Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 11,617 plugins across 14 categories.
Follow up to 3 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 17
Plugin growth →All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Publisher subtitle Security scanning for your codebase Show in context →5 more matching sourcesPublisher keywords · listing security code-review diff-review appsec threat-modeling Show in context →Publisher description Codex Security workflows for security scans, analysis, and investigation. Show in context →Publisher full description Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts. Show in context → |
SecurityVersion 0.1.32 | View details → |
BastionBastion Technologies Publisher description Connect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance status across SOC 2, ISO 27001, HIPAA, and GDPR. Drill into failing tests, upload evidence, and sub… …dge base security and compliance questions grounded in your own policies and documentation. Monitor code security findings and GitHub configuration status. All data is scoped to your authenticated account - you only ever see your own tenant. Show in context →2 more matching sources |
SecurityVersion 1.0.0 | View details → |
GuardioGuardio Publisher full description Guardio helps you check suspicious links and understand your online protection from ChatGPT and Codex. Check a website before opening it, or check links extracted from a suspicious message without sending the message body to Guardio. Connect your Guardio account to review protection setup, scan… …e counts, and security recommendations. You can also check whether an email address or phone number appears in known data breaches. Results describe known exposure; they do not reveal leaked passwords. When you ask, Guardio can guide setup of its protection in a supported browser and receive your fe… Show in context →4 more matching sourcesPublisher capabilities · listing Check suspicious links Check links in messages Look up known email and phone breaches Review account protection and scan activity Review security recommendations Set up browser protection Send requested product feedback Show in context →Publisher description Check suspicious links, review known data leaks, and understand your Guardio protection. Show in context → |
SecurityVersion 0.2.2 | View details → |
Orca SecurityOrca Security Publisher description Extend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answer factors in reachability, blast radius, and business… …and extend it to their own use cases. The result: security and engineering teams work across cloud, code, and AI from a single workspace, with Orca's reasoning behind every answer. Show in context →2 more matching sources |
SecurityVersion 1.0.0 | View details → |
ProofXCyberSec AI Ltd Publisher description ProofX protects your digital content with cryptographic signatures. What you can do: - Protect your articles, poems, scripts, code, and text with tamper-proof cryptographic proof - Verify if content is registered with ProofX using a content ID or hash - Look up creator profiles and their protection history - Get digital fing… Show in context →2 more matching sources |
SecurityVersion 1.0.0 | View details → |
Tahr SecurityTahr Security Inc Publisher description Evidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Show in context →3 more matching sourcesPublisher full description Review applications with an evidence-first security workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes. Show in context → |
SecurityVersion 0.3.3 | View details → |
Vibe Code Security ReviewerThe Doers Firm Publisher full description Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and misuse, inputs, secrets, uploads, dependencies, data exposure, AI tools, deployment configuration,… Show in context →4 more matching sourcesPublisher description Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Show in context → |
SecurityVersion 0.1.0 | View details → |
AgentGuardsAgentGuards Publisher full description AgentGuards checks the things an AI agent is about to trust or run. - Scan untrusted text (web pages, emails, documents, issues, other tools' output) for prompt injection, jailbreak attempts, leaked secrets and personal data befor… …, force pushes and infrastructure changes are flagged with a risk level and a reason. - Scan source code for security issues and hardcoded secrets before committing or running it. Who it's for: developers using ChatGPT or Codex with untrusted inputs or shell access. Requires an AgentGuards account (you sign in when you connect). Scan results also appear in your AgentGuards dashboard. Limitations: the tools scan only what they are given, when they are called. They do not intercept anything automatically, and they never run, change or delete any… Show in context →3 more matching sourcesPublisher capabilities · listing Scan text for prompt injection and jailbreaks Detect leaked secrets and personal data Check shell commands before running them Scan code for vulnerabilities and secrets Show in context →Publisher description Security scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell commands before running them; scan code for vulnerabilities and hardcoded secrets. Show in context → |
SecurityVersion 1.0.4 | View details → |
BreezeBreeze Security Publisher description Breeze helps authenticated users explore their organization's security posture, connected integrations, scan status, tenants, and entity risk data through ChatGPT and Codex. Show in context →1 more matching sources |
SecurityVersion 1.0.0 | View details → |
SkarnSkarn Software OÜ Publisher full description Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn asse… …ction, exfiltration attempts, and the chains that connect them; each finding carries the standards mappings that apply to it, drawn from MITRE ATLAS, the OWASP Top 10 for LLM Applications 2025, the OWASP Agentic Top 10, and CWE. skarn vet reads the assistant configuration files on the same machine and reports risky declarations: hooks, MCP servers, and permission grants that could run remote code or send data off the machine. Both passes run entirely on this machine and make no network call. Neither modifies a session transcript or a configuration file, and every credential value in the o… Show in context →4 more matching sourcesPublisher capabilities · listing Scan AI coding sessions for leaked credentials Vet assistant hooks, MCP servers and permission grants Show in context →Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context →Publisher description Audit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context → |
SecurityVersion 0.27.0 | View details → |
ToolCheck by M8venM8ven Inc. Publisher description ToolCheck is M8ven's trust layer for the MCP ecosystem. Give it a GitHub URL or npm package name and it returns an independent trust score (0–100) and a clear verdict (Trusted / Caution / Concern), backed by static code analysis, runtime behavioral observation in a sandbox, CVE scanning, and a semantic check comparing the tool's declared behavior against what its code actually does — catching the gap between "re… Show in context →1 more matching sources |
SecurityVersion 1.0.0 | View details → |
ScreenataScreenata Publisher full description Screenata manages security compliance and audit preparation for startups. Track audit-cycle readiness for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001, investigate failing security checks and collect evidence linked to the relevant tests. Review a proposed fix before applying it, then re-run the check to verify the result. Draft security policies from your recorded answers and open direct browser links to review controls, tests, policies, risks and evidence. After… …gning in to Screenata and selecting a workspace, assess selected cloud accounts, identity services, code repositories and a local repository. New users create their account in the browser. Cloud checks run on Screenata servers with account-specific consent; provider credentials stay out of chat and… Show in context →3 more matching sourcesPublisher capabilities · listing Review audit readiness Investigate compliance failures Draft security policies Collect evidence Verify approved fixes Show in context →Publisher keywords · listing compliance soc2 hipaa iso27001 iso42001 grc audit soc-2 iso-27001 iso-42001 audit-readiness compliance-tools security-assessment evidence-collection policy-drafting cloud-security startups Show in context →Publisher description Screenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001 audits. Assess infrastructure, investigate failing compliance checks, review proposed fixes… Show in context → |
SecurityVersion 0.1.2 | View details → |
CVE Risk CheckAgent Tools Publisher full description …ted, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what version). Ask "how bad is CVE-2021-44228?", "which of these CVEs should I patch first?", "what did CISA add to its exploited list this month?" or "which dependencies in this package-lock.j… …ithout a key, so records are cached for a few hours; a recent change to a CVE can take that long to appear, and when NVD asks this service to slow down the answer says so and when to retry. For a dependency list, pass the text of a lockfile (package-lock.json, pnpm-lock.yaml, yarn.lock, poetry.lock,… …lowed by a short list of the rest. A match is by exact name and version: it does not show that your code reaches the vulnerable code. It does not scan your systems, read your source code, confirm that you are vulnerable, or tell you how to exploit anything. The CVE ids and dependency lists you send… Show in context →3 more matching sourcesPublisher capabilities · listing Looks up a CVE's description, CVSS score and severity, and publication date from the NVD Shows whether the CISA Known Exploited Vulnerabilities catalog lists a CVE, with its due date and required action Adds the EPSS score: the modelled chan… Show in context →Publisher description …ted, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what version). Show in context → |
SecurityVersion 1.2.0 | View details → |
Endor Labs Agent KitEndor Labs Publisher description Endor Labs security workflows and setup for Codex. Show in context →3 more matching sourcesPublisher full description Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more. Show in context →Publisher capabilities · listing Security Remediation Investigation Application Security Agentic Workflows Agentic Remediation Agentic AppSec Show in context → |
SecurityVersion 2.2.4 | View details → |
Cloudflare SecurityThe Doers Firm Publisher description Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Show in context →2 more matching sourcesPublisher full description …eviews Cloudflare account configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security. Show in context → |
SecurityVersion 0.1.1 | View details → |
Have I Been SquattedHave I Been Squatted Publisher full description …ds attacker infrastructure while it is being set up. Lookalike domains, mail servers, staging hosts and their certificates often appear before a phishing campaign launches. This plugin brings detection, investigation and response for them into ChatGPT and Codex. Enrich and hunt, for any domain - Analyze: live DNS, mail, registration, hosting, HTTP and classification for one domain, with a verdict profile and an interactive view with a screenshot and ho… Show in context →3 more matching sourcesPublisher capabilities · listing Analyze any domain live: DNS, registration, hosting, HTTP, classification and a verdict, with a screenshot view Search certificate transparency logs for certificate names matching a pattern Scan a dom… Show in context →Publisher keywords · listing security typosquatting lookalike-domains certificate-transparency brand-protection takedowns threat-intelligence mcp Show in context →Publisher description Analyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to its connected tools, and manage its domains, rules and takedow… Show in context → |
SecurityVersion 1.1.2 | View details → |
VIDOC Security ReviewVidoc Security Lab Publisher full description VIDOC Security Review brings security code review workflows from Vidoc Security Lab to ChatGPT and Codex. For developers and application security teams, its three defined skills review supplied code or diffs, validate suspected vulnerabilities, and prepare reports with evidence, impact, and proposed fixes. Findings distingu… Show in context →3 more matching sourcesPublisher description VIDOC Security Review by Vidoc Security Lab: review source code for security issues, validate suspected findings, and prepare reports with supporting evidence using three defined skills. Show in context →Publisher capabilities · listing Security code review Finding validation Review reporting Show in context → |
SecurityVersion 0.1.1 | View details → |
Catalog results: live query. The homepage cache is not used for this view.