Extensions

SafeLens

Namith011

Scan files and folders with SafeLens, get AI-powered vulnerability explanations, inline markers, and a smart security sidebar.

Vigil by SecureOS

secureos

Real-time AI security scanning for VS Code and Cursor. Catches prompt injection, hardcoded secrets, SQL injection, and 40+ more patterns as you type.

Prism - PR Safety Mentor

prism-ai

Catch issues before code review. Local-first PR analysis with secrets detection, risk warnings, and smart checklists.

Copilot Guide

anuppatra

Surfaces coding guidelines, architecture patterns, and secure coding rules inside VS Code. Integrates with GitHub Copilot Chat for guide-aware code generation.

AICop — AI Code Scanner

aicop

Detects security holes, AI-generated anti-patterns, and tech debt in JS/TS code

Rethos Security

emile-eid

AI-powered real-time security vulnerability detection. Catches SQL injection, XSS, command injection, hardcoded secrets, and unsafe deserialization as you code — with AI explanations and one-click auto-fix.

Lockzero — Runtime Credential Intelligence

LockZero

Detect hardcoded secrets and proxy bypasses. Move credentials to Lockzero vault with one click. See blast radius, rotation status, and audit lineage on hover.

tinyNpm

about14sheep

Security focused npm package.json companion

Pipefort

pipefort

Scan CI/CD pipelines for OWASP CI/CD Top 10, SLSA, and supply-chain issues — inline diagnostics, toxic-combination detection, and quick fixes.

LeakerLens

Manolov

Catch API keys, tokens, and secrets as you type — 100% locally. Nothing leaves your machine.

Cerberus

Ovalix

Extends the Ovalix AI Protection Suite into the IDE

rein - guardrails for AI-written code

sametatas

Checks the code your AI assistant writes: leaked secrets, unsafe calls, and imports that do not resolve, shown inline before you commit or run. Deterministic, no LLM. Powered by the rein engine.