COMPETITOR MONITORING FOR PLUGIN DEVELOPERS

Security Codex plugins

Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.

Explore 12,254 plugins across 14 categories.

Selected:cti ×Security ×

Follow up to 3 plugins for free. Newest means first added to our catalog, not the publisher’s release date.

Security plugins 43

Plugin growth →

1–36 of 43 Export this page ↓

All words must match. Use quotes for an exact phrase.

Compare plugins by developer and category
Plugin / developer	Category	Follow
Prompt Injection SecurityThe Doers FirmAssess prompt injection exposure in prompts, AI workflows, retrieved content, and tool designs with evidence-based findings and mitigations. Plugin name Prompt Injection Security Show in context → 4 more matching sources Package name injection-checker Show in context → Publisher subtitle Assess prompt injection risks Show in context → Publisher description Assess prompt injection exposure in prompts, AI workflows, retrieved content, and tool designs with evidence-based findings and mitigations. Show in context → Publisher full description …rompts, AI application designs, retrieved documents, web content, and tool workflows for prompt-injection risks. Get evidence-linked attack-path analysis, calibrated severity and confidence, layered mitigations, and safe regression tests. Results are advisory and cannot guarantee prevention. Custome… Show in context →	SecurityVersion 0.1.0	View details →
Atbash SafetyAtbash AISet up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy. Publisher subtitle Check actions with Atbash Show in context → 2 more matching sources Publisher description Set up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy. Show in context → Publisher full description Connect an Atbash agent, manage its name, purpose, risk, or active state with browser approval, and check explicitly submitted actions against Atbash safety policies. The desktop helper keeps agent private keys in local configuration and uses them locally for s… Show in context →	SecurityVersion 0.3.4	View details →
Neura Relay MCPRoman PelevinNeura Relay MCP helps ChatGPT-connected workflows review proposed agent actions before execution. It returns Decision Receipts, trace ref... Publisher subtitle Govern agent actions Show in context → 1 more matching sources Publisher description Neura Relay MCP helps ChatGPT-connected workflows review proposed agent actions before execution. It returns Decision Receipts, trace refs, and Registry context without executing downstream actions or exposing private payloads. Show in context →	SecurityVersion 1.0.0	View details →
AgentGuardsAgentGuardsSecurity scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell comman... Publisher capabilities · listing Scan text for prompt injection and jailbreaks Detect leaked secrets and personal data Check shell commands before running them Scan code for vulnerabilities and secrets Show in context → 3 more matching sources Publisher keywords · listing security prompt-injection jailbreak secrets guardrails Show in context → Publisher description Security scans for AI agents: check untrusted text for prompt injection, jailbreaks, leaked secrets and personal data; check shell commands before running them; scan code for vulnerabilities and hardcoded secrets. Show in context → Publisher full description …n. - Scan untrusted text (web pages, emails, documents, issues, other tools' output) for prompt injection, jailbreak attempts, leaked secrets and personal data before acting on it. - Check a shell command before running it: destructive deletes, credential reads, data exfiltration, force pushes and i… Show in context →	SecurityVersion 1.0.4	View details →
Authorized Security ReviewIssam ChaabanEvidence-based security reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools. Publisher capabilities · listing Read Write Interactive Show in context → 1 more matching sources Publisher full description …pendent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend. Show in context →	SecurityVersion 1.0.1	View details →
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Publisher capabilities · listing Interactive Read Write Show in context →	SecurityVersion 0.1.32	View details →
Codex Security CloudOpenAICloud security scans, findings, and continuous repository monitoring. Publisher capabilities · listing Interactive Read Write Show in context →	SecurityVersion 0.1.1	View details →
CVE Risk CheckAgent ToolsTriage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole d... Publisher capabilities · listing …ether the CISA Known Exploited Vulnerabilities catalog lists a CVE, with its due date and required action Adds the EPSS score: the modelled chance of exploitation in the next 30 days Gives each CVE a priority: exploited, likely or routine Ranks a batch of up to 10 CVEs with the most urgent first Rea… Show in context → 1 more matching sources Publisher full description …ISA Known Exploited Vulnerabilities (KEV) catalog lists the CVE, with CISA's due date and required action. FIRST's EPSS gives the modelled probability that the CVE is exploited in the next 30 days. Each CVE gets a priority: "exploited" when CISA lists it, "likely" when its EPSS score is 0.1 or more,… Show in context →	SecurityVersion 1.2.0	View details →
Fraud BlockerFraud BlockerVerify email addresses using Fraud Blocker's authenticated email verification service. Publisher capabilities · listing Interactive Show in context → 1 more matching sources Publisher full description …were found. - Address Insights: Identify free-email providers and review suggested address corrections when available. - Clear Verification Results: Ask ChatGPT to explain Fraud Blocker's verification response in plain language. - Account Usage: View the connected Fraud Blocker account's… Show in context →	SecurityVersion 1.0.0	View details →
GuardioGuardioCheck suspicious links, review known data leaks, and understand your Guardio protection. Publisher capabilities · listing …suspicious links Check links in messages Look up known email and phone breaches Review account protection and scan activity Review security recommendations Set up browser protection Send requested product feedback Show in context → 2 more matching sources Publisher description Check suspicious links, review known data leaks, and understand your Guardio protection. Show in context → Publisher full description Guardio helps you check suspicious links and understand your online protection from ChatGPT and Codex. Check a website before opening it, or check links extracted from a suspicious message without sending the message body to Guardio. Connect your Guardio account to review… Show in context →	SecurityVersion 0.2.2	View details →
Have I Been SquattedHave I Been SquattedAnalyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to... Publisher capabilities · listing …registered defensively Query your organization's lookalike, Email Intelligence and Site Canary detections from the last 30 days Review and triage the alerts your detection rules raised, and check where each response was delivered Tag results as owned, ignored, false positive or malicious (organizat… Show in context → 3 more matching sources Publisher keywords · listing security typosquatting lookalike-domains certificate-transparency brand-protection takedowns threat-intelligence mcp Show in context → Publisher description …nalyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to its connected tools, and manage its domains, rules and takedowns. Show in context → Publisher full description …sts and their certificates often appear before a phishing campaign launches. This plugin brings detection, investigation and response for them into ChatGPT and Codex. Enrich and hunt, for any domain - Analyze: live DNS, mail, registration, hosting, HTTP and classification for one domain, with a verd… Show in context →	SecurityVersion 1.1.2	View details →
Is This AI Agent Safe?Greenlit BooksAsk whether an AI agent, MCP server or coding tool is safe to use and get a dated verdict from Greenlit Books, with the setup steps that ... Publisher capabilities · listing …s about AI agents from the books' free chapters and concepts, with a link to the passage Finds a practical book on an AI topic and links its free first chapter Show in context → 2 more matching sources Publisher description …cepts, with links to the passages, checks statements against a sourced claim ledger, and finds a practical book on a topic. Read-only, no sign-in. Show in context → Publisher full description …the glossary and the claim ledger that bears on your question, quotes it with a link to the exact section, and points you to the page where the rest of the topic is. And when you want to go deeper, it finds the right practical book on working with AI, with a free first chapter to read. Read-only. No… Show in context →	SecurityVersion 1.0.2	View details →
LeakData.ioLeakdata.ioUnderstand a data breach and choose your next steps. Look up a company or website to see known breaches, the types of data exposed, and ... Publisher capabilities · listing …ta breaches Browse recent breaches Check your verified email Review monitoring results Follow your action plan Understand company monitoring Show in context → 1 more matching sources Publisher description …r next steps. Look up a company or website to see known breaches, the types of data exposed, and practical first steps. Browse recent breaches in LeakData's public catalog without connecting an account. Connect your LeakData account to check its verified email address, review existing monitoring res… Show in context →	SecurityVersion 1.4.0	View details →
MCP PrecheckPolicyLayerCheck MCP servers against the PolicyLayer registry before connecting to them. Publisher capabilities · listing Interactive Show in context → 1 more matching sources Publisher description Check MCP servers against the PolicyLayer registry before connecting to them. Show in context →	SecurityVersion 1.0.0	View details →
OSINT Exposure RadarKöksal KayalıReview an organization’s public exposure through authorized, passive sources. Publisher capabilities · listing Interactive Show in context → 1 more matching sources Publisher full description …public exposure through authorized, passive sources. Intended for security, compliance and risk practitioners. It preserves uncertainty and does not replace professional review, an audit, or legal advice. Show in context →	SecurityVersion 0.1.0	View details →
PasskeyBridgePasskeyBridge LLCRead-only access to your PasskeyBridge organization's identity signals, audit events, alerts, posture findings, passkey coverage and pend... Publisher capabilities · listing Summarize identity signals over a time window List audit events, including failed or denied actions List fired alerts and find the ones not yet acknowledged Review identity-provider posture findings with remediation guidance Report organization-level passkey coverage List account-recovery req… Show in context → 1 more matching sources Publisher full description …nization's PasskeyBridge security data. It cannot change anything: all 10 tools are read-only. Connecting: an administrator of your PasskeyBridge organization signs in and approves the connection on PasskeyBridge's consent page. The page shows the client's name, the host it returns to and what it ma… Show in context →	SecurityVersion 1.0.0	View details →
PersProtectNexpanseCheck known email breaches and read your existing PersProtect account’s protection and removal progress. Publisher capabilities · listing Interactive Show in context → 2 more matching sources Publisher description Check known email breaches and read your existing PersProtect account’s protection and removal progress. Show in context → Publisher full description …rs in known data breaches, see the affected services and exposed data categories, and understand practical next steps. The email check is free and does not require a PersProtect account. Customers with an active subscription or active trial can connect their own account to read their protection summ… Show in context →	SecurityVersion 0.1.7	View details →
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Publisher capabilities · listing Scan local skills and plugins before install Find risky instructions, permissions, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the target Show in context → 2 more matching sources Publisher keywords · listing plugin-security agent-skills pre-install-scan prompt-injection supply-chain sarif codex claude-code Show in context → Publisher full description …his before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findings with file-and-line evidence and remediation. Do not use it as a s… Show in context →	SecurityVersion 0.1.5	View details →
Awesome Maintainer DefenseDUC THANG LUURead-only repository governance and GitHub Actions risk audits with reviewable patches. Publisher keywords · listing github-actions repository-security governance maintainers audit Show in context → 2 more matching sources Publisher description Read-only repository governance and GitHub Actions risk audits with reviewable patches. Show in context → Publisher full description Inspect repository policy, GitHub Actions trust boundaries, and moderation automation without network access or repository mutation; generate reviewable remediation patches on request. Show in context →	SecurityVersion 1.1.1	View details →
Diopter AIDiopter AI IncCheck whether an image, video, or audio clip was generated or manipulated by AI. Publisher keywords · listing deepfake ai detection voice cloning image forensics security Show in context → 1 more matching sources Publisher full description …by AI. Upload a file in chat or share a link, and Diopter runs it through its trained deepfake detection models, then returns a verdict (for example: no AI detected, AI-generated, or inconclusive) with a confidence level and a link to the full report on diopter.ai. Use it to sanity-check a suspicio… Show in context →	SecurityVersion 1.0.0	View details →
EtugenEtugenInvestigate malicious infrastructure, threat indicators, WHOIS records and ATT&CK techniques with Etugen. Publisher keywords · listing threat intelligence threat hunting cti ioc enrichment c2 malware infrastructure whois mitre att&ck soc Show in context → 1 more matching sources Publisher full description …ork, country or port, check who registered a domain, or see which ATT&CK techniques have been most active lately. It's made for people who triage alerts, enrich indicators or write up investigations. Access is read-only and follows your Etugen plan. If we have no record of something, that means we h… Show in context →	SecurityVersion 1.0.0	View details →
nebtynebty GmbHnebty is the early warning system against brand impersonation. See the lookalike domains, phishing sites, fake profiles and scam ads targ... Publisher keywords · listing brand-protection security monitoring Show in context → 2 more matching sources Publisher full description …s taken down with registrars, hosting providers and platforms. With this connector, your brand protection is one question away. Ask which lookalike domains pose the highest risk right now, which fake Instagram, Facebook or LinkedIn profiles and Meta ads were found, and how your takedowns are progres… Show in context → Publisher translations · package …hungen bei Registraren, Hostern und Plattformen entfernen. Mit diesem Connector ist Ihre Brand Protection nur eine Frage entfernt. Fragen Sie, welche Lookalike-Domains gerade das höchste Risiko haben, welche gefälschten Instagram-, Facebook- oder LinkedIn-Profile und Meta-Anzeigen gefunden wurden un… Show in context →	SecurityVersion 0.2.0	View details →
ScreenataScreenataScreenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 4... Publisher keywords · listing …audit soc-2 iso-27001 iso-42001 audit-readiness compliance-tools security-assessment evidence-collection policy-drafting cloud-security startups Show in context → 1 more matching sources Publisher full description …inks to review controls, tests, policies, risks and evidence. After signing in to Screenata and selecting a workspace, assess selected cloud accounts, identity services, code repositories and a local repository. New users create their account in the browser. Cloud checks run on Screenata servers wit… Show in context →	SecurityVersion 0.1.2	View details →
AJAXX Data ScrubberFORTRESS APPS LLC Publisher description …s online, how removal services work, and answers common questions about scans, monitoring, and protection options. This ChatGPT app does not run scans, show personal scan results, perform removals, or manage accounts. For secure account access, scans, removals, billing, or support, users are directe… Show in context →	SecurityVersion 1.0.0	View details →
AnomityAnomity Publisher full description …ity team every AI tool running on its managed devices: coding agents, MCP servers, skills and instruction files, browser AI use, personal versus corporate AI accounts, and the credentials those tools can reach. Sensors deployed through your device management report that inventory to the Anomity cons… Show in context →	SecurityVersion 0.1.0	View details →
AttackerViewAttackerView Publisher full description …nds. AttackerView checks a domain's security headers and Content Security Policy, clickjacking protection, the HTTP to HTTPS redirect, TLS configuration, DNS, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and… Show in context →	SecurityVersion 1.0.1	View details →
BlindOracle Agent TrustCraig M. Brown Publisher full description …/.well-known/did.json. The prove-a-delegation skill explains the steps. Creating a chain is a paid action that happens over MCP at https://api.craigmbrown.com/v1/mcp, not in this plugin; the plugin itself stays read-only. A chain proves who paid and what each side presented. It does not prove either… Show in context →	SecurityVersion 1.2.0	View details →
CIMTKAG Cyber Ltd Publisher description …gement Toolkit assistants: exec briefings, public statements, retainer and focus group simulations, CTI coaching, supply chain incident navigation and tabletop exercise design. Show in context → 1 more matching sources Publisher full description CIMTK helps cyber incident managers and response leaders manage active incidents. It provides guided workflows for executive briefings, public communications, incident-response advisory reviews, threat-intelligence requirements, supply-chain incidents, staff-messag… Show in context →	SecurityVersion 1.0.5	View details →
CookieYesCookieYes Limited Publisher description …kie banner in seconds. Typical requests: "Audit my site for GDPR compliance", "Is my cookie banner active?", "Run a cookie scan and show me what you find", "Check my CCPA opt-out setup". CookieYes supports GDPR, CCPA/CPRA, US state privacy laws, and Google Consent Mode v2. That means opt-in cookie c… Show in context →	SecurityVersion 1.0.0	View details →
CustodisDIGISCAN LLC Publisher full description …back. Check the entire document, hide anything missed, and approve the exact text before Send. Detection and reading can miss details. Copy is also available. Paste the reply into the same open Custodis workspace to restore the details. Keep it open until you have copied your answer: closing or cle… Show in context →	SecurityVersion 0.6.1	View details →
DecionisBinaries Publisher description Decionis is an execution-authority layer for AI agents. Before an agent takes a consequential action, Decionis evaluates the proposed action against organization policy and determines whether it may proceed, must be held, or requires additional authority. When human approval is required, Decion… Show in context →	SecurityVersion 1.0.1	View details →
Frame Security ScanFrame (lambdasec) Publisher full description …Frame README, with caveats. A clean scan is not proof that code is safe. This plugin contains instructions only; the Frame tool runs on your own machine. Show in context →	SecurityVersion 0.1.2	View details →
Jacana Scam CheckJacana, Inc. Publisher description …e is legit? Jacana Scam Check analyzes suspicious texts, emails, and DMs to identify common fraud tactics. Paste the message and get a clear risk assessment with specific red flags and recommended next steps. You can also check a website, phone number, or email address before you trust it. Helps pro… Show in context →	SecurityVersion 2.0.1	View details →
PrevidianPrevidian Publisher description Early warning when vulnerabilities move into active exploitation, for a connected Enterprise account. Show in context → 1 more matching sources Publisher full description Previdian gives security teams early warning when vulnerabilities move into active exploitation. After you allow access, ChatGPT and Codex read the connected Enterprise account. They can look up vulnerability records, review honeypot attempts, check attacker infrastructure, an… Show in context →	SecurityVersion 1.0.0	View details →
ProofXCyberSec AI Ltd Publisher description …tent is registered with ProofX using a content ID or hash - Look up creator profiles and their protection history - Get digital fingerprints of your content How it works: 1. Connect your ProofX account (free signup at proofx.co.uk) 2. Ask ChatGPT to protect your content 3. Get a verification link an… Show in context →	SecurityVersion 1.0.0	View details →
RelayShield Scam ChecksRelayShield Publisher description …or reply. Four read-only tools: check a URL for phishing and malware, screen a crypto wallet for sanctions and scam flags, score a suspicious email for phishing signals, and look up whether an email appears in known data breaches. Free, no signup, no API key. Verdicts are FLAGGED or unknown — the to… Show in context →	SecurityVersion 1.0.0	View details →

Catalog results: live query. The homepage cache is not used for this view.