Independent · not affiliated with OpenAI343 plugins catalogued
On the Belt12 of 12 open · $19/mo

Security & Governance

11 plugins · Guards, audits and policy.
Presented by · openSponsor the Security & Governance shelfOne sponsor per category, labelled. $29/mo →Featured spot open in Security & Governance. Pin your plugin here, above every list in this category.$49/mo →
No.007

Agent Guard

Local-by-default, no-telemetry hooks block or mask secret leaks in Claude Code and Codex, with opt-in PII filtering and Git/CI backstops.

Security & Governance
No.034

ArmorCodex

Intent-based security for Codex with MCP plan registration, policy gating, CSRG cryptographic proofs, and audit logging on `bash` and `apply_patch`.

Security & Governance
No.039

AxonFlow

Runtime governance for Codex with policy enforcement on terminal commands, advisory checks for non-terminal tools via skills, PII/secret detection, and compliance-grade audit trails. Self-hosted via Docker.

Security & Governance
No.045

BountyGuard

Pre-flight GitHub bounty security scanner and on-chain Proof-of-Escrow MCP verifier that classifies open bounties before AI agents invest compute.

Security & Governance
No.046

Bring Your AI Migration Auditor

Read-only audit of AGENTS.md/CLAUDE.md scope, hooks, MCP config, skills, secret references, and validation notes before Codex edits migrated projects.

Security & Governance
No.050

BurpSuite MCP Bridge

Bridge Burp Suite traffic, replay, rewrite rules, and evidence export into Codex through MCP for WSL, Windows, and macOS workflows.

Security & Governance
No.055

Casefile

Persistent security case tracking for bug bounties, CTFs, and security audits.

Security & Governance
No.059

Claude Code Codex Plugin

Security-focused Codex plugin that connects to the local Claude Code CLI through MCP with login, status checks, safe-mode prompts, and no credential storage.

Security & Governance
No.109

Darkmoon

Start authorized autonomous AI pentest runs, poll status, list campaigns and read findings on your own self-hosted Darkmoon Pro through MCP.

Security & Governance
No.252

River Review

Versioned Skill Registry of code-review skills driven by a perspective-based review agent (code, security, performance, architecture, testing, adversarial) that verifies findings against the diff.

Security & Governance
No.287

Supercov

Coverage, security and code quality for coding agents.

Security & Governance