Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 11,121 plugins across 14 categories.
Follow up to 10 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 7
1–7 of 7All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
Tahr SecurityTahr Security Inc Publisher description Evidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Show in context →3 more matching sourcesPublisher full description Review applications with an evidence-first security workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes. Show in context → |
SecurityVersion 0.3.3 | View details → |
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Publisher keywords · listing security code-review diff-review appsec threat-modeling Show in context →5 more matching sourcesPublisher description Codex Security workflows for security scans, analysis, and investigation. Show in context →Publisher full description Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts. Show in context → |
SecurityVersion 0.1.32 | View details → |
Endor Labs Agent KitEndor LabsEndor Labs security workflows and setup for Codex. Publisher capabilities · listing Security Remediation Investigation Application Security Agentic Workflows Agentic Remediation Agentic AppSec Show in context →4 more matching sourcesPublisher full description Packaged AppSec workflows for SCA remediation, AI SAST triage, CI/CD posture, malware response, findings review, Endor Labs setup, and more. Show in context → |
SecurityVersion 2.2.4 | View details → |
Have I Been SquattedHave I Been Squatted Publisher full description …ile it is being set up. Lookalike domains, mail servers, staging hosts and their certificates often appear before a phishing campaign launches. This plugin brings detection, investigation and response for them into ChatGPT and Codex. Enrich and hunt, for any domain - Analyze: live DNS, mail, registration, hosting, HTTP and classification for one domain, with a verdict profile and an interactive view with a screenshot and hosting map. Fast depth takes under a minute; slow depth renders the page and reports what it asks visitors for, such as passwords, one-time codes or payment data. - Certificate transparency search: find certificate names matching a pattern, such… Show in context →1 more matching sourcesPublisher capabilities · listing …organization admins) List, add, tune and remove monitored domains (organization admins) Open and follow managed takedown cases (organization admins) Send one result to a connected SIEM, chat or security control and check its delivery (organization admins) Show in context → |
SecurityVersion 1.1.2 | View details → |
VIDOC Security ReviewVidoc Security Lab Publisher full description VIDOC Security Review brings security code review workflows from Vidoc Security Lab to ChatGPT and Codex. For developers and application security teams, its three defined skills review supplied code or diffs, validate suspected vulnerabilities, and prepare reports with evidence, impact, and proposed fixes. Findings distingu… Show in context →3 more matching sourcesPublisher capabilities · listing Security code review Finding validation Review reporting Show in context →Publisher description VIDOC Security Review by Vidoc Security Lab: review source code for security issues, validate suspected findings, and prepare reports with supporting evidence using three defined skills. Show in context → |
SecurityVersion 0.1.1 | View details → |
Cloudflare SecurityThe Doers Firm Publisher full description …count configuration, Workers, Pages, D1, storage, APIs, DNS, TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security. Show in context →1 more matching sourcesPublisher description Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Show in context → |
SecurityVersion 0.1.1 | View details → |
CVE Risk CheckAgent Tools Publisher full description …ithout a key, so records are cached for a few hours; a recent change to a CVE can take that long to appear, and when NVD asks this service to slow down the answer says so and when to retry. For a dependency list, pass the text of a lockfile (package-lock.json, pnpm-lock.yaml, yarn.lock, poetry.lock, uv.lock, Cargo.lock, go.sum or go.mod), a… …lowed by a short list of the rest. A match is by exact name and version: it does not show that your code reaches the vulnerable code. It does not scan your systems, read your source code, confirm that you are vulnerable, or tell you how to exploit anything. The CVE ids and dependency lists you send… Show in context → |
SecurityVersion 1.2.0 | View details → |