315 Claude Code plugins · 382 MCP servers · refreshed 26 Oct 2026Get your plugin featured →
Claude Code plugins

Security

Scanning, secrets, dependency audits and API security checks. 18 listed, each with its install command.

Sorted by GitHub stars; plugins without their own repo follow, A–Z.
Featured spotopen

Your plugin here

First in Security for 30 days, always marked Featured. From $19.

plugin★ 113SonarSource

sonarqube

Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning…

plugin★ 54Auth0

auth0

Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware…

plugin★ 52Zscaler

zscaler

Manage Zscaler cloud security platform including ZPA (private access), ZIA (internet access), ZDX (digital…

plugin★ 46WorkOS

workos

WorkOS integration skills for AuthKit, SSO, Directory Sync, RBAC, Vault, Audit Logs, migrations, and API references.

plugin★ 35CrowdStrike

crowdstrike-falcon-foundry

CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes…

plugin★ 28CrowdStrike

crowdstrike-falcon-fusion

CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action…

plugin★ 26CrowdSec

crowdsec

Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers…

plugin★ 19

semgrep

Semgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.

plugin★ 9Duende Software

duende-skills

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token…

plugin★ 6JFrog Ltd.

jfrog

Use the JFrog Platform from Claude Code: Artifactory repos and artifacts, security findings and exposures, Catalog…

plugin★ 4

sonatype-guide

Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for…

plugin★ 142Crunch

42crunch-api-security-testing

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect…

pluginAnthropic

claude-security

Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier…

pluginAnthropic

security-guidance

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an…

pluginStackHawk

stackhawk-api

Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents…

pluginStackHawk

stackhawk-hawkscan

Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans…

pluginVanta

vanta

The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It…

pluginVanta

vanta-mcp-plugin

The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It…