MARKET RESEARCH

Security Codex plugins

Codex Plugin Stats: discover plugins, explore their skills and track catalog growth and observed changes.

Explore 5,324 plugins across 14 categories.

Security plugins 7

1–7 of 7

All query words must match. Use quotes for an exact phrase. Matches include publisher text, keywords and attributed research.

Discover Codex plugins by task and category
Plugin / developer	Category	Follow
Aivana Security InvestigatorAivanaGuided, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API. Publisher capabilities · listing Direct OAuth/OBO Defender XDR KQL API Read-only cross-domain investigations Evidence packages and analyst review Show in context → 2 more matching sources Publisher description …ded, governed Microsoft security investigations for SOC analysts using a direct OAuth-protected KQL API. Show in context → Publisher full description …nto transparent KQL and executes bounded, read-only Defender XDR queries through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution. Show in context →	SecurityVersion 1.1.1	View details →
KeybookailuntzFind configured website logins, macOS passwords, publishing and cloud service tokens, model API keys, or SSH key paths in a user-maintain... Publisher capabilities · listing …网站任务使用为 npm、Hugging Face、Docker、GitHub/GitLab、Cloudflare 等操作提供已配置的服务令牌为 OpenRouter、ModelScope 等模型 API 调用提供已配置的密钥区分 macOS 登录与钥匙串密码，并为 SSH 操作提供私钥文件路径向可信本地程序注入选定凭据，不在对话中输出明文 Show in context → 2 more matching sources Publisher description Find configured website logins, macOS passwords, publishing and cloud service tokens, model API keys, or SSH key paths in a user-maintained local YAML file; inject only the selected value into an authorized trusted process without printing secrets. Show in context → Publisher full description Keybook 是供本机已授权任务使用的凭据目录。首次使用时，告诉它你现有凭据 YAML 文件的绝对路径；它会在本地检查格式，只保存路径。以后无需反复粘贴密码或 API Key，直接让 AI 继续原任务即可。需要登录网站时，可查找 web 分类中的用户名、邮箱、指定密码变体和 PIN；需要本机授权时，可分别查找 system 中的 macOS 登录密码或登录钥匙串密码。发布 npm 包、上传 Hugging Face 模型或数据集、推送 Docker 镜像、操作 GitHub/GitLab、部署 Cloudflare 时，可按名称查找 services… Show in context →	SecurityVersion 0.6.1	View details →
NightVisionNightVision Security, Inc.NightVision application security workflows for local development and CI/CD. Publisher capabilities · listing API discovery DAST scan configuration CI/CD security guidance Finding triage Show in context → 2 more matching sources Publisher keywords · listing application-security dast api-security openapi nightvision Show in context → Publisher full description Guide NightVision API discovery, DAST scan configuration, CI/CD integration, and security-finding triage using the local NightVision CLI. Show in context →	SecurityVersion 0.2.0	View details →
Authorized Security ReviewIssam Chaaban Publisher full description …urity research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend. Show in context →	SecurityVersion 1.0.1	View details →
Cloudflare SecurityThe Doers Firm Publisher full description Cloudflare Security reviews Cloudflare account configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and ve… Show in context →	SecurityVersion 0.1.0	View details →
RelayShield Scam ChecksRelayShield Publisher description …phishing signals, and look up whether an email appears in known data breaches. Free, no signup, no API key. Verdicts are FLAGGED or unknown — the tools never report anything as safe, because absence of evidence is not evidence of absence. Show in context →	SecurityVersion 1.0.0	View details →
Vibe Code Security ReviewerThe Doers Firm Publisher description Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Show in context → 1 more matching sources Publisher full description Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and misuse, inputs, secrets, uploads, dependencies, data exposure, AI tools, deployment co… Show in context →	SecurityVersion 0.1.0	View details →