Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 12,705 plugins across 14 categories.
Follow up to 3 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 5
Plugin growth →All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
CVE Risk CheckAgent Tools Publisher full description Triage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what ve… …er the CISA Known Exploited Vulnerabilities (KEV) catalog lists the CVE, with CISA's due date and required action. FIRST's EPSS gives the modelled probability that the CVE is exploited in the next 30 days. Each CVE gets a priority: "exploited" when CISA lists it, "likely" when its EPSS score is 0.1… …lowed by a short list of the rest. A match is by exact name and version: it does not show that your code reaches the vulnerable code. It does not scan your systems, read your source code, confirm that you are vulnerable, or tell you how to exploit anything. The CVE ids and dependency lists you send… Show in context →3 more matching sourcesPublisher capabilities · listing …Shows whether the CISA Known Exploited Vulnerabilities catalog lists a CVE, with its due date and required action Adds the EPSS score: the modelled chance of exploitation in the next 30 days Gives each CVE a priority: exploited, likely or routine Ranks a batch of up to 10 CVEs with the most urgent f… Show in context →Publisher description Triage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole dependency list (which 3 packages to upgrade first, and to what ve… Show in context → |
SecurityVersion 1.2.0 | View details → |
OneleetOneleet Publisher full description Oneleet is a security and compliance platform that runs SOC 2, ISO 27001 and other compliance programs alongside penetration testing, attack surface monitoring, code security and device management. The Oneleet plugin connects ChatGPT and Codex to your Oneleet workspace so you can review and work on your security program in conversation. What you can do: - Com… …d controls that are failing or not started, read the checks behind a control, and track framework requirements, audit readiness and your compliance journey. - Monitoring: review automated monitors and the assets failing them, rerun a monitor, or snooze one with a reason. - Evidence and policies: lis… Show in context →4 more matching sourcesPublisher capabilities · listing Review compliance controls and checks Track monitors and failing assets Review evidence and policies Manage risks and vendor assessments Run access reviews Review security findings Manage trust center requests Show in context →Publisher keywords · listing security compliance soc 2 iso 27001 audit vendor risk grc Show in context →Publisher description Work with your Oneleet security and compliance workspace: controls, monitors, evidence, policies, risks, vendors, access reviews, devices, security findings and trust center. Show in context → |
SecurityVersion 1.0.0 | View details → |
AgentGuardsAgentGuards Publisher full description …al data before acting on it. - Check a shell command before running it: destructive deletes, credential reads, data exfiltration, force pushes and infrastructure changes are flagged with a risk level and a reason. - Scan source code for security issues and hardcoded secrets before committing or running it. Who it's for: developers using ChatGPT or Codex with untrusted inputs or shell access. Requires an AgentGuards account (you sign in when you connect). Scan results also appear in your AgentGuards dashboard. Limitations: the tools scan only what they are given, when they are called. They d… Show in context →2 more matching sourcesPublisher capabilities · listing …nd jailbreaks Detect leaked secrets and personal data Check shell commands before running them Scan code for vulnerabilities and secrets Show in context →Publisher description …ction, jailbreaks, leaked secrets and personal data; check shell commands before running them; scan code for vulnerabilities and hardcoded secrets. Show in context → |
SecurityVersion 1.0.4 | View details → |
Have I Been SquattedHave I Been Squatted Publisher full description …mpaign launches. This plugin brings detection, investigation and response for them into ChatGPT and Codex. Enrich and hunt, for any domain - Analyze: live DNS, mail, registration, hosting, HTTP and classification for one domain, with a verdict profile and an interactive view with a screenshot and ho… …pattern, such as lookalike spellings of your brand, with the last time each was seen. Answers immediately. - Typosquat scan: generate permutations of a domain and check which are registered or live, ranked by evidence. Typically 5 to 10 minutes. - Discover: find unregistered lookalikes of a domain… …lerts on lookalikes of example.com within one character that ask visitors for a password." Access requirements - Requires a Have I Been Squatted account. You sign in with OAuth and choose which organization to connect; every call is scoped to that organization and to your role in it. - Lookups work… Show in context →2 more matching sourcesPublisher capabilities · listing …ation's lookalike, Email Intelligence and Site Canary detections from the last 30 days Review and triage the alerts your detection rules raised, and check where each response was delivered Tag results as owned, ignored, false positive or malicious (organization admins) Create, test, update, toggle a… Show in context →Publisher description Analyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to its connected tools, and manage its domains, rules and takedowns. Show in context → |
SecurityVersion 1.1.2 | View details → |
ScreenataScreenata Publisher description Screenata helps startup founders and CTOs manage security compliance and prepare for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001 audits. Assess infrastructure, investigate failing compliance checks, review proposed fixes, verify results, draft security policies from recorded answers, collect evidence and track audit-cycle readiness. Assessments require Screenata sign-in and a selected workspace; new users create their account in the browser. Show in context →3 more matching sourcesPublisher full description Screenata manages security compliance and audit preparation for startups. Track audit-cycle readiness for SOC 2 Type I and Type II, HIPAA, ISO 27001 and ISO 42001, investigate failing security checks and collect evidence linked to t… …gning in to Screenata and selecting a workspace, assess selected cloud accounts, identity services, code repositories and a local repository. New users create their account in the browser. Cloud checks run on Screenata servers with account-specific consent; provider credentials stay out of chat and… Show in context →Publisher capabilities · listing Review audit readiness Investigate compliance failures Draft security policies Collect evidence Verify approved fixes Show in context →Publisher keywords · listing compliance soc2 hipaa iso27001 iso42001 grc audit soc-2 iso-27001 iso-42001 audit-readiness compliance-tools security-assessment evidence-collection policy-drafting cloud-security startups Show in context → |
SecurityVersion 0.1.2 | View details → |
Catalog results: live query. The homepage cache is not used for this view.