COMPETITOR MONITORING FOR PLUGIN DEVELOPERS

Security Codex plugins

Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.

Explore 10,773 plugins across 14 categories.

Selected:app code ×Security ×

Follow up to 10 plugins for free. Newest means first added to our catalog, not the publisher’s release date.

Security plugins 16

1–16 of 16

Plugin growth → Export this page ↓

All words must match. Use quotes for an exact phrase.

Compare plugins by developer and category
Plugin / developer	Category	Follow
Orca SecurityOrca SecurityExtend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Or... Package name app-6a79cf1668bc81919b7c5fffd14675f8 Show in context → 2 more matching sources Publisher subtitle Fix code, cloud & AI risks. Show in context → Publisher description …and extend it to their own use cases. The result: security and engineering teams work across cloud, code, and AI from a single workspace, with Orca's reasoning behind every answer. Show in context →	SecurityVersion 1.0.0	View details →
Tahr SecurityTahr Security IncEvidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Package name tahr-codex-plugin Show in context → 3 more matching sources Publisher subtitle Evidence-backed app security Show in context → Publisher description Evidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Show in context → Publisher full description Review applications with an evidence-first security workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes. Show in context →	SecurityVersion 0.3.3	View details →
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Publisher keywords · listing security code-review diff-review appsec threat-modeling Show in context → 5 more matching sources Plugin name Codex Security Show in context → Package name codex-security Show in context → Publisher subtitle Security scanning for your codebase Show in context → Publisher description Codex Security workflows for security scans, analysis, and investigation. Show in context → Publisher full description Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts. Show in context →	SecurityVersion 0.1.32	View details →
Vibe Code Security ReviewerThe Doers Firm Publisher full description Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and misuse, inputs, secrets, uploads, dependencies, data exposure, AI tools, deployment configuration,… Show in context → 3 more matching sources Plugin name Vibe Code Security Reviewer Show in context → Package name vibe-code-security-reviewer Show in context → Publisher description Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Show in context →	SecurityVersion 0.1.0	View details →
BastionBastion TechnologiesConnect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance statu... Package name app-69de45400e3881919e42ad9f174aff5b Show in context → 1 more matching sources Publisher description …dge base security and compliance questions grounded in your own policies and documentation. Monitor code security findings and GitHub configuration status. All data is scoped to your authenticated account - you only ever see your own tenant. Show in context →	SecurityVersion 1.0.0	View details →
BreezeBreeze SecurityBreeze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity ... Package name app-6a7dd0b7d3008191a892a481af10b413 Show in context → 1 more matching sources Publisher description …ity posture, connected integrations, scan status, tenants, and entity risk data through ChatGPT and Codex. Show in context →	SecurityVersion 1.0.0	View details →
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex. Publisher subtitle Endor Labs Agentic AppSec Show in context → 4 more matching sources Publisher capabilities · listing Security Remediation Investigation Application Security Agentic Workflows Agentic Remediation Agentic AppSec Show in context → Publisher keywords · listing endor-labs security sca sast codex Show in context → Publisher description Endor Labs security workflows and setup for Codex. Show in context → Publisher full description Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more. Show in context →	SecurityVersion 2.2.2	View details →
GuardioGuardio Publisher full description Guardio helps you check suspicious links and understand your online protection from ChatGPT and Codex. Check a website before opening it, or check links extracted from a suspicious message without sending the message body to Guardio. Connect your Guardio account to review protection setup, scan… …e counts, and security recommendations. You can also check whether an email address or phone number appears in known data breaches. Results describe known exposure; they do not reveal leaked passwords. When you ask, Guardio can guide setup of its protection in a supported browser and receive your fe… Show in context → 1 more matching sources Package name app-6aba14b2302081919a457045585115e3 Show in context →	SecurityVersion 0.2.2	View details →
ProofXCyberSec AI LtdProofX protects your digital content with cryptographic signatures. What you can do: - Protect your articles, poems, scripts, code, and ... Package name app-6999b01e27848191b089311e21048f3e Show in context → 1 more matching sources Publisher description …al content with cryptographic signatures. What you can do: - Protect your articles, poems, scripts, code, and text with tamper-proof cryptographic proof - Verify if content is registered with ProofX using a content ID or hash - Look up creator profiles and their protection history - Get digital fing… Show in context →	SecurityVersion 1.0.0	View details →
ToolCheck by M8venM8ven Inc.ToolCheck is M8ven's trust layer for the MCP ecosystem. Give it a GitHub URL or npm package name and it returns an independent trust scor... Package name app-6a14919550ec819187b03a34c1e2c8f3 Show in context → 1 more matching sources Publisher description …independent trust score (0–100) and a clear verdict (Trusted / Caution / Concern), backed by static code analysis, runtime behavioral observation in a sandbox, CVE scanning, and a semantic check comparing the tool's declared behavior against what its code actually does — catching the gap between "re… Show in context →	SecurityVersion 1.0.0	View details →
ScreenataScreenata Publisher full description …ing security checks and collect evidence linked to the relevant tests. Review a proposed fix before applying it, then re-run the check to verify the result. Draft security policies from your recorded answers and open direct browser links to review controls, tests, policies, risks and evidence. After… …gning in to Screenata and selecting a workspace, assess selected cloud accounts, identity services, code repositories and a local repository. New users create their account in the browser. Cloud checks run on Screenata servers with account-specific consent; provider credentials stay out of chat and… Show in context → 1 more matching sources Publisher capabilities · listing …iew audit readiness Investigate compliance failures Draft security policies Collect evidence Verify approved fixes Show in context →	SecurityVersion 0.1.2	View details →
VIDOC Security ReviewVidoc Security Lab Publisher full description VIDOC Security Review brings security code review workflows from Vidoc Security Lab to ChatGPT and Codex. For developers and application security teams, its three defined skills review supplied code or diffs, validate suspected vulnerabilities, and prepare reports with evidence, impact, and proposed fixes. Findings distingu… Show in context → 3 more matching sources Publisher capabilities · listing Security code review Finding validation Review reporting Show in context → Publisher keywords · listing vidoc security code-review vulnerability-review Show in context → Publisher description VIDOC Security Review by Vidoc Security Lab: review source code for security issues, validate suspected findings, and prepare reports with supporting evidence using three defined skills. Show in context →	SecurityVersion 0.1.1	View details →
SkarnSkarn Software OÜ Publisher full description …ction, exfiltration attempts, and the chains that connect them; each finding carries the standards mappings that apply to it, drawn from MITRE ATLAS, the OWASP Top 10 for LLM Applications 2025, the OWASP Agentic Top 10, and CWE. skarn vet reads the assistant configuration files on the same machine and reports risky declarations: hooks, MCP servers, and permission grants that could run remote code or send data off the machine. Both passes run entirely on this machine and make no network call. Neither modifies a session transcript or a configuration file, and every credential value in the o… Show in context → 1 more matching sources Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context →	SecurityVersion 0.27.0	View details →
Cloudflare SecurityThe Doers Firm Publisher description Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Show in context → 1 more matching sources Publisher full description …TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security. Show in context →	SecurityVersion 0.1.1	View details →
CVE Risk CheckAgent Tools Publisher full description …ithout a key, so records are cached for a few hours; a recent change to a CVE can take that long to appear, and when NVD asks this service to slow down the answer says so and when to retry. For a dependency list, pass the text of a lockfile (package-lock.json, pnpm-lock.yaml, yarn.lock, poetry.lock,… …lowed by a short list of the rest. A match is by exact name and version: it does not show that your code reaches the vulnerable code. It does not scan your systems, read your source code, confirm that you are vulnerable, or tell you how to exploit anything. The CVE ids and dependency lists you send… Show in context →	SecurityVersion 1.2.0	View details →
Have I Been SquattedHave I Been Squatted Publisher full description …ile it is being set up. Lookalike domains, mail servers, staging hosts and their certificates often appear before a phishing campaign launches. This plugin brings detection, investigation and response for them into ChatGPT and Codex. Enrich and hunt, for any domain - Analyze: live DNS, mail, registration, hosting, HTTP and classification for one domain, with a verdict profile and an interactive view with a screenshot and ho… Show in context →	SecurityVersion 1.1.2	View details →