Codex Security
OpenAI
Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts.
Veja a ordem dos plugins no diretório público do ChatGPT por data de captura. Popular é uma seleção editorial. O diretório não divulga números de instalações ou de uso.
Última observação
OpenAI
Codex Security packages reusable workflows for security scans, analysis, validation, and investigation across code, diffs, and related artifacts.
OpenAI
Daybreak Defense Factory brings cloud security scans, findings, and continuous repository monitoring into your workspace.
Malwarebytes Inc.
Verify links, domains, phones. @Malwarebytes Got a PayPal invoice for US$823. Should I call +33536490102? @Malwarebytes verify this suspicious domain: https://flhsmv.govbt.bond @Malwarebytes Check this link with promo offer https://bit.ly/4oW0 Protect yourself from phishing and scams by verifying links, domains, emails, and phone numbers before you click, call, or reply. Get instant reputation insights, ownership details, and risk levels for unknown numbers, suspicious emails, shortened URLs, and unfamiliar links - right inside ChatGPT.
PrivacyHawk, Inc
Use PrivacyHawk with ChatGPT to Take Control of Your Personal Data -- Manage, control, and delete your data from thousands of businesses exploiting your personal information. PrivacyHawk helps you reduce your digital footprint, decrease spam, and protect yourself from identity theft, scams, and hacks. Key Features: Why Choose PrivacyHawk: Thousands of corporations share and sell your personal data. Although privacy laws now require them to stop when requested, opting out is difficult due to complex processes and the sheer number of companies. PrivacyHawk simplifies this process by handling it for you.
Ansvar AI
Ansvar Systems AB is a Swedish cybersecurity company that gives AI agents verifiable access to law, regulation and security standards. Customers connect the AI assistant they already use (Claude, Microsoft Copilot, ChatGPT or any MCP-compatible client) to the Ansvar Gateway and run compliance work directly in that assistant: regulatory gap analyses, threat models (STRIDE/LINDDUN, TARA), DPIAs and audit preparation, grounded in more than 300 curated corpora of EU and international legislation, case law, preparatory works, regulator guidance and security standards. Every answer carries paragraph-level citations to the official source. When a source is unavailable, the platform returns an error instead of guessing, accuracy over availability is an architectural rule, not a disclaimer. All content is ingested from the original publisher under verified licensing, so results can be relied on and redistributed. Ansvar serves legal insurers, compliance teams, security consultancies and software teams that need to know which rules apply; NIS2, GDPR, DORA, CRA, the EU AI Act, national and sector regulation — and to prove where every answer came from.
FORTRESS APPS LLC
AJAXX Data Scrubber in ChatGPT provides read-only information about digital privacy risks and data broker exposure. It explains how personal data appears online, how removal services work, and answers common questions about scans, monitoring, and protection options. This ChatGPT app does not run scans, show personal scan results, perform removals, or manage accounts. For secure account access, scans, removals, billing, or support, users are directed to the official AJAXX website.
Soluvery Inc.
Soluvery scans your Google Drive in real time and shows you exactly which files are publicly shared or accessible by specific people. No setup needed — just ask.
M8ven Inc.
ToolCheck is M8ven's trust layer for the MCP ecosystem. Give it a GitHub URL or npm package name and it returns an independent trust score (0–100) and a clear verdict (Trusted / Caution / Concern), backed by static code analysis, runtime behavioral observation in a sandbox, CVE scanning, and a semantic check comparing the tool's declared behavior against what its code actually does — catching the gap between "read-only market data" and code that can move your funds.
Red Sift
Analyze any domain’s email authentication, DNS, and web security configuration. Radar Lite scans your domain, visualizes security scores on a radar chart, and generates a summary with prioritized findings and remediation guidance. Try prompts like: You can ask follow-up questions to clarify any terms and dig deeper into the performed tests.
CyberSec AI Ltd
ProofX protects your digital content with cryptographic signatures. What you can do: How it works: Used by 300+ creators including photographers, writers, journalists, and musicians.
CertScore.ai, LLC
Scan public websites for fast preliminary cookie/tracker evidence, then continue to persisted privacy findings, typed GPC response comparisons, bounded Accept and Reject observations, policy signals, and HTTPS/TLS. Results preserve provenance and explicit coverage limitations for human review; they are not legal advice, certification, or a compliance determination.
Roman Pelevin
Neura Relay MCP helps ChatGPT-connected workflows review proposed agent actions before execution. It returns Decision Receipts, trace refs, and Registry context without executing downstream actions or exposing private payloads.
Jacana, Inc.
Not sure if that message is legit? Jacana Scam Check analyzes suspicious texts, emails, and DMs to identify common fraud tactics. Paste the message and get a clear risk assessment with specific red flags and recommended next steps. You can also check a website, phone number, or email address before you trust it. Helps protect you from phishing, advance-fee fraud, impersonation, and other scams. https://hellojacana.com
M8ven Inc.
Is It Legit is the consumer brand-trust tool from M8ven. Given a brand name or URL, it analyzes 100+ trust signals and returns a verdict (safe / caution / avoid) with key findings. Designed for "is this site real?" / "should I buy from this brand?" / "is this an Instagram-ad scam?" type questions.
Bastion Technologies
Connect Bastion to ChatGPT to manage your security and compliance posture through natural conversation. Review framework compliance status across SOC 2, ISO 27001, HIPAA, and GDPR. Drill into failing tests, upload evidence, and submit controls for review. Ask your knowledge base security and compliance questions grounded in your own policies and documentation. Monitor code security findings and GitHub configuration status. All data is scoped to your authenticated account - you only ever see your own tenant.
Bitdefender
Bitdefender provides digital security tools to help users check suspicious links and phone numbers, generate passwords, check their digital footprint, and find security products suited to their needs.
Omni Owl GmbH
AccessOwl lets organizations manage access to SaaS apps. Users can browse available apps and request access as needed.
Ultron Developments Pty. Ltd.
IsThisSpam checks suspicious phone numbers, messages, links, websites, and email addresses using structured scam signals and cautious safety guidance. Results distinguish likely scams from unverified findings; no result is a guarantee of safety.
CookieYes Limited
Manage cookie consent and compliance without leaving ChatGPT. Privacy laws like GDPR and CCPA require websites to get visitor consent before using cookies. CookieYes is the consent management platform (CMP) that handles this for 1.5M+ websites. This connector puts it inside your chat. Check whether your cookie banner is live. Run a cookie scan to find every cookie and tracker on your site. Review your GDPR and CCPA compliance settings. Update your cookie banner in seconds. Typical requests: "Audit my site for GDPR compliance", "Is my cookie banner active?", "Run a cookie scan and show me what you find", "Check my CCPA opt-out setup". CookieYes supports GDPR, CCPA/CPRA, US state privacy laws, and Google Consent Mode v2. That means opt-in cookie consent for European laws, and opt-out with "Do Not Sell or Share" for US ones. Built for privacy and legal teams confirming compliance, marketers checking client sites, and developers managing cookie banners. The connector covers consent management, cookie scans, and compliance checks in plain conversation.
Binaries
Decionis is an execution-authority layer for AI agents. Before an agent takes a consequential action, Decionis evaluates the proposed action against organization policy and determines whether it may proceed, must be held, or requires additional authority. When human approval is required, Decionis can request verified approval through Presence and re-evaluate the action using the resulting signed evidence. Every evaluation produces a verifiable Decision Dossier and cryptographic evidence for audit and accountability. Use Decionis to govern agent-initiated payments, refunds, commerce operations, enterprise workflows, infrastructure changes, and other high-impact actions. Decionis authorizes execution; it does not perform the downstream action. Payments, transfers, trades, orders, and system changes remain the responsibility of the connected executor.
Orca Security
Extend Orca Security's reasoning into ChatGPT. That means every asset, alert, identity, and dependency is already stitched together in Orca’s Unified Data Model before users ask a question. Every answer factors in reachability, blast radius, and business impact from the first response. For teams that want the reasoning without writing the prompts, Orca maintains the AI Skills Hub, an open-source GitHub repo of agent skills. Type "triage alert orca-9012345" and the orca-alert-triage skill handles retrieval, analysis, and formatting. Teams can fork it, modify it, and extend it to their own use cases. The result: security and engineering teams work across cloud, code, and AI from a single workspace, with Orca's reasoning behind every answer.
Gogolook Co., Ltd.
Whoscall Lens helps you instantly detect scam risks hidden in images using Whoscall’s extensive database of phone numbers, URLs, and anti-scam intelligence. Simply upload a screenshot or photo to receive a detailed scam risk report, including real scam cases, community discussions, and relevant warnings related to the content in your image. Whether it’s a suspicious message, an unfamiliar website, or an unknown contact, Whoscall Lens gives you the insights you need to make smarter, safer decisions.
Robert Lane
A nine-skill toolkit for authorised organisational OSINT, attack-surface analysis, email and cloud exposure review, identity-security assurance, monitoring design, risk quantification and evidence-led reporting. The replacement planning, identity and exposure-analysis skills exclude credentials, account enumeration, authentication testing, exploitation, access-control bypass and surveillance.
Samuel Chenard
Palisade helps email teams investigate SPF, DKIM, DMARC, and MTA-STS issues. Review monitored domains, DMARC pass rates and sending sources, inspect DNS and SPF records, and retrieve remediation tasks with supporting evidence. Use the results to prioritize fixes and prepare DNS change plans. This plugin provides read-only access to your Palisade account: it does not publish DNS records, modify domains, send email, or manage billing. A Palisade account is required.