypot attempts Read attacker infrastructure Read virtual-patch rules Show in context →1 more matching sourcesPublisher full description …ise account. They can look up vulnerability records, review honeypot attempts, check attacker infrastructure, and read virtual-patch rules. Cite the previdian.com page for each vulnerability. Every tool is read-only. The connector does not change the account, deploy rules, or send notifications. Res… Show in context → |
SecurityVersion 1.0.0 | View details → |
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Publisher capabilities · listing Scan local skills and plugins before install Find risky instructions, permissions, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the target Show in context →1 more matching sourcesPublisher full description …e this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findings with file-and-line evidence and remediation. Do not use it as… Show in context → |
SecurityVersion 0.1.5 | View details → |
WolfiaWolfiaAnswer security questionnaires and customer security questions from your approved Wolfia knowledge base, with a citation for every answer. Publisher capabilities · listing Answer security and compliance questions with citations Find policies, reports and trust center documents Look up past questionnaire answers Review, edit and approve questionnaire answers Export finished questionnaires Show in context →2 more matching sourcesPublisher keywords · listing security questionnaires compliance trust center knowledge base Show in context →Publisher full description …s a company's approved security, privacy and compliance knowledge in sync: policies, audit reports, trust center documents and past questionnaire answers. Connect it to ChatGPT and ChatGPT answers from that approved knowledge instead of guessing, cites the source of every answer, and acts with your… Show in context → |
SecurityVersion 1.0.0 | View details → |
AJAXX Data ScrubberFORTRESS APPS LLCAJAXX Data Scrubber in ChatGPT provides read-only information about digital privacy risks and data broker exposure. It explains how perso...
|
SecurityVersion 1.0.0 | View details → |
CIMTKAG Cyber LtdCyber Incident Management Toolkit assistants: exec briefings, public statements, retainer and focus group simulations, CTI coaching, supp...
|
SecurityVersion 1.0.5 | View details → |
DHVANINi-tro LabsFinds out whether a voice recording, or a video soundtrack, is an AI deepfake. The check is the voice only and the score is not proof. Publisher Ni-tro Labs Show in context →2 more matching sourcesPublisher description Finds out whether a voice recording, or a video soundtrack, is an AI deepfake. The check is the voice only and the score is not proof. Show in context →Publisher full description DHVANI, from Ni-tro Labs, finds out whether a voice recording, or the soundtrack of a video, is an AI deepfake. Send one file in the chat. The reply is a verdict, a fake percentage, a real percentage, and times when… Show in context → |
SecurityVersion 1.0.2 | View details → |
IsThisSpamUltron Developments Pty. Ltd.IsThisSpam checks suspicious phone numbers, messages, links, websites, and email addresses using structured scam signals and cautious saf... Publisher Ultron Developments Pty. Ltd. Show in context →1 more matching sourcesPublisher description IsThisSpam checks suspicious phone numbers, messages, links, websites, and email addresses using structured scam signals and cautious safety guidance. Results distinguish likely scams from unverified findings; no result is a guarantee of safety. Show in context → |
SecurityVersion 0.1.0 | View details → |
ScanMalwareTriop ABInvestigate phishing and malicious URLs with the ScanMalware scan archive: the ScanMalware MCP server plus a skill for pivoting from one ... Publisher Triop AB Show in context →1 more matching sourcesPublisher full description …ated scans by domain, IP, ASN, JARM signature, favicon hash, screenshot hash, fuzzy hash, OCR text, tracking key or JavaScript fingerprint. - Look up Certificate Transparency records for a domain or IP. - Submit a new URL for scanning, choosing whether the result is public or unlisted, and read the… Show in context → |
SecurityVersion 1.0.0 | View details → |
Above SecurityAbove Security Publisher description …tored applications, and audit logs; and run investigative searches across your tenant. You can also triage from chat — set incident status, verdict, and resolution notes, or add an identity to the watch list. Access requires an Above Security account and is scoped to your role and company; read and… Show in context → |
SecurityVersion 1.0.0 | View details → |
AgentGuardsAgentGuards Publisher description Security scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell commands before running them; scan code for vulnerabilities and hardcoded secrets. Show in context →1 more matching sourcesPublisher full description AgentGuards checks the things an AI agent is about to trust or run. - Scan untrusted text (web pages, emails, documents, issues, other tools' output) for prompt injection, jailbreak attempts, leaked secrets and personal data before acting on it. - Check… Show in context → |
SecurityVersion 1.0.4 | View details → |
Aikido SecurityAikido Security Publisher full description Scan the code you write or change for vulnerabilities, exposed secrets, and infrastructure-as-code (IaC) issues. Connect to Aikido Security to pull the matching findings from your feed Show in context → |
SecurityVersion 1.0.0 | View details → |
Aivana Security InvestigatorAivana Publisher full description Translates user requests into transparent KQL and executes bounded, read-only Defender XDR queries through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review witho… Show in context → |
SecurityVersion 1.1.1 | View details → |
Ansvar GatewayAnsvar AI Publisher description …ateway and run compliance work directly in that assistant: regulatory gap analyses, threat models (STRIDE/LINDDUN, TARA), DPIAs and audit preparation, grounded in more than 300 curated corpora of EU and international legislation, case law, preparatory works, regulator guidance and security standards… Show in context → |
SecurityVersion 1.0.0 | View details → |
Authorised OSINT ToolkitRobert Lane Publisher full description …is skills exclude credentials, account enumeration, authentication testing, exploitation, access-control bypass and surveillance. Show in context → |
SecurityVersion 1.1.0 | View details → |
BastionBastion Technologies Publisher description …across SOC 2, ISO 27001, HIPAA, and GDPR. Drill into failing tests, upload evidence, and submit controls for review. Ask your knowledge base security and compliance questions grounded in your own policies and documentation. Monitor code security findings and GitHub configuration status. All data is… Show in context → |
SecurityVersion 1.0.0 | View details → |
CalmidoCalmido Publisher description …ne number in the Netherlands, Belgium or Luxembourg: community reports, spam and scam categories, a trust verdict and the registered business, from Calmido's phone directory. Use it when someone asks who called them, whether a number is safe, spam or a scam, or which company a number belongs to. Show in context → |
SecurityVersion 1.0.0 | View details → |
Cloudaware Service GraphCloudaware Publisher description Cloudaware Service Graph connects ChatGPT to a live inventory of the organization's infrastructure: every resource across AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes, VMware and Nutanix, with its configuration, configuration history, cost, vulnerabilities, and the monitoring and sec… Show in context → |
SecurityVersion 1.0.0 | View details → |
Cloudflare SecurityThe Doers Firm Publisher description Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Show in context → |
SecurityVersion 0.1.1 | View details → |
CookieYesCookieYes Limited Publisher description …ide your chat. Check whether your cookie banner is live. Run a cookie scan to find every cookie and tracker on your site. Review your GDPR and CCPA compliance settings. Update your cookie banner in seconds. Typical requests: "Audit my site for GDPR compliance", "Is my cookie banner active?", "Run a… Show in context → |
SecurityVersion 1.0.0 | View details → |
DecionisBinaries Publisher description …ionis to govern agent-initiated payments, refunds, commerce operations, enterprise workflows, infrastructure changes, and other high-impact actions. Decionis authorizes execution; it does not perform the downstream action. Payments, transfers, trades, orders, and system changes remain the responsibi… Show in context → |
SecurityVersion 1.0.1 | View details → |
Diopter AIDiopter AI Inc Publisher full description …erated or manipulated by AI. Upload a file in chat or share a link, and Diopter runs it through its trained deepfake detection models, then returns a verdict (for example: no AI detected, AI-generated, or inconclusive) with a confidence level and a link to the full report on diopter.ai. Use it to sa… Show in context → |
SecurityVersion 1.0.0 | View details → |
DrataDrata Inc. Publisher description …natural language to work with your Drata governance, risk, and compliance data. Search and list controls, policies, evidence, risks, vendors, personnel, devices, and monitoring tests. Create and update supported records where your Drata permissions and granted OAuth scopes allow. Connect your Drata… Show in context → |
SecurityVersion 1.0.0 | View details → |
Catalog results: live query. The homepage cache is not used for this view.