Security & dependency scanning for VS Code

Red Hat Dependency AnalyticsRed Hat

#1

Provides insights on security vulnerabilities and license compatibility in your application dependencies.

JFrogJFrog

#2

Security scanning for your Go, npm, Pypi, Maven and NuGet projects.

DoctorAppWorks Team

#3

A free security and quality audit tool for modern DevOps teams

Aqua TrivyAqua Security

#4

Find vulnerabilities, misconfigurations and exposed secrets in your code

GnuPG-ToolJ. Heilingbrunner

#5

Tool for a simple usage of GnuPG

CheckmarxCheckmarx

#6

Beat vulnerabilities with more-secure code

Checkmarx SAST 9.xCheckmarx

#8

Checkmarx SAST 9.x is a Checkmarx IDE extension that enables scanning/retrieving results on/from Checkmarx CxSAST

Check Updates of NPM PackagesIvan Iakimov

#9

Checks if all required NPM packages are up to date

OpenText™ Security AnalysisFortify

#10

The OpenText™ Application Security Analysis Extension helps developers identify security vulnerabilities by scanning and uploading to OpenText™ Application Security, or running scans through OpenText™ Core Application Security.

GPGJose Valecillos

#11

GPG Encrypter/Decrypter

Sonatype Nexus IQ Extension for VSCodeSonatype Community

#12

Sonatype Nexus IQ Extension for VSCode

Node Security Project (nsp)Adam Baldwin

#13

Checks for known vulnerabilities against the Node Security Project

Aikido SecurityAikido Security

#14

Secure code as it's written (& generated). In-line security for SAST, secrets, dependencies…

NPM AuditAbhijoy Basak

#15

View npm audit security report in visual format

WhiteSource AdviseWhiteSource

#17

Get real-time security alerts on your open source dependencies within your Visual Studio Code environment.

Mend AdviseMend

#18

Get real-time security alerts on your open source dependencies within your Visual Studio Code environment.

GitGuardian - Secrets SecurityGitGuardian

#19

A safety net to help developers safeguard their sensitive information (passwords, API key, tokens, ..) from accidental leaks in their code

weAuditTrail of Bits

#20

Bookmark findings and quickly navigate to areas of interest in the codebase

Sonatype for VS CodeSonatype

#21

Official Sonatype Lifecycle integration

Cycodecycodehq

#22

Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.

Cortex CloudPalo Alto Networks

#23

Scan your code for vulnerabilities with the power of Cortex Cloud.

CVE for NodeJSSneezry

#24

Show security alert for vulnerable dependencies of Node projects

Fortify Remediation Extension for Visual Studio CodeFortify

#25

Review and audit analysis results on Fortify Software Security Center from VS Code

HorusecZup Innovation

#26

Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

GitHub Security AlertsJonathan Carter

#27

View and resolve security alerts for GitHub repositories, directly from your editor.

OpenSSL Keygencoderabbi

#28

Generate OpenSSL secret key for your application

Contrast SecurityContrast Security

#29

Find security vulnerabilities through functional tests

Koidex - IDE Extension SecurityKoidex

#30

Analyze suspicious VS-based IDE extensions, navigate the extension jungle, and detect harmful code, risky access, and other security vulnerabilities.

OpenPGP EncryptionUgo Sangiorgi

#31

OpenPGP Encryption support for VSCode

EthSential1140251

#32

Security analysis for Ethereum smart contracts

OWASP IDEVulScannerDestinJiDee

#33

OWASP IDE-VulScanner is an open source IDE plugin tool to analyze an application’s components. It is built on top of OWASP Dependency Check, which scans your application’s component vulnerabilities during implementation phase.

ReDoS Checker for VSCodeRan350

#34

VSCode extension to detect vulnerable regular expressions

Bcryptor Hash on editorJesus Escamilla

#35

Hash text with bcrypt and match with plain text on editor

Node.js Package MetricsNode Package Metrics

#36

Displays node package metrics

VSCode ATT&CKredcanary

#37

Provides features for working with MITRE ATT&CK techniques

mythrilXingan Wang

#38

Visual Studio Code Solidity source code security checker

dependency-cleanerJack Thomson

#39

Dependency cleaner is handy extension for Visual Studio Code which removes unused dependencies from your project

OX Securityox.security

#40

Find and fix security issues in your code

npmLensPilaton

#41

Dependency update checker for npm, yarn, pnpm. Find outdated packages, update versions easily.

Checkmarx Developer AssistCheckmarx

#42

Standalone realtime security scanners - AI Secure Coding, OSS, Secrets, IaC, and Containers

Veracode Unified Plugin - Unofficial VersionJulian Totzek-Hallhuber + Yaakov Lerer

#43

A plugin to incorporate Static and SCA findings from Veracode Application Profiles

Dependency CheckJan-Erik Lysander

#44

This extension will help you make sure your local npm/yarn packages are not out of date with the package.json specified versions.

MendMend

#45

Increase your code’s security with advanced Static Application Security Testing (SAST)

Visualize NPM DependenciesArtT14

#46

Visualize the dependancy graph of your project with a click of a button, explore vulnerabilities

DigitSec Security PluginDigitSec Inc

#47

DigitSec Extension to analyze Salesforce code and configs for Cursor and VS Code

Clutch Gitleaks Secrets ScannerClutch Security

#48

A VS Code extension provided by Clutch Security to scan the workspace for secrets using Gitleaks

env-hiderahmetlacksdopamine

#49

An extension that helps you avoid leaking anything

VirusTotalSamuel Garces

#50

VirusTotal checker in VSCode

Env Maskerkaran kadam

#51

Mask secrets in .env files while streaming

Harness SAST and SCAQwiet AI

#52

Integrates Harness SAST and SCA into your editor.

CorridorCorridor

#53

Corridor secures your AI-generated code.

VS Code extension for project "Credential Digger"SAP OSS

#54

Runs credential digger scan

Fortify Code SecurityFortify

#55

OpenText™ Fortify Code Security Extension for VS Code helps developers identify and remediate security issues directly in the editor. Run scans, review issues at source, and use AI-assisted fixes with guided explanations to resolve vulnerabilities faster and build high-quality code

mauditm4yfly

#56

Simple source code security audit helper

xssencodeMedicean

#57

Converts characters from one encoding to another using a transformation. This tool will help you encode payloads in testing sql injections, XSS holes and site security.

SOPSifierHierynomus

#58

Encrypt/Decrypt files using SOPS

Tenable.csAccurics Inc.

#59

Tenable.cs scans your Infrastructure as Code (IaC) for possible vulnerabilities and mitigates risks before the infrastructure is provisioned.

NPM Audit Reportskumar.mca2010

#60

Generate Visual NPM Package Audit Report.

GPG SignMário Garrido

#61

GPG Encrypter/Decrypter/Sign

Code Project ScannerMK

#62

This plugin runs the OWASP Dependency-Check tool. Based on the results that OWASP Dependency-Check provides, it generates the results.

ChatGPT Security Code AnalyzerMilind Purswani

#63

Use ChatGPT to find vulnerabilities in your code.