COMPETITOR MONITORING FOR PLUGIN DEVELOPERS

Security Codex plugins

Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.

Explore 11,248 plugins across 14 categories.

Selected:X ×Security ×

Follow up to 10 plugins for free. Newest means first added to our catalog, not the publisher’s release date.

Security plugins 58

1–36 of 58

Plugin growth → Export this page ↓

All words must match. Use quotes for an exact phrase.

Compare plugins by developer and category
Plugin / developer	Category	Follow
AJAXX Data ScrubberFORTRESS APPS LLCAJAXX Data Scrubber in ChatGPT provides read-only information about digital privacy risks and data broker exposure. It explains how perso... Plugin name AJAXX Data Scrubber Show in context → 2 more matching sources Publisher subtitle Remove exposed personal data Show in context → Publisher description AJAXX Data Scrubber in ChatGPT provides read-only information about digital privacy risks and data broker exposure. It explains how personal data appears online, how removal services work, and answers co… Show in context →	SecurityVersion 1.0.0	View details →
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Plugin name Codex Security Show in context → 3 more matching sources Package name codex-security Show in context → Publisher description Codex Security workflows for security scans, analysis, and investigation. Show in context → Publisher full description Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts. Show in context →	SecurityVersion 0.1.32	View details →
Codex Security CloudOpenAICloud security scans, findings, and continuous repository monitoring. Plugin name Codex Security Cloud Show in context → 2 more matching sources Publisher subtitle Find and fix vulnerabilities across your repositories Show in context → Publisher full description Codex Security Cloud brings cloud security scans, findings, and continuous repository monitoring into your workspace. Show in context →	SecurityVersion 0.1.1	View details →
OSINT Exposure RadarKöksal KayalıReview an organization’s public exposure through authorized, passive sources. Plugin name OSINT Exposure Radar Show in context → 4 more matching sources Package name osint-exposure-radar Show in context → Publisher subtitle Authorized exposure review Show in context → Publisher description Review an organization’s public exposure through authorized, passive sources. Show in context → Publisher full description Review an organization’s public exposure through authorized, passive sources. Intended for security, compliance and risk practitioners. It preserves uncertainty and does not replace professional review, an audit, or legal advice. Show in context →	SecurityVersion 0.1.0	View details →
ProofXCyberSec AI LtdProofX protects your digital content with cryptographic signatures. What you can do: - Protect your articles, poems, scripts, code, and ... Plugin name ProofX Show in context → 1 more matching sources Publisher description ProofX protects your digital content with cryptographic signatures. What you can do: - Protect your articles, poems, scripts, code, and text with tamper-proof cryptographic proof - Verify if content is reg… Show in context →	SecurityVersion 1.0.0	View details →
Aivana Security InvestigatorAivanaGuided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API. Package name aivana-xdr-investigator Show in context → 3 more matching sources Publisher capabilities · listing Direct OAuth/OBO Defender XDR KQL API Read-only cross-domain investigations Evidence packages and analyst review Show in context → Publisher keywords · listing defender-xdr soc security-investigation kql microsoft-graph sentinel Show in context → Publisher full description Translates user requests into transparent KQL and executes bounded, read-only Defender XDR queries through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution. Show in context →	SecurityVersion 1.1.1	View details →
Tahr SecurityTahr Security IncEvidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Package name tahr-codex-plugin Show in context → 2 more matching sources Publisher description Evidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Show in context → Publisher full description …, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes. Show in context →	SecurityVersion 0.3.3	View details →
Authorised OSINT ToolkitRobert LaneNine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Publisher subtitle Authorised exposure analysis Show in context → 4 more matching sources Publisher capabilities · listing Plan lawful defensive OSINT reviews Assess organisational attack surfaces Review email and cloud exposure Analyse identity security architecture Design exposure monitoring processes Quantify and prioritise security risk Produce evidence-led security reports Show in context → Publisher keywords · listing defensive-osint attack-surface exposure-analysis security risk Show in context → Publisher description Nine skills for authorised organisational OSINT, exposure analysis, monitoring and security risk reporting. Show in context → Publisher full description A nine-skill toolkit for authorised organisational OSINT, attack-surface analysis, email and cloud exposure review, identity-security assurance, monitoring design, risk quantification and evidence-led reporting. The replacement planning, identity and exposure-analysis skills exclude credentials, acc… Show in context →	SecurityVersion 1.1.0	View details →
BreezeBreeze SecurityBreeze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity ... Publisher subtitle Explore security posture Show in context → 1 more matching sources Publisher description Breeze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity risk data through ChatGPT and Codex. Show in context →	SecurityVersion 1.0.0	View details →
CalmidoCalmidoLook up who is behind a phone number in the Netherlands, Belgium or Luxembourg: community reports, spam and scam categories, a trust verd... Publisher subtitle Look up Benelux phone numbers Show in context → 1 more matching sources Publisher description Look up who is behind a phone number in the Netherlands, Belgium or Luxembourg: community reports, spam and scam categories, a trust verdict and the registered business, from Calmido's phone directory. Use it when someone asks who called them, whether a number is safe,… Show in context →	SecurityVersion 1.0.0	View details →
DecionisBinariesDecionis is an execution-authority layer for AI agents. Before an agent takes a consequential action, Decionis evaluates the proposed act... Publisher subtitle Execution Authority Show in context → 1 more matching sources Publisher description Decionis is an execution-authority layer for AI agents. Before an agent takes a consequential action, Decionis evaluates the proposed action against organization policy and determines whether it may proceed, must be… Show in context →	SecurityVersion 1.0.1	View details →
Frame Security ScanFrame (lambdasec)Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. Publisher subtitle Scan, triage, fix, re-scan Show in context → 2 more matching sources Publisher keywords · listing security sast vulnerability scan taint analysis code fixes Show in context → Publisher full description …able, from model-only findings that are leads to check. It then triages false positives, proposes fixes with frame fix as a diff for you to review, changes files only after you agree, and re-scans to confirm. Benchmark numbers are quoted only from the Frame README, with caveats. A clean scan is not… Show in context →	SecurityVersion 0.1.2	View details →
LeakData.ioLeakdata.ioUnderstand a data breach and choose your next steps. Look up a company or website to see known breaches, the types of data exposed, and ... Publisher subtitle Breach checks and next steps Show in context → 1 more matching sources Publisher description Understand a data breach and choose your next steps. Look up a company or website to see known breaches, the types of data exposed, and practical first steps. Browse recent breaches in LeakData's public catalog without connecting an account. C… Show in context →	SecurityVersion 1.4.0	View details →
Orca SecurityOrca SecurityExtend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Or... Publisher subtitle Fix code, cloud & AI risks. Show in context → 1 more matching sources Publisher description Extend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answe… Show in context →	SecurityVersion 1.0.0	View details →
AgentGuardsAgentGuardsSecurity scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell comman... Publisher capabilities · listing Scan text for prompt injection and jailbreaks Detect leaked secrets and personal data Check shell commands before running them Scan code for vulnerabilities and secrets Show in context → 2 more matching sources Publisher description Security scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell commands before running them; scan code for vulnerabilities and hardcoded secrets. Show in context → Publisher full description AgentGuards checks the things an AI agent is about to trust or run. - Scan untrusted text (web pages, emails, documents, issues, other tools' output) for prompt injection, jailbreak attempts, leaked secrets and personal data before acting on it. - Check a shell command before running it… Show in context →	SecurityVersion 1.0.4	View details →
CIMTKAG Cyber LtdCyber Incident Management Toolkit assistants: exec briefings, public statements, retainer and focus group simulations, CTI coaching, supp... Publisher capabilities · listing Create executive cyber incident briefings Draft cyber incident public communications Review incident material with a virtual retainer team Coach cyber threat intelligence requirements Guide supply-chain incid… Show in context → 2 more matching sources Publisher description Cyber Incident Management Toolkit assistants: exec briefings, public statements, retainer and focus group simulations, CTI coaching, supply chain incident navigation and tabletop exercise design. Show in context → Publisher full description …r incident managers and response leaders manage active incidents. It provides guided workflows for executive briefings, public communications, incident-response advisory reviews, threat-intelligence requirements, supply-chain incidents, staff-message review and tabletop exercise design. This skills-… Show in context →	SecurityVersion 1.0.5	View details →
CustodisDIGISCAN LLCCustodis tokenizes sensitive details locally on your device before you share with ChatGPT, then restores the real details on your device. Publisher capabilities · listing …ice tokenization before sharing On-device reading of scanned PDF pages Page review with redaction boxes Protected-text review Exact-text review and approval Local answer restoration Compact Token replacements Local-only original reveal Explicit occurrence choices Show in context → 1 more matching sources Publisher full description …answer. It automatically replaces detected private details with tokens on your device. Review the exact text, approve it, then send it to ChatGPT. Paste the reply into the same open workspace to restore the real details locally. Review private details and consistent tokens side by side. Click an or… Show in context →	SecurityVersion 0.5.6	View details →
CVE Risk CheckAgent ToolsTriage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole d... Publisher capabilities · listing …scription, CVSS score and severity, and publication date from the NVD Shows whether the CISA Known Exploited Vulnerabilities catalog lists a CVE, with its due date and required action Adds the EPSS score: the modelled chance of exploitation in the next 30 days Gives each CVE a priority: exploited, l… Show in context → 2 more matching sources Publisher description Triage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what version). Show in context → Publisher full description Triage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what version). Ask "how bad is CVE-2021-44228?", "which of these CVEs should I patch fir… Show in context →	SecurityVersion 1.2.0	View details →
ScreenataScreenataScreenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 4... Publisher capabilities · listing …eadiness Investigate compliance failures Draft security policies Collect evidence Verify approved fixes Show in context → 2 more matching sources Publisher description …d ISO 42001 audits. Assess infrastructure, investigate failing compliance checks, review proposed fixes, verify results, draft security policies from recorded answers, collect evidence and track audit-cycle readiness. Assessments require Screenata sign-in and a selected workspace; new users create t… Show in context → Publisher full description …gate failing security checks and collect evidence linked to the relevant tests. Review a proposed fix before applying it, then re-run the check to verify the result. Draft security policies from your recorded answers and open direct browser links to review controls, tests, policies, risks and eviden… Show in context →	SecurityVersion 0.1.2	View details →
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Publisher capabilities · listing …ll Find risky instructions, permissions, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the target Show in context → 2 more matching sources Publisher keywords · listing plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code Show in context → Publisher full description …tructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findings with file-and-line evidence and remediation. Do not use it as a safety certification; it never runs, installs, enables, or uploads the target. Show in context →	SecurityVersion 0.1.5	View details →
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex. Publisher keywords · listing endor-labs security sca sast codex Show in context → 1 more matching sources Publisher description Endor Labs security workflows and setup for Codex. Show in context →	SecurityVersion 2.2.4	View details →
SkarnSkarn Software OÜAudit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, r... Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context → 1 more matching sources Publisher full description …I coding assistants have already written to disk and reports leaked credentials, prompt injection, exfiltration attempts, and the chains that connect them; each finding carries the standards mappings that apply to it, drawn from MITRE ATLAS, the OWASP Top 10 for LLM Applications 2025, the OWASP Agen… Show in context →	SecurityVersion 0.27.0	View details →
PersProtectNexpanseCheck known email breaches and read your existing PersProtect account’s protection and removal progress. Publisher Nexpanse Show in context → 2 more matching sources Publisher description Check known email breaches and read your existing PersProtect account’s protection and removal progress. Show in context → Publisher full description Check whether your email appears in known data breaches, see the affected services and exposed data categories, and understand practical next steps. The email check is free and does not require a PersProtect account. Customers with an active subscription or active trial can connect their… Show in context →	SecurityVersion 0.1.7	View details →
RegSentrySoxoa LLCInspect static tracking signals on an authorized public website, observe bounded browser behavior before consent and after supported reje... Publisher Soxoa LLC Show in context → 1 more matching sources Publisher description …ore consent and after supported reject-all or accept-all controls, compare dated observations, and export a plain-text evidence report. Incomplete phases stay unresolved. Results describe observed request attempts and supplied evidence, not legal compliance or proof that a fix is complete. Show in context →	SecurityVersion 1.2.1	View details →
Above SecurityAbove Security Publisher description …s an Above Security account and is scoped to your role and company; read and write are governed by explicit OAuth consent. Show in context →	SecurityVersion 1.0.0	View details →
Aikido SecurityAikido Security Publisher full description Scan the code you write or change for vulnerabilities, exposed secrets, and infrastructure-as-code (IaC) issues. Connect to Aikido Security to pull the matching findings from your feed Show in context →	SecurityVersion 1.0.0	View details →
AnomityAnomity Publisher description …ization's AI security posture through Anomity: findings, devices, MCP servers, shadow AI accounts, exposed secrets, compliance readiness and the allowlist. Skills turn the answers into posture briefings, finding triage, device investigations and allowlist reviews. Show in context → 1 more matching sources Publisher full description …a: devices reporting, open and critical findings, personal AI accounts, unknown MCP servers, plaintext secrets found, and compliance scores. Triage findings. Group open findings by the policy that raised them, rank them by severity and reach, and get the practical fix for each group. Investigate a d… Show in context →	SecurityVersion 0.1.0	View details →
Atbash SafetyAtbash AI Publisher description Set up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy. Show in context → 1 more matching sources Publisher full description …an Atbash agent, manage its name, purpose, risk, or active state with browser approval, and check explicitly submitted actions against Atbash safety policies. The desktop helper keeps agent private keys in local configuration and uses them locally for signing. Safety policy enforcement applies to t… Show in context →	SecurityVersion 0.3.4	View details →
AttackerViewAttackerView Publisher full description …PF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and how to fix it. For developers, founders and IT teams who want a quick read on a site's configuration, their own or one they depend on. The check is passive: one request to the homepage plus public DNS and TLS… Show in context →	SecurityVersion 1.0.1	View details →
Authorized Security ReviewIssam Chaaban Publisher description Evidence-based security reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools. Show in context → 1 more matching sources Publisher full description …investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend. Show in context →	SecurityVersion 1.0.1	View details →
BlindOracle Agent TrustCraig M. Brown Publisher full description …isputes and the trust-score trend for the same subject. - Service list: which BlindOracle services exist and which ones can be used from ChatGPT. - Your agent account: start_here creates a BlindOracle agent for you in one step, with a public passport page and starter credit held for you on the serve… Show in context →	SecurityVersion 1.1.1	View details →
CertScore.ai Privacy ScannerCertScore.ai, LLC Publisher description …ded Accept and Reject observations, policy signals, and HTTPS/TLS. Results preserve provenance and explicit coverage limitations for human review; they are not legal advice, certification, or a compliance determination. Show in context →	SecurityVersion 2.0.0	View details →
Cloudaware Service GraphCloudaware Publisher description …ructure: every resource across AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes, VMware and Nutanix, with its configuration, configuration history, cost, vulnerabilities, and the monitoring and security agents installed on it. Cloudaware discovers it through the providers' APIs and the systems alr… Show in context →	SecurityVersion 1.0.0	View details →
Cloudflare SecurityThe Doers Firm Publisher full description …horized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security. Show in context →	SecurityVersion 0.1.1	View details →
Diopter AIDiopter AI Inc Publisher full description …nk, and Diopter runs it through its trained deepfake detection models, then returns a verdict (for example: no AI detected, AI-generated, or inconclusive) with a confidence level and a link to the full report on diopter.ai. Use it to sanity-check a suspicious image before sharing it, verify a video… Show in context →	SecurityVersion 1.0.0	View details →
Fraud BlockerFraud Blocker Publisher full description …and detailed sub-status. - Domain & Mail Server Checks: See the email domain and whether valid MX records were found. - Address Insights: Identify free-email providers and review suggested address corrections when available. - Clear Verification Results: Ask ChatGPT to explain Fraud Bloc… Show in context →	SecurityVersion 1.0.0	View details →