Security Codex plugins
Follow your plugin and competitors. Review changes to their positioning, capabilities and published terms, with dated source evidence.
Explore 11,001 plugins across 14 categories.
Follow up to 10 plugins for free. Newest means first added to our catalog, not the publisher’s release date.
Security plugins 6
1–6 of 6All words must match. Use quotes for an exact phrase.
| Plugin / developer | Category | Follow |
|---|---|---|
Tahr SecurityTahr Security IncEvidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Package name tahr-codex-plugin Show in context →4 more matching sourcesPublisher description Evidence-backed application security workflows for finding, validating, and fixing vulnerabilities. Show in context →Publisher full description Review applications with an evidence-first security workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes. Show in context → |
SecurityVersion 0.3.3 | View details → |
Codex SecurityOpenAICodex Security workflows for security scans, analysis, and investigation. Publisher keywords · listing security code-review diff-review appsec threat-modeling Show in context →6 more matching sourcesPublisher description Codex Security workflows for security scans, analysis, and investigation. Show in context →Publisher full description Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts. Show in context → |
SecurityVersion 0.1.32 | View details → |
Vibe Code Security ReviewerThe Doers Firm Publisher full description Vibe Code Security Reviewer performs advanced evidence-based security reviews of AI-generated and rapidly built applications. It checks Supabase RLS, authentication, authorization, tenant isolation, API leaks and misuse, inputs, secrets, uploads, dependencies, data exposure, AI tools, deployment configuration,… Show in context →4 more matching sourcesPublisher description Advanced security review for AI-generated applications, Supabase RLS, APIs, secrets, databases, and production deployments. Show in context → |
SecurityVersion 0.1.0 | View details → |
ProofXCyberSec AI Ltd Publisher description …al content with cryptographic signatures. What you can do: - Protect your articles, poems, scripts, code, and text with tamper-proof cryptographic proof - Verify if content is registered with ProofX using a content ID or hash - Look up creator profiles and their protection history - Get digital fing… …fication link anyone can use to prove you created it Used by 300+ creators including photographers, writers, journalists, and musicians. Show in context →1 more matching sources |
SecurityVersion 1.0.0 | View details → |
Cloudflare SecurityThe Doers FirmAudit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Publisher capabilities · listing Analyze Write Show in context →2 more matching sourcesPublisher description Audit and harden Cloudflare-hosted applications, data, accounts, and infrastructure with evidence-based security guidance. Show in context →Publisher full description …TLS, origins, WAF, and deployment workflows. It uses authorized read-only account data and supplied code to produce evidence-backed findings, prioritized fixes, side-effect warnings, and verification steps. Customer support: https://thedoersfirm.com/support. It cannot guarantee complete security. Show in context → |
SecurityVersion 0.1.1 | View details → |
SkarnSkarn Software OÜ Publisher full description …ction, exfiltration attempts, and the chains that connect them; each finding carries the standards mappings that apply to it, drawn from MITRE ATLAS, the OWASP Top 10 for LLM Applications 2025, the OWASP Agentic Top 10, and CWE. skarn vet reads the assistant configuration files on the same machine and reports risky declarations: hooks, MCP servers, and permission grants that could run remote code or send data off the machine. Both passes run entirely on this machine and make no network call. Neither modifies a session transcript or a configuration file, and every credential value in the o… …t a configuration on its own: the skill proposes, and the user decides. The one thing the skill can write is a baseline entry recording a finding the user has explicitly confirmed as a false positive. The skill runs a local shell command, so it is offered in Codex. It does not carry the skarn binary… Show in context →1 more matching sourcesPublisher keywords · listing security secrets credential-leak ai-coding-sessions audit codex Show in context → |
SecurityVersion 0.27.0 | View details → |