Current plugins
15Plugin marketplace
Cosign-signed plugins, track-based safety guarantees.
The official registry serves 15 current plugins across 8 tracks. Every one carries a Sigstore keyless signature tied to its `release.yml` workflow OIDC subject. The default trust policy refuses install on unsigned drops; operators bypass with `--allow-unverified` or `plugins.trust_policy: permissive`. Since 1.13.0 the trust policy is enforced on install, update and `.nox.yaml` auto-install alike, and a plugin binary is re-verified against its install-time digest before it runs.
The registry moved to its own repository, Nox-HQ/registry, in nox 1.10.0. Existing installs migrate the source URL automatically.
Cosign verified
15/15CI-safe tracks
7/87 further entries stay in the index for existing installs but are no longer recommended — marked below.
✓ Cosign keyless verified
Featured: signed plugins ready for production
nox/reachability ✓ Verified Multi-language reachability analysis. Annotates VULN findings as unreachable, reachable or undetermined across Go, PyPI, npm, Cargo, Maven, RubyGems and NuGet.
nox plugin install nox/reachabilitynox/container ✓ Verified Dockerfile linting, image vulnerability scanning and container SBOM (22 rules).
nox plugin install nox/containernox/dast ✓ Verified DAST web/API probes for HTTP misconfiguration — headers, CORS, TLS, cookies, rate limiting, open redirect — plus opt-in AI-DAST: prompt injection, system-prompt leak, tool smuggling, cost amplification.
nox plugin install nox/dastnox/k8s-runtime ✓ Verified Inspects running Kubernetes workloads for security misconfigurations and drift.
nox plugin install nox/k8s-runtimenox/ai-eval ✓ Verified Adversarial prompt corpus runner. Fires a bundled jailbreak / prompt-leak / role-confusion corpus at a configured chat endpoint and reports which attacks succeeded.
nox plugin install nox/ai-evalnox/llm-triage ✓ Verified Optional LLM second opinion. Sends each finding plus a code snippet to a configured chat endpoint and attaches a true/false-positive verdict as an enrichment. Never gates the scan — the deterministic core is unaffected.
nox plugin install nox/llm-triagenox/api-abuse ✓ Verified API authorization testing for BOLA, BFLA, rate-limit and abuse patterns in server code (5 rules).
nox plugin install nox/api-abusenox/attack-surface ✓ Verified Static endpoint extraction and exposure mapping across Go (net/http, Gin, Echo, Chi), Python (Flask, Django, FastAPI) and JavaScript/TypeScript (Express, Koa, Fastify).
nox plugin install nox/attack-surfacenox/depconfusion ✓ Verified Dependency confusion detection across npm, PyPI, RubyGems and Maven (3 rules).
nox plugin install nox/depconfusionnox/freshness ✓ Verified Flags dependencies by provenance rather than advisory: a version published within the review window, withdrawn from its registry, or released by a different publisher than the one before it (npm, Go). Catches a package that turned hostile an hour ago, before any advisory exists. Requires nox 1.38.3.
nox plugin install nox/freshnessnox/grc ✓ Verified Governance, Risk & Compliance assessment across 13 frameworks with gap analysis and evidence collection.
nox plugin install nox/grcnox/threat-model ✓ Verified STRIDE-based threat pattern detection in source code, with opt-in AI threat modeling via ai_model: true (5 rules + LLM).
nox plugin install nox/threat-modelnox/threat-enrich ✓ Verified CVE enrichment, CWE mapping and MITRE ATT&CK correlation (13 rules).
nox plugin install nox/threat-enrichnox/triage-agent ✓ Verified LLM-powered finding prioritization and false-positive reduction (4 rules + 7 providers: openai, anthropic, gemini, ollama, cohere, bedrock, copilot).
nox plugin install nox/triage-agentnox/remediate ✓ Verified Deterministic remediation planning and application for code findings. Its apply_code and verify_code tools are declared non-read-only and are blocked under the default passive policy until explicitly opted in.
nox plugin install nox/remediate Track 1
Core Analysis
Static analysis plugins for source and config files. Fast, deterministic, and safe in local and CI workflows.
- passive
- CI yes
- Offline yes
- RO yes
Track 1
Core Analysis
Static analysis plugins for source and config files. Fast, deterministic, and safe in local and CI workflows.
- Multi-language reachability analysis. Annotates VULN findings as unreachable, reachable or undetermined across Go, PyPI, npm, Cargo, Maven, RubyGems and NuGet.
nox/reachabilityv0.9.0 ✓ Verified - Retired and archived. Core's taint engine has overtaken it: since nox 1.33.0 the plugin adds no finding core does not already report. Remove it with nox plugin remove nox/taint-analysis; core needs no configuration to replace it. Use core taint engine (TAINT-*) instead.
nox/taint-analysisv0.7.3 Retired - Dockerfile linting, image vulnerability scanning and container SBOM (22 rules).
nox/containerv0.2.4 ✓ Verified - Retired in nox 1.10.0. Seven of its nine rules duplicated vulnerability classes the core taint engine already detects, reporting each finding twice under a second rule-ID namespace. Its two additive rules moved into core: weak crypto as CRYPTO-001 and open redirect as TAINT-007. Use core taint engine (TAINT-*, CRYPTO-001) instead.
nox/sastv0.2.1 Retired
Track 2
Dynamic & Runtime Security
Runtime-facing plugins for active testing of deployed services and environments with explicit opt-in. Per-tool safety declarations (1.9.0) let a read-only tool in one of these plugins run under a passive policy while its active siblings stay gated.
- active
- CI no
- Offline no
- RO no
Track 2
Dynamic & Runtime Security
Runtime-facing plugins for active testing of deployed services and environments with explicit opt-in. Per-tool safety declarations (1.9.0) let a read-only tool in one of these plugins run under a passive policy while its active siblings stay gated.
- DAST web/API probes for HTTP misconfiguration — headers, CORS, TLS, cookies, rate limiting, open redirect — plus opt-in AI-DAST: prompt injection, system-prompt leak, tool smuggling, cost amplification.
nox/dastv0.3.3 ✓ Verified - Inspects running Kubernetes workloads for security misconfigurations and drift.
nox/k8s-runtimev0.7.2 ✓ Verified - Retired and archived. Exploit hypotheses and evidence-backed validation live in core as nox attack; this plugin duplicated that job and its implementation was empty. Use nox attack (core) instead.
nox/red-teamv0.7.2 Retired - Adversarial prompt corpus runner. Fires a bundled jailbreak / prompt-leak / role-confusion corpus at a configured chat endpoint and reports which attacks succeeded.
nox/ai-evalv0.2.2 ✓ Verified - Optional LLM second opinion. Sends each finding plus a code snippet to a configured chat endpoint and attaches a true/false-positive verdict as an enrichment. Never gates the scan — the deterministic core is unaffected.
nox/llm-triagev0.2.1 ✓ Verified - API authorization testing for BOLA, BFLA, rate-limit and abuse patterns in server code (5 rules).
nox/api-abusev0.2.3 ✓ Verified - Static endpoint extraction and exposure mapping across Go (net/http, Gin, Echo, Chi), Python (Flask, Django, FastAPI) and JavaScript/TypeScript (Express, Koa, Fastify).
nox/attack-surfacev0.3.0 ✓ Verified
Track 3
Supply Chain & Provenance
Integrity and provenance checks for build outputs, dependencies and release artifacts.
- passive
- CI yes
- Offline no
- RO yes
Track 3
Supply Chain & Provenance
Integrity and provenance checks for build outputs, dependencies and release artifacts.
- Dependency confusion detection across npm, PyPI, RubyGems and Maven (3 rules).
nox/depconfusionv0.2.4 ✓ Verified - Flags dependencies by provenance rather than advisory: a version published within the review window, withdrawn from its registry, or released by a different publisher than the one before it (npm, Go). Catches a package that turned hostile an hour ago, before any advisory exists. Requires nox 1.38.3.
nox/freshnessv0.1.0 ✓ Verified
Track 4
Policy, Risk & Governance
Plugins that turn findings into enforceable policy and compliance decisions. Policy gating and baseline management moved into core, so the two plugins that provided them are deprecated.
- passive
- CI yes
- Offline yes
- RO yes
Track 4
Policy, Risk & Governance
Plugins that turn findings into enforceable policy and compliance decisions. Policy gating and baseline management moved into core, so the two plugins that provided them are deprecated.
- Governance, Risk & Compliance assessment across 13 frameworks with gap analysis and evidence collection.
nox/grcv0.7.4 ✓ Verified - Policy evaluation and CI gate — severity thresholds, rule allowlists, finding budgets (5 rules). Use core policy thresholds in .nox.yaml instead.
nox/policy-gatev0.2.0 Deprecated - Finding baseline snapshots, diff and triage — the brownfield migration enabler (4 rules). Use nox baseline instead.
nox/baseline-mgmtv0.2.0 Deprecated
Track 5
Threat Modeling & Design
Design-time security analysis plugins for architecture and threat model quality.
- passive
- CI yes
- Offline yes
- RO yes
Track 5
Threat Modeling & Design
Design-time security analysis plugins for architecture and threat model quality.
- STRIDE-based threat pattern detection in source code, with opt-in AI threat modeling via ai_model: true (5 rules + LLM).
nox/threat-modelv0.2.2 ✓ Verified - Retired and archived. Core emits CWE metadata and references, and nox/threat-enrich writes the CWE → OWASP → ATT&CK explanations. Its scan tool returned {} for every input. Use core + nox/threat-enrich instead.
nox/threat-explainv0.2.2 Retired
Track 6
Intelligence & Early Warning
Threat intelligence plugins that provide context, correlation and early signal amplification.
- passive
- CI yes
- Offline no
- RO yes
Track 6
Intelligence & Early Warning
Threat intelligence plugins that provide context, correlation and early signal amplification.
- Retired and archived. EPSS and KEV prioritisation comes from NOX Intelligence, the default advisory source since nox 1.33.0. The plugin never had a working data path, and its stub answered in the dangerous direction. Use NOX Intelligence (core) instead.
nox/risk-scorev0.2.3 Retired - CVE enrichment, CWE mapping and MITRE ATT&CK correlation (13 rules).
nox/threat-enrichv0.3.0 ✓ Verified
Track 7
Agent & Assistance
AI-assisted explanation and prioritization plugins for human and agent users.
- passive
- CI yes
- Offline no
- RO yes
Track 7
Agent & Assistance
AI-assisted explanation and prioritization plugins for human and agent users.
- LLM-powered finding prioritization and false-positive reduction (4 rules + 7 providers: openai, anthropic, gemini, ollama, cohere, bedrock, copilot).
nox/triage-agentv0.3.0 ✓ Verified
Track 8
Remediation
Deterministic remediation planning and application. Since 1.12.0 every post-scan plugin tool is subject to policy, so the tools here that rewrite source stay blocked until an operator sets plugin_policy.max_risk_class: active.
- active
- CI yes
- Offline yes
- RO no
Track 8
Remediation
Deterministic remediation planning and application. Since 1.12.0 every post-scan plugin tool is subject to policy, so the tools here that rewrite source stay blocked until an operator sets plugin_policy.max_risk_class: active.
- Deterministic remediation planning and application for code findings. Its apply_code and verify_code tools are declared non-read-only and are blocked under the default passive policy until explicitly opted in.
nox/remediatev0.1.2 ✓ Verified