#devsecops

ECZ-ID API Security

ecocitizenz

Review your API surfaces and their proof posture before you expose them.

ECZ-ID

ecocitizenz

Run the right ECZ-ID trust check for your workspace — agents, MCP, APIs, CI/CD, dependencies, compliance, vendors, SBOM, DORA, cloud, counterparty, robotics and insurance-readiness.

SAST

InsomniaSAST

Inline secret + vulnerability scanning for your editor. Catches AWS/Stripe/JWT secrets, SQLi, command-injection and dependency CVEs as you save, and blocks git pushes that would leak them.

Guardian — Glassworm & Malware Scanner

ankushlokhande

Glassworm & malware scanner for VS Code. Detects malicious workspace tasks, injected configs, fake fonts, and stealth propagation scripts across Git branches.

AppsecD

bira

Shift-left AppSec for VS Code & Cursor — SAST + secret scan on every commit, AI-powered fix suggestions, and a per-org governance dashboard. Powered by appsec.shiprocket.in.

Azure IaC Guardrail

ChendrayanVenkatesan

Review Azure Terraform security, compliance, architecture risk, and plan changes directly inside VS Code.

SecretLoader

KiviAS

Pulls secrets from your vault and provides them to your app as environment variables when you run or debug, so they don't have to live in your config files. Works with Infisical, Doppler, HashiCorp Va

taudit

Algol

Audit GitHub Actions, Azure Pipelines, GitLab CI, and Bitbucket workflows from VS Code with policy gates and taudit graphs.

SonarQube Dashboard & Pipeline

jesusromero

Run SonarQube analysis pipelines and inspect Quality Gates, issues, Security Hotspots, coverage, duplication, and execution history directly in VS Code.

RepoScope — AI Cost Intelligence & Security Scanner

nxgentech

See what your AI subscription actually costs you — per file, per prompt, per month. RepoScope shows which files burn the most tokens, audits your .cursorrules for bloat, and projects when your Cursor Pro or Claude Pro plan runs out. Free: 44-detector security scanner (secrets, XSS, SQL injection) +

Custodia — Security & Compliance Autopilot

CustodiaLLC

OWASP Top 10, SOC 2, HIPAA, PCI DSS scanning with inline findings, AI fix prompts, and compliance gap reports. One click.

SecretGuard - Secret Detection

secretguard-cli

Real-time secret detection — catches API keys, tokens, and credentials as you type