Extensions

SecretGuard - Catch Hardcoded Secrets & API Keys

khushwant-r

Flags hardcoded API keys, tokens, private keys, and secrets in your code before they get committed. Catches secrets that AI assistants and quick copy-paste leave behind.

Envify: Secret Scanner to prevent API key leaks

paulning576

Prevent accidental API key leaks — real-time secret detection with one-click fixes for VS Code

AI Security Scanner

ontedduabhishakereddy

Real-time detection of prompt injection, data leakage risks, and AI API misuse in your code — before they reach production.

Patchd Security

patchd

Real-time security scanning powered by Patchd AI

Detect leaked API keys and secrets in your code as you type. Highlights 80+ secret patterns including AWS, GitHub, Stripe, OpenAI, and more.

SafePaste

safepaste

Detects secrets in your code on copy/paste and lets you sanitize or restore them — keep your .env files safe when sharing with AI tools.

Ctrace Audit

CoreTrace

Integration for Ctrace CLI Audit Tool

Custodia — Security & Compliance Autopilot

CustodiaLLC

OWASP Top 10, SOC 2, HIPAA, PCI DSS scanning with inline findings, AI fix prompts, and compliance gap reports. One click.

AI-powered code analysis with security, performance, architecture insights, and Mermaid diagrams. Compatible with VS Code and Cursor.

AOYS

Nily

Local model powered intelligent code auditor — security + quality + auto-fix (fully local)

WatsonSec

TejGokani

Local-first security engine: runs real scanners (Semgrep, Gitleaks, Trivy, Checkov, Bandit, gosec, Grype, TruffleHog, CodeQL) on every save, deduplicates findings, and surfaces them in a dashboard and MCP bridge.

SecretGuard - Secret Detection

secretguard-cli

Real-time secret detection — catches API keys, tokens, and credentials as you type