Security Codex plugins

Publisher full description

…mpaign launches. This plugin brings detection, investigation and response for them into ChatGPT and Codex. Enrich and hunt, for any domain - Analyze: live DNS, mail, registration, hosting, HTTP and classification for one domain, with a verdict profile and an interactive view with a screenshot and hosting map. Fast depth takes under a minute; slow depth renders the page and reports what it asks visitors for, such as passwords, one-time codes or payment data. - Certificate transparency search: find certificate names matching a pattern, such… …update, enable, disable and delete detection rules and the responses they trigger in your connected tools. - Responses: send one result to a connected tool now, outside any rule, such as a SIEM finding, a Slack message or a block in Microsoft Defender or Cloudflare Gateway, and check that it was del…

Publisher full description

Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. The workflow checks that the Frame CLI is installed (and points you to the README install steps if it is not, without installing anything itself), runs frame scan, optionally adds the AI layer through a chat-c…

Publisher full description

An independent skills-only workflow for authorized security research. Uses tools already connected to the active chat. Supports source review, scoped web/API investigation, validation, and HackerOne report drafting. Does not bundle testing tools or the Codex Security backend.

Publisher full description

…ew hours; a recent change to a CVE can take that long to appear, and when NVD asks this service to slow down the answer says so and when to retry. For a dependency list, pass the text of a lockfile (package-lock.json, pnpm-lock.yaml, yarn.lock, poetry.lock, uv.lock, Cargo.lock, go.sum or go.mod), a… …lowed by a short list of the rest. A match is by exact name and version: it does not show that your code reaches the vulnerable code. It does not scan your systems, read your source code, confirm that you are vulnerable, or tell you how to exploit anything. The CVE ids and dependency lists you send are not stored; the only lasting record is a daily count of calls per tool.