Current plugins
18Plugin marketplace
Cosign-signed plugins, track-based safety guarantees.
The official registry serves 18 current plugins across 8 tracks. Every one carries a Sigstore keyless signature tied to its `release.yml` workflow OIDC subject. The default trust policy refuses install on unsigned drops; operators bypass with `--allow-unverified` or `plugins.trust_policy: permissive`. Since 1.13.0 the trust policy is enforced on install, update and `.nox.yaml` auto-install alike, and a plugin binary is re-verified against its install-time digest before it runs.
The registry moved to its own repository, Nox-HQ/registry, in nox 1.10.0. Existing installs migrate the source URL automatically.
Cosign verified
18/18CI-safe tracks
7/83 further entries stay in the index for existing installs but are no longer recommended — marked below.
✓ Cosign keyless verified
Featured: signed plugins ready for production
nox/reachability ✓ Verified Multi-language reachability analysis. Annotates VULN findings as unreachable, reachable or undetermined across Go, PyPI, npm, Cargo, Maven, RubyGems and NuGet. Bundled in the nox release archive.
nox plugin install nox/reachabilitynox/taint-analysis ✓ Verified Cross-file and interprocedural taint flow, including AI source-to-sink paths, on top of the taint engine in core.
nox plugin install nox/taint-analysisnox/container ✓ Verified Dockerfile linting, image vulnerability scanning and container SBOM (22 rules).
nox plugin install nox/containernox/dast ✓ Verified DAST web/API probes for HTTP misconfiguration — headers, CORS, TLS, cookies, rate limiting, open redirect — plus opt-in AI-DAST: prompt injection, system-prompt leak, tool smuggling, cost amplification.
nox plugin install nox/dastnox/k8s-runtime ✓ Verified Inspects running Kubernetes workloads for security misconfigurations and drift.
nox plugin install nox/k8s-runtimenox/red-team ✓ Verified Attack-path analysis and exploit validation. Declares per-tool safety: analyze is passive, validate is active and requires confirmation.
nox plugin install nox/red-teamnox/ai-eval ✓ Verified Adversarial prompt corpus runner. Fires a bundled jailbreak / prompt-leak / role-confusion corpus at a configured chat endpoint and reports which attacks succeeded.
nox plugin install nox/ai-evalnox/llm-triage ✓ Verified Optional LLM second opinion. Sends each finding plus a code snippet to a configured chat endpoint and attaches a true/false-positive verdict as an enrichment. Never gates the scan — the deterministic core is unaffected.
nox plugin install nox/llm-triagenox/api-abuse ✓ Verified API authorization testing for BOLA, BFLA, rate-limit and abuse patterns in server code (5 rules).
nox plugin install nox/api-abusenox/attack-surface ✓ Verified Static endpoint extraction and exposure mapping across Go (net/http, Gin, Echo, Chi), Python (Flask, Django, FastAPI) and JavaScript/TypeScript (Express, Koa, Fastify).
nox plugin install nox/attack-surfacenox/depconfusion ✓ Verified Dependency confusion detection across npm, PyPI, RubyGems and Maven (3 rules).
nox plugin install nox/depconfusionnox/grc ✓ Verified Governance, Risk & Compliance assessment across 13 frameworks with gap analysis and evidence collection.
nox plugin install nox/grcnox/threat-model ✓ Verified STRIDE-based threat pattern detection in source code, with opt-in AI threat modeling via ai_model: true (5 rules + LLM).
nox plugin install nox/threat-modelnox/threat-explain ✓ Verified LLM-enhanced finding explanations and impact analysis with audience targeting (8 rules + LLM).
nox plugin install nox/threat-explainnox/risk-score ✓ Verified EPSS / KEV vulnerability prioritization and severity scoring with environmental risk amplification (5 rules).
nox plugin install nox/risk-scorenox/threat-enrich ✓ Verified CVE enrichment, CWE mapping and MITRE ATT&CK correlation (13 rules).
nox plugin install nox/threat-enrichnox/triage-agent ✓ Verified LLM-powered finding prioritization and false-positive reduction (4 rules + 7 providers: openai, anthropic, gemini, ollama, cohere, bedrock, copilot).
nox plugin install nox/triage-agentnox/remediate ✓ Verified Deterministic remediation planning and application for code findings. Its apply_code and verify_code tools are declared non-read-only and are blocked under the default passive policy until explicitly opted in.
nox plugin install nox/remediate Track 1
Core Analysis
Static analysis plugins for source and config files. Fast, deterministic, and safe in local and CI workflows.
- passive
- CI yes
- Offline yes
- RO yes
Track 1
Core Analysis
Static analysis plugins for source and config files. Fast, deterministic, and safe in local and CI workflows.
- Multi-language reachability analysis. Annotates VULN findings as unreachable, reachable or undetermined across Go, PyPI, npm, Cargo, Maven, RubyGems and NuGet. Bundled in the nox release archive.
nox/reachabilityv0.7.1 ✓ Verified - Cross-file and interprocedural taint flow, including AI source-to-sink paths, on top of the taint engine in core.
nox/taint-analysisv0.7.1 ✓ Verified - Dockerfile linting, image vulnerability scanning and container SBOM (22 rules).
nox/containerv0.2.2 ✓ Verified - Retired in nox 1.10.0. Seven of its nine rules duplicated vulnerability classes the core taint engine already detects, reporting each finding twice under a second rule-ID namespace. Its two additive rules moved into core: weak crypto as CRYPTO-001 and open redirect as TAINT-007. Use core taint engine (TAINT-*, CRYPTO-001) instead.
nox/sastv0.2.1 Retired
Track 2
Dynamic & Runtime Security
Runtime-facing plugins for active testing of deployed services and environments with explicit opt-in. Per-tool safety declarations (1.9.0) let a read-only tool in one of these plugins run under a passive policy while its active siblings stay gated.
- active
- CI no
- Offline no
- RO no
Track 2
Dynamic & Runtime Security
Runtime-facing plugins for active testing of deployed services and environments with explicit opt-in. Per-tool safety declarations (1.9.0) let a read-only tool in one of these plugins run under a passive policy while its active siblings stay gated.
- DAST web/API probes for HTTP misconfiguration — headers, CORS, TLS, cookies, rate limiting, open redirect — plus opt-in AI-DAST: prompt injection, system-prompt leak, tool smuggling, cost amplification.
nox/dastv0.3.2 ✓ Verified - Inspects running Kubernetes workloads for security misconfigurations and drift.
nox/k8s-runtimev0.7.1 ✓ Verified - Attack-path analysis and exploit validation. Declares per-tool safety: analyze is passive, validate is active and requires confirmation.
nox/red-teamv0.7.1 ✓ Verified - Adversarial prompt corpus runner. Fires a bundled jailbreak / prompt-leak / role-confusion corpus at a configured chat endpoint and reports which attacks succeeded.
nox/ai-evalv0.2.1 ✓ Verified - Optional LLM second opinion. Sends each finding plus a code snippet to a configured chat endpoint and attaches a true/false-positive verdict as an enrichment. Never gates the scan — the deterministic core is unaffected.
nox/llm-triagev0.2.1 ✓ Verified - API authorization testing for BOLA, BFLA, rate-limit and abuse patterns in server code (5 rules).
nox/api-abusev0.2.2 ✓ Verified - Static endpoint extraction and exposure mapping across Go (net/http, Gin, Echo, Chi), Python (Flask, Django, FastAPI) and JavaScript/TypeScript (Express, Koa, Fastify).
nox/attack-surfacev0.2.2 ✓ Verified
Track 3
Supply Chain & Provenance
Integrity and provenance checks for build outputs, dependencies and release artifacts.
- passive
- CI yes
- Offline no
- RO yes
Track 3
Supply Chain & Provenance
Integrity and provenance checks for build outputs, dependencies and release artifacts.
- Dependency confusion detection across npm, PyPI, RubyGems and Maven (3 rules).
nox/depconfusionv0.2.2 ✓ Verified
Track 4
Policy, Risk & Governance
Plugins that turn findings into enforceable policy and compliance decisions. Policy gating and baseline management moved into core, so the two plugins that provided them are deprecated.
- passive
- CI yes
- Offline yes
- RO yes
Track 4
Policy, Risk & Governance
Plugins that turn findings into enforceable policy and compliance decisions. Policy gating and baseline management moved into core, so the two plugins that provided them are deprecated.
- Governance, Risk & Compliance assessment across 13 frameworks with gap analysis and evidence collection.
nox/grcv0.7.1 ✓ Verified - Policy evaluation and CI gate — severity thresholds, rule allowlists, finding budgets (5 rules). Use core policy thresholds in .nox.yaml instead.
nox/policy-gatev0.2.0 Deprecated - Finding baseline snapshots, diff and triage — the brownfield migration enabler (4 rules). Use nox baseline instead.
nox/baseline-mgmtv0.2.0 Deprecated
Track 5
Threat Modeling & Design
Design-time security analysis plugins for architecture and threat model quality.
- passive
- CI yes
- Offline yes
- RO yes
Track 5
Threat Modeling & Design
Design-time security analysis plugins for architecture and threat model quality.
- STRIDE-based threat pattern detection in source code, with opt-in AI threat modeling via ai_model: true (5 rules + LLM).
nox/threat-modelv0.2.2 ✓ Verified - LLM-enhanced finding explanations and impact analysis with audience targeting (8 rules + LLM).
nox/threat-explainv0.2.2 ✓ Verified
Track 6
Intelligence & Early Warning
Threat intelligence plugins that provide context, correlation and early signal amplification.
- passive
- CI yes
- Offline no
- RO yes
Track 6
Intelligence & Early Warning
Threat intelligence plugins that provide context, correlation and early signal amplification.
- EPSS / KEV vulnerability prioritization and severity scoring with environmental risk amplification (5 rules).
nox/risk-scorev0.2.2 ✓ Verified - CVE enrichment, CWE mapping and MITRE ATT&CK correlation (13 rules).
nox/threat-enrichv0.2.2 ✓ Verified
Track 7
Agent & Assistance
AI-assisted explanation and prioritization plugins for human and agent users.
- passive
- CI yes
- Offline no
- RO yes
Track 7
Agent & Assistance
AI-assisted explanation and prioritization plugins for human and agent users.
- LLM-powered finding prioritization and false-positive reduction (4 rules + 7 providers: openai, anthropic, gemini, ollama, cohere, bedrock, copilot).
nox/triage-agentv0.2.2 ✓ Verified
Track 8
Remediation
Deterministic remediation planning and application. Since 1.12.0 every post-scan plugin tool is subject to policy, so the tools here that rewrite source stay blocked until an operator sets plugin_policy.max_risk_class: active.
- active
- CI yes
- Offline yes
- RO no
Track 8
Remediation
Deterministic remediation planning and application. Since 1.12.0 every post-scan plugin tool is subject to policy, so the tools here that rewrite source stay blocked until an operator sets plugin_policy.max_risk_class: active.
- Deterministic remediation planning and application for code findings. Its apply_code and verify_code tools are declared non-read-only and are blocked under the default passive policy until explicitly opted in.
nox/remediatev0.1.1 ✓ Verified