Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 11,121 plugins across 14 categories.
Follow up to 10 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 52
1–36 of 52All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
Atbash SafetyAtbash AISet up and manage a local Atbash agent and evaluate explicitly submitted actions against its safety policy. Publisher subtitle Check actions with Atbash Show in context →1 more matching sourcesPublisher full description Connect an Atbash agent, manage its name, purpose, risk, or active state with browser approval, and check explicitly submitted actions against Atbash safety policies. The desktop helper keeps agent private keys in local configuration and uses them locally for signing. Safe… Show in context → |
SecurityVersion 0.3.4 | View details → |
NightVisionNightVision Security, Inc.NightVision application security workflows for local development and CI/CD.
|
SecurityVersion 0.2.0 | View details → |
Radar LiteRed SiftAnalyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores ... Publisher subtitle Domain security with Red Sift Show in context →1 more matching sourcesPublisher description …Radar Lite scans your domain, visualizes security scores on a radar chart, and generates a summary with prioritized findings and remediation guidance. Try prompts like: - Radar Lite Evaluate the DNS security of example.com - Radar Lite Compare the DMARC configuration of domain1.com to domain2.com -… Show in context → |
SecurityVersion 2.0.0 | View details → |
CIMTKAG Cyber LtdCyber Incident Management Toolkit assistants: exec briefings, public statements, retainer and focus group simulations, CTI coaching, supp... Publisher capabilities · listing …cutive cyber incident briefings Draft cyber incident public communications Review incident material with a virtual retainer team Coach cyber threat intelligence requirements Guide supply-chain incident management Review staff communications through focus groups Design cyber incident tabletop exercis… Show in context →1 more matching sourcesPublisher full description …y-chain incidents, staff-message review and tabletop exercise design. This skills-only plugin works with information supplied by the user and does not connect to external systems or perform technical response actions. Show in context → |
SecurityVersion 1.0.5 | View details → |
CustodisDIGISCAN LLCCustodis tokenizes sensitive details locally on your device before you share with ChatGPT, then restores the real details on your device. Publisher capabilities · listing On-device tokenization before sharing On-device reading of scanned PDF pages Page review with redaction boxes Protected-text review Exact-text review and approval Local answer restoration Compact Token replacements Local-only original reveal Explicit occurrence choices Show in context →2 more matching sourcesPublisher description Custodis tokenizes sensitive details locally on your device before you share with ChatGPT, then restores the real details on your device. Show in context →Publisher full description …steps: Add document, Check & share, Use answer. It automatically replaces detected private details with tokens on your device. Review the exact text, approve it, then send it to ChatGPT. Paste the reply into the same open workspace to restore the real details locally. Review private details and con… Show in context → |
SecurityVersion 0.5.6 | View details → |
CVE Risk CheckAgent ToolsTriage security vulnerabilities: by CVE id (how severe it is, whether it is being exploited, how likely exploitation is) or for a whole d... Publisher capabilities · listing …ation date from the NVD Shows whether the CISA Known Exploited Vulnerabilities catalog lists a CVE, with its due date and required action Adds the EPSS score: the modelled chance of exploitation in the next 30 days Gives each CVE a priority: exploited, likely or routine Ranks a batch of up to 10 CVE… Show in context →1 more matching sourcesPublisher full description …en one is tagged, and whether the CISA Known Exploited Vulnerabilities (KEV) catalog lists the CVE, with CISA's due date and required action. FIRST's EPSS gives the modelled probability that the CVE is exploited in the next 30 days. Each CVE gets a priority: "exploited" when CISA lists it, "likely"… Show in context → |
SecurityVersion 1.2.0 | View details → |
EtugenEtugenInvestigate malicious infrastructure, threat indicators, WHOIS records and ATT&CK techniques with Etugen. Publisher capabilities · listing …nrichment C2 and malware infrastructure hunting Pivoting on certificates, JARM and ASN Risk scoring with reasons WHOIS and reverse WHOIS ASN and network lookups MITRE ATT&CK techniques Show in context →1 more matching sourcesPublisher description Investigate malicious infrastructure, threat indicators, WHOIS records and ATT&CK techniques with Etugen. Show in context → |
SecurityVersion 1.0.0 | View details → |
Have I Been SquattedHave I Been SquattedAnalyze domains, hunt lookalikes and search certificate transparency; triage your organization's detections and alerts, send responses to... Publisher capabilities · listing Analyze any domain live: DNS, registration, hosting, HTTP, classification and a verdict, with a screenshot view Search certificate transparency logs for certificate names matching a pattern Scan a domain for registered and live typosquats, ranked by evidence Find unregistered lookalikes o… Show in context →1 more matching sourcesPublisher full description …ny domain - Analyze: live DNS, mail, registration, hosting, HTTP and classification for one domain, with a verdict profile and an interactive view with a screenshot and hosting map. Fast depth takes under a minute; slow depth renders the page and reports what it asks visitors for, such as passwords,… Show in context → |
SecurityVersion 1.1.2 | View details → |
Is This AI Agent Safe?Greenlit BooksAsk whether an AI agent, MCP server or coding tool is safe to use and get a dated verdict from Greenlit Books, with the setup steps that ... Publisher capabilities · listing Tells you whether a named AI agent, MCP server or coding tool is safe to use, with the review's link Gives the setup steps a review recommends before you connect a tool to your code or accounts Checks a statement about AI agents against 564 claims, each with a citation and its… Show in context →2 more matching sourcesPublisher description …an AI agent, MCP server or coding tool is safe to use and get a dated verdict from Greenlit Books, with the setup steps that make it safer. Also answers how and why questions about AI agents from the books' free chapters and concepts, with links to the passages, checks statements against a sourced… Show in context →Publisher full description …ver, coding assistant or AI product is safe to use, and get a straight verdict from Greenlit Books, with the setup steps that make it safer and a link to the full review. Each verdict comes from reading the product's own code, docs and settings, and says which version it read and when. There are mor… Show in context → |
SecurityVersion 1.0.2 | View details → |
PasskeyBridgePasskeyBridge LLCRead-only access to your PasskeyBridge organization's identity signals, audit events, alerts, posture findings, passkey coverage and pend... Publisher capabilities · listing …List fired alerts and find the ones not yet acknowledged Review identity-provider posture findings with remediation guidance Report organization-level passkey coverage List account-recovery requests waiting for guardian approval Check PasskeyBridge service status Look up the status of PasskeyBridge… Show in context →1 more matching sourcesPublisher full description …and whether each was acknowledged. - Posture findings from your most recent identity-provider scan, with remediation guidance. - Passkey coverage: organization-level counts and percentages. Counts from 1 to 4 are withheld. - Pending account-recovery requests waiting for guardian approval, without id… Show in context → |
SecurityVersion 1.0.0 | View details → |
ScamCheckmmccoAnalyze a message, a link or a sender for fraud/phishing risk signals with a deterministic heuristic model, and get safety tips and offic... Publisher capabilities · listing Analyzes a message, link or sender and flags fraud/phishing risk signals with a deterministic heuristic model. Returns an analysis of risk signals, not a guaranteed verdict; absence of a signal does not prove a message safe. Also gives fraud safety tips and official report… Show in context →1 more matching sourcesPublisher description Analyze a message, a link or a sender for fraud/phishing risk signals with a deterministic heuristic model, and get safety tips and official reporting resources. An analysis of risk signals, not a guaranteed verdict; read-only, stateless, no account. Show in context → |
SecurityVersion 0.1.0 | View details → |
Aivana Security InvestigatorAivana Publisher full description …ies through a direct OAuth/OBO API, then produces reproducible evidence packages and analyst review without response execution. Show in context → |
SecurityVersion 1.1.1 | View details → |
AnomityAnomity Publisher full description …you stand on SOC 2, ISO 42001, the NIST AI RMF, the EU AI Act and the OWASP LLM Top 10. You sign in with your Anomity console account, and you see what your console role allows, scoped to your organization. Secret values never leave the device and are never returned. Every tool reads data except one… Show in context → |
SecurityVersion 0.1.0 | View details → |
ArrowMemArrowMem Publisher full description …nt) says, and verified facts about a local business, entered by hand from its own published sources with its consent, each with its source and date. A security alert relay can also send a push notice to you or your family. The check tools work only from diagnostic output you paste; they do not conne… Show in context → |
SecurityVersion 1.0.1 | View details → |
AttackerViewAttackerView Publisher full description …S, DNSSEC and CAA records, and email authentication (SPF, DKIM, DMARC, MTA-STS). Each problem comes with its severity, the evidence observed and how to fix it. For developers, founders and IT teams who want a quick read on a site's configuration, their own or one they depend on. The check is passive… Show in context → |
SecurityVersion 1.0.1 | View details → |
Awesome Maintainer DefenseDUC THANG LUU Publisher description Read-only repository governance and GitHub Actions risk audits with reviewable patches. Show in context →1 more matching sourcesPublisher full description Inspect repository policy, GitHub Actions trust boundaries, and moderation automation without network access or repository mutation; generate reviewable remediation patches on request. Show in context → |
SecurityVersion 1.1.1 | View details → |
BlindOracle Agent TrustCraig M. Brown Publisher full description BlindOracle Agent Trust answers one question before you work with or hire an AI agent: what is its record? What it does - Trust badge: a one-line badge for an agent name or wallet, built from BlindOracle's audit registry and settlement history. An agent BlindOr… Show in context → |
SecurityVersion 1.1.1 | View details → |
Cloudaware Service GraphCloudaware Publisher description …ture: every resource across AWS, Azure, Google Cloud, Oracle Cloud, Kubernetes, VMware and Nutanix, with its configuration, configuration history, cost, vulnerabilities, and the monitoring and security agents installed on it. Cloudaware discovers it through the providers' APIs and the systems alread… Show in context → |
SecurityVersion 1.0.0 | View details → |
Cloudflare SecurityThe Doers Firm Publisher description Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Show in context → |
SecurityVersion 0.1.1 | View details → |
CookieYesCookieYes Limited Publisher description Manage cookie consent and compliance without leaving ChatGPT. Privacy laws like GDPR and CCPA require websites to get visitor consent before using cookies. CookieYes is the consent management platform (CMP) that handles this for 1.5M+ we… Show in context → |
SecurityVersion 1.0.0 | View details → |
Diopter AIDiopter AI Inc Publisher full description …tection models, then returns a verdict (for example: no AI detected, AI-generated, or inconclusive) with a confidence level and a link to the full report on diopter.ai. Use it to sanity-check a suspicious image before sharing it, verify a video someone sent you, or look up the result of an earlier s… Show in context → |
SecurityVersion 1.0.0 | View details → |
DMARCwiseDMARCwise Publisher description Monitor, analyze, and manage email authentication with DMARCwise. Show in context → |
SecurityVersion 0.1.0 | View details → |
DrataDrata Inc. Publisher description Use natural language to work with your Drata governance, risk, and compliance data. Search and list controls, policies, evidence, risks, vendors, personnel, devices, and monitoring tests. Create and update supported records where… Show in context → |
SecurityVersion 1.0.0 | View details → |
Frame Security ScanFrame (lambdasec) Publisher description Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. Show in context →1 more matching sourcesPublisher full description Guides a step-by-step security scan of Python code with the open-source Frame command-line tool. The workflow checks that the Frame CLI is installed (and points you to the README install steps if it is not, without installing anything itself), runs fr… Show in context → |
SecurityVersion 0.1.2 | View details → |
Fraud BlockerFraud Blocker Publisher full description Verify suspicious customer, lead, and signup email addresses directly in ChatGPT with Fraud Blocker. Fraud Blocker Email Verification helps you investigate individual email addresses before deciding how to handle an order, signup, or lead. - **Instant Email Verification:** Check a… Show in context → |
SecurityVersion 1.0.0 | View details → |
GuardioGuardio Publisher full description …PT and Codex. Check a website before opening it, or check links extracted from a suspicious message without sending the message body to Guardio. Connect your Guardio account to review protection setup, scan activity, recent data leaks, linked-service counts, and security recommendations. You can als… Show in context → |
SecurityVersion 0.2.2 | View details → |
Is It Legit by M8venM8ven Inc. Publisher description …a brand name or URL, it analyzes 100+ trust signals and returns a verdict (safe / caution / avoid) with key findings. Designed for "is this site real?" / "should I buy from this brand?" / "is this an Instagram-ad scam?" type questions. Show in context → |
SecurityVersion 1.0.0 | View details → |
Jacana Scam CheckJacana, Inc. Publisher description …emails, and DMs to identify common fraud tactics. Paste the message and get a clear risk assessment with specific red flags and recommended next steps. You can also check a website, phone number, or email address before you trust it. Helps protect you from phishing, advance-fee fraud, impersonation,… Show in context → |
SecurityVersion 2.0.1 | View details → |
Keybookailuntz Publisher description …user-maintained local YAML file; inject only the selected value into an authorized trusted process without printing secrets. Show in context → |
SecurityVersion 0.6.1 | View details → |
LeakData.ioLeakdata.io Publisher description …pes of data exposed, and practical first steps. Browse recent breaches in LeakData's public catalog without connecting an account. Connect your LeakData account to check its verified email address, review existing monitoring results, and work through the most urgent steps first. Ask ChatGPT to guide… Show in context → |
SecurityVersion 1.4.0 | View details → |
MailphantomMailphantom Publisher full description Mailphantom helps keep your real email address private with email aliases called phantoms. Email sent to a phantom is forwarded to your usual inbox. The Mailphantom plugin lets you create and manage phantoms directly in ChatGPT. Ask for an alias for a new… Show in context → |
SecurityVersion 1.0.4 | View details → |
MinimusMinimus Publisher full description Minimus plugin that teaches AI coding tools to build Dockerfiles and Kubernetes manifests with hardened near-zero-CVE images Show in context → |
SecurityVersion 1.0.4 | View details → |
nebtynebty GmbH Publisher description …profiles and scam ads targeting your company, review findings in the chat and track every takedown with its complete history. New scans and takedown requests run in the nebty dashboard. Show in context →1 more matching sourcesPublisher full description …s and malicious search results, scores every finding by risk and gets the dangerous ones taken down with registrars, hosting providers and platforms. With this connector, your brand protection is one question away. Ask which lookalike domains pose the highest risk right now, which fake Instagram, Fa… Show in context → |
SecurityVersion 0.2.0 | View details → |
Neura Relay MCPRoman Pelevin Publisher description …osed agent actions before execution. It returns Decision Receipts, trace refs, and Registry context without executing downstream actions or exposing private payloads. Show in context → |
SecurityVersion 1.0.0 | View details → |
Orca SecurityOrca Security Publisher description …ility, blast radius, and business impact from the first response. For teams that want the reasoning without writing the prompts, Orca maintains the AI Skills Hub, an open-source GitHub repo of agent skills. Type "triage alert orca-9012345" and the orca-alert-triage skill handles retrieval, analysis,… Show in context → |
SecurityVersion 1.0.0 | View details → |
PalisadeSamuel Chenard Publisher description …, DMARC pass rates and sending sources, inspect DNS and SPF records, and retrieve remediation tasks with supporting evidence. Use the results to prioritize fixes and prepare DNS change plans. This plugin provides read-only access to your Palisade account: it does not publish DNS records, modify doma… Show in context → |
SecurityVersion 1.0.0 | View details → |