MARKET RESEARCH

Security Codex plugins

Codex Plugin Stats: discover plugins, explore their skills and track catalog growth and observed changes.

Explore 5,331 plugins across 14 categories.

Security plugins 21

1–21 of 21

All query words must match. Use quotes for an exact phrase. Matches include publisher text, keywords and attributed research.

Discover Codex plugins by task and category
Plugin / developer	Category	Follow
Ansvar GatewayAnsvar AIAnsvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. C... Publisher subtitle Laws, Security and Compliance Show in context → 1 more matching sources Publisher description Ansvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. Customers connect the AI assistant they already use (Claude, Microsoft Copilot, ChatGPT or any MCP-compatible client) to the Ansvar Gateway and… Show in context →	SecurityVersion 1.0.0	View details →
BastionBastion TechnologiesConnect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance statu... Publisher subtitle Manage security and compliance Show in context → 1 more matching sources Publisher description Connect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance status across SOC 2, ISO 27001, HIPAA, and GDPR. Drill into failing tests, upload evidence, and submit controls for review. Ask… Show in context →	SecurityVersion 1.0.0	View details →
Atbash SafetyAtbash AIAutomatically guards supported Codex tool calls with Atbash safety judgments and provides secure local setup guidance. Publisher capabilities · listing Safety policy enforcement Local credential setup Show in context →	SecurityVersion 0.3.3	View details →
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex. Publisher capabilities · listing Security Remediation Investigation Application Security Agentic Workflows Agentic Remediation Agentic AppSec Show in context → 1 more matching sources Publisher full description Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more. Show in context →	SecurityVersion 2.2.2	View details →
NightVisionNightVision Security, Inc.NightVision application security workflows for local development and CI/CD. Publisher capabilities · listing API discovery DAST scan configuration CI/CD security guidance Finding triage Show in context → 1 more matching sources Publisher full description Guide NightVision API discovery, DAST scan configuration, CI/CD integration, and security-finding triage using the local NightVision CLI. Show in context →	SecurityVersion 0.2.0	View details →
SkarnSkarn Software OÜAudit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, r... Publisher capabilities · listing Scan AI coding sessions for leaked credentials Vet assistant hooks, MCP servers and permission grants Show in context → 3 more matching sources Publisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context → Publisher description Audit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context → Publisher full description …ession transcripts that AI coding assistants have already written to disk and reports leaked credentials, prompt injection, exfiltration attempts, and the chains that connect them; each finding carries the standards mappings that apply to it, drawn from MITRE ATLAS, the OWASP Top 10 for LLM Applicat… Show in context →	SecurityVersion 0.27.0	View details →
Skill Risk CheckOrbralScan agent skills and plugins locally for reviewable risk patterns before installation. Publisher capabilities · listing …re install Find risky instructions, permissions, and downloads Show file-and-line evidence and remediation Export JSON, Markdown, and SARIF Never run or upload the target Show in context → 1 more matching sources Publisher full description …ns, and possible secret exposure, then returns ranked findings with file-and-line evidence and remediation. Do not use it as a safety certification; it never runs, installs, enables, or uploads the target. Show in context →	SecurityVersion 0.1.5	View details →
Above SecurityAbove Security Publisher description …red applications, and audit logs; and run investigative searches across your tenant. You can also triage from chat — set incident status, verdict, and resolution notes, or add an identity to the watch list. Access requires an Above Security account and is scoped to your role and company; read and wr… Show in context →	SecurityVersion 1.0.0	View details →
AJAXX Data ScrubberFORTRESS APPS LLC Publisher description …ts. For secure account access, scans, removals, billing, or support, users are directed to the official AJAXX website. Show in context →	SecurityVersion 1.0.0	View details →
Authorised OSINT ToolkitRobert Lane Publisher full description …dence-led reporting. The replacement planning, identity and exposure-analysis skills exclude credentials, account enumeration, authentication testing, exploitation, access-control bypass and surveillance. Show in context →	SecurityVersion 1.1.0	View details →
Awesome Maintainer DefenseDUC THANG LUU Publisher full description …, and moderation automation without network access or repository mutation; generate reviewable remediation patches on request. Show in context →	SecurityVersion 1.1.1	View details →
CertScore.ai Privacy ScannerCertScore.ai, LLC Publisher description …explicit coverage limitations for human review; they are not legal advice, certification, or a compliance determination. Show in context →	SecurityVersion 2.0.0	View details →
CookieYesCookieYes Limited Publisher description Manage cookie consent and compliance without leaving ChatGPT. Privacy laws like GDPR and CCPA require websites to get visitor consent before using cookies. CookieYes is the consent management platform (CMP) that handles this for 1.… Show in context →	SecurityVersion 1.0.0	View details →
DecionisBinaries Publisher description Decionis is an execution-authority layer for AI agents. Before an agent takes a consequential action, Decionis evaluates the proposed action against organization policy and determines whether it may proceed, must be held, or requires additional authority. When human approval is required, D… Show in context →	SecurityVersion 1.0.1	View details →
MalwarebytesMalwarebytes Inc. Publisher description …nership details, and risk levels for unknown numbers, suspicious emails, shortened URLs, and unfamiliar links - right inside ChatGPT. Show in context →	SecurityVersion 1.0.0	View details →
Orca SecurityOrca Security Publisher description …the prompts, Orca maintains the AI Skills Hub, an open-source GitHub repo of agent skills. Type "triage alert orca-9012345" and the orca-alert-triage skill handles retrieval, analysis, and formatting. Teams can fork it, modify it, and extend it to their own use cases. The result: security and engin… Show in context →	SecurityVersion 1.0.0	View details →
PalisadeSamuel Chenard Publisher description …tored domains, DMARC pass rates and sending sources, inspect DNS and SPF records, and retrieve remediation tasks with supporting evidence. Use the results to prioritize fixes and prepare DNS change plans. This plugin provides read-only access to your Palisade account: it does not publish DNS records… Show in context →	SecurityVersion 1.0.0	View details →
ProofXCyberSec AI Ltd Publisher description …prove you created it Used by 300+ creators including photographers, writers, journalists, and musicians. Show in context →	SecurityVersion 1.0.0	View details →
Radar LiteRed Sift Publisher description …alizes security scores on a radar chart, and generates a summary with prioritized findings and remediation guidance. Try prompts like: - Radar Lite Evaluate the DNS security of example.com - Radar Lite Compare the DMARC configuration of domain1.com to domain2.com - Radar Lite Give me an assessment o… Show in context →	SecurityVersion 2.0.0	View details →
SafeguardSafeguard Publisher description …atGPT, including vulnerabilities, SBOMs, findings, projects, components, policies, guardrails, compliance reports, remediation plans, SCM integrations, notifications, and organization workflows. Show in context →	SecurityVersion 1.0.0	View details →
Vibe Code Security ReviewerThe Doers Firm Publisher full description …AI tools, deployment configuration, and abuse paths, then prioritizes findings with practical remediation and verification steps. Show in context →	SecurityVersion 0.1.0	View details →