Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 11,372 plugins across 14 categories.
Follow up to 10 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 15
1–15 of 15All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
Authorized Security ReviewIssam Chaaban Publisher full description An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend. Show in context →6 more matching sourcesPublisher description Evidence-based security reviews and HackerOne report drafts for explicitly authorized programs, using existing connected tools. Show in context → |
SecurityVersion 1.0.1 | View details → |
Cloudflare SecurityThe Doers Firm Publisher full description Cloudflare Security reviews Cloudflare account configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produc… …evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security. Show in context →4 more matching sourcesPublisher description Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Show in context → |
SecurityVersion 0.1.1 | View details → |
Prompt Injection SecurityThe Doers Firm Publisher full description …ool workflows for prompt-injection risks. Get evidence-linked attack-path analysis, calibrated severity and confidence, layered mitigations, and safe regression tests. Results are advisory and cannot guarantee prevention. Customer support: https://thedoersfirm.com/support. Show in context →3 more matching sourcesPublisher description Assess prompt injection exposure in prompts, AI workflows, retrieved content, and tool designs with evidence-based findings and mitigations. Show in context → |
SecurityVersion 0.1.0 | View details → |
Security Advisory Scoutaleff-github Publisher full description Investigate CVE, GHSA, and OSV security advisories using source evidence from NVD and OSV, FIRST EPSS exploitation probability, and CISA KEV known-exploitation information. Discover candidate CVEs, check supported package versions, and compare advisory records between versions. Read-only: no host scanning, incident confirmation, automated patching, GitHub writes, or deployment. Findings include eviden… Show in context →5 more matching sourcesPublisher description Evidence-first security advisory triage with NVD, OSV, FIRST EPSS, and CISA KEV. Show in context → |
SecurityVersion 0.1.1 | View details → |
VIDOC Security ReviewVidoc Security Lab Publisher description VIDOC Security Review by Vidoc Security Lab: review source code for security issues, validate suspected findings, and prepare reports with supporting evidence using three defined skills. Show in context →7 more matching sourcesPublisher full description VIDOC Security Review brings security code review workflows from Vidoc Security Lab to ChatGPT and Codex. For developers and application security teams, its three defined skills review supplied code or diffs, va… …ulnerabilities, and prepare reports with evidence, impact, and proposed fixes. Findings distinguish supported issues from concerns that need more context. Reviews use supplied code and the host's existing read-only access. This skills-only plugin does not connect to the VIDOC platform, provide a rep… Show in context →Publisher capabilities · listing Security code review Finding validation Review reporting Show in context → |
SecurityVersion 0.1.1 | View details → |
PalisadeSamuel Chenard Publisher description Palisade helps email teams investigate SPF, DKIM, DMARC, and MTA-STS issues. Review monitored domains, DMARC pass rates and sending sources, inspect DNS and SPF records, and retrieve remediation tasks with supporting evidence. Use the results to prioritize fixes and prepare DNS change plans. This plugin provides read-only access to your Palisade account: it does not publish DNS records, modify domains,… Show in context →1 more matching sources |
SecurityVersion 1.0.0 | View details → |
RegSentrySoxoa LLC Publisher description Inspect static tracking signals on an authorized public website, observe bounded browser behavior before consent and after supported reject-all or accept-all controls, compare dated observations, and export a plain-text evidence report. Incomplete phases stay unresolved. Results describe observed request attempts and supp… Show in context →1 more matching sources |
SecurityVersion 1.2.1 | View details → |
SkarnSkarn Software OÜ Publisher full description Skarn is a command-line security scanner for AI coding sessions. The audit skill, skarn-audit, teaches the model to run the skarn CLI on this machine and act on what it reports. The skill runs two passes. skarn assess reads the s… …at https://github.com/skarn-security/agent-guard. Documentation: https://getskarn.com/integrations/ Support: hello@getskarn.com Show in context →3 more matching sourcesPublisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context →Publisher description Audit AI coding sessions and assistant configs with the locally installed skarn CLI: leaked credentials and risky hooks or MCP servers, reported on this machine with every secret masked. Show in context → |
SecurityVersion 0.27.0 | View details → |
CustodisDIGISCAN LLC Publisher full description Use Custodis Token mode in three steps: Add document, Check & share, Use answer. It automatically replaces detected private details with tokens on your device. Review the exact text, approve it, then send it to ChatGPT. Paste the reply into the same open workspace to restore the r… …-8 .txt file, or paste text, inside Custodis. Direct JPEG/PNG uploads and legacy .doc files are not supported. The Custodis engine reads it on your device, including on-device OCR for scanned PDF pages, and replaces the hidden names, numbers and contact details with consistent tokens while keeping t… Show in context →2 more matching sourcesPublisher capabilities · listing On-device tokenization before sharing On-device reading of scanned PDF pages Page review with redaction boxes Protected-text review Exact-text review and approval Local answer restoration Compact Token replacements Local-only original reveal Explicit occurrence choices Show in context →Publisher description Custodis tokenizes sensitive details locally on your device before you share with ChatGPT, then restores the real details on your device. Show in context → |
SecurityVersion 0.5.6 | View details → |
GuardioGuardio Publisher full description …ou check suspicious links and understand your online protection from ChatGPT and Codex. Check a website before opening it, or check links extracted from a suspicious message without sending the message body to Guardio. Connect your Guardio account to review protection setup, scan activity, recent da… …; they do not reveal leaked passwords. When you ask, Guardio can guide setup of its protection in a supported browser and receive your feedback about these tools. Setup depends on browser support and available permissions. Account features depend on your access and plan. Guardio records each link ch… Show in context →1 more matching sourcesPublisher capabilities · listing …ck links in messages Look up known email and phone breaches Review account protection and scan activity Review security recommendations Set up browser protection Send requested product feedback Show in context → |
SecurityVersion 0.2.2 | View details → |
LeakData.ioLeakdata.io Publisher description Understand a data breach and choose your next steps. Look up a company or website to see known breaches, the types of data exposed, and practical first steps. Browse recent breaches in LeakData's public catalog without connecting an account. Connect your LeakData account to che… …a. You can ask questions in your preferred language. Cards follow ChatGPT's interface language when supported, with English as the fallback. Show in context →1 more matching sourcesPublisher capabilities · listing Look up data breaches Browse recent breaches Check your verified email Review monitoring results Follow your action plan Understand company monitoring Show in context → |
SecurityVersion 1.4.0 | View details → |
CookieYesCookieYes Limited Publisher description Manage cookie consent and compliance without leaving ChatGPT. Privacy laws like GDPR and CCPA require websites to get visitor consent before using cookies. CookieYes is the consent management platform (CMP) that handles this for 1.5M+ web… …r active?", "Run a cookie scan and show me what you find", "Check my CCPA opt-out setup". CookieYes supports GDPR, CCPA/CPRA, US state privacy laws, and Google Consent Mode v2. That means opt-in cookie consent for European laws, and opt-out with "Do Not Sell or Share" for US ones. Built for privacy… Show in context →1 more matching sources |
SecurityVersion 1.0.0 | View details → |
AJAXX Data ScrubberFORTRESS APPS LLC Publisher description AJAXX Data Scrubber in ChatGPT provides read-only information about digital privacy risks and data broker exposure. It explains how personal data appears online, how removal services work, and answers common questions about scans, monitoring, and protection options. This… …ults, perform removals, or manage accounts. For secure account access, scans, removals, billing, or support, users are directed to the official AJAXX website. Show in context → |
SecurityVersion 1.0.0 | View details → |
DrataDrata Inc. Publisher description Use natural language to work with your Drata governance, risk, and compliance data. Search and list controls, policies, evidence, risks, vendors, personnel, devices, and monitoring tests. Create and update supported records where your Drata permissions and granted OAuth scopes allow. Connect your Drata account with OAuth. Access is limited by your Drata role and granted scopes. Show in context → |
SecurityVersion 1.0.0 | View details → |
PrivacyHawkPrivacyHawk, Inc Publisher full description Use PrivacyHawk with ChatGPT to Take Control of Your Personal Data -- Manage, control, and delete your data from thousands of businesses exploiting your personal information. PrivacyHawk helps you reduce your digital… …l" requests to thousands of businesses. - Unsubscribe from spam emails and clean up your inbox. Now supporting Gmail, Yahoo, and Microsoft accounts—including Hotmail, MSN, Live, and Outlook. - Use advanced data broker tools to opt out of data brokers and protect your personal information. - Protect… Show in context →1 more matching sourcesPublisher description …l, and delete your personal data from thousands of businesses. PrivacyHawk helps you reduce your digital footprint, decrease spam, and protect yourself from identity theft, scams, and hacks. Show in context → |
SecurityVersion 1.0.3 | View details → |