claude

web-security-guard

Integrated security for websites and apps: hardening, secure authentication (email verification, 2FA, passkeys), payment privacy, WAF defense agent with lockdown, 4-layer Fortress architecture and automated GitHub security workflows.

1,005 on GitHubby Fedev0.2.1Apache-2.0updated 3 months agoSecurity, Compliance, & Legal
/

Plugin web-security-guard from marketplace awesome-claude-code-plugins in ccplugins/awesome-claude-code-plugins. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (6)

  • architettura-fortezza

    Progetta e installa un'infrastruttura di sicurezza a 4 livelli dove il cuore (dati e chiavi) è offline e staccato, lo scudo è invisibile agli scanner e il server reale è nascosto. Usare quando l'utente vuole un sistema "chiuso in una scatola", un reverse proxy invisibile, un'alternativa self-hosted

  • autenticazione-sicura

    Implementa autenticazione sicura quando un sito/app richiede registrazione, login o account utente. Copre verifica email con codice, autenticazione a due fattori (2FA/TOTP), passkey e chiavi di sicurezza, hashing password, sessioni e recupero account. Trigger - "login", "registrazione", "verifica em

  • difesa-attacchi

    Aggiunge a un sito/app un agente di difesa che rileva e blocca richieste malevole (SQL injection, XSS, path traversal, brute force, bot) con rate limiting, blocklist IP e modalità lockdown che chiude il sistema preservando i dati. Trigger - "blocca attacchi", "anti-attacco", "firewall", "WAF", "lock

  • hardening-siti

    Applica regole di sicurezza (hardening) ogni volta che si costruisce, modifica o revisiona un sito web o un'app. Copre security headers, CSP, HTTPS, validazione input, cookie, CORS, upload, gestione errori e OWASP Top 10. Trigger - "crea un sito", "costruisci un'app", "metti in sicurezza", "proteggi

  • privacy-pagamenti

    Protegge dati di pagamento e abbonamenti quando un sito/app gestisce checkout, carte, subscription o fatturazione. Copre integrazione sicura Stripe/PayPal, verifica firma webhook, PCI-DSS, GDPR, minimizzazione dati e ciclo di vita degli abbonamenti. Trigger - "pagamenti", "checkout", "abbonamento",

  • sicurezza-github

    Aggiunge alle repository GitHub dei siti workflow di sicurezza automatici - scansione dipendenze vulnerabili, ricerca di segreti/chiavi nel codice, analisi statica CodeQL e Dependabot. Trigger - "sicurezza repo", "GitHub Actions di sicurezza", "scansione repository", "metti la sicurezza nella repo",

Slash commands (2)

  • /web-security-guard:proteggi-sito

    Installa nel progetto corrente tutte le protezioni - middleware anti-attacco, security headers, file di sicurezza GitHub e hardening

  • /web-security-guard:security-audit

    Esegue un audit di sicurezza completo del progetto corrente e produce un report con problemi e correzioni

View source on GitHub claudecodeplugins.dev

Problems found in this repo's manifests

  • "2-commit-fast" points to ./plugins/2-commit-fast, which doesn't exist in the repo — install will fail
  • "accessibility-expert" points to ./plugins/accessibility-expert, which doesn't exist in the repo — install will fail

More from ccplugins/awesome-claude-code-plugins

All 192 plugins →

stratarts

claude

27 professional business strategy skills - idea validation, market analysis, business modeling, marketing, metrics, and fundraising using proven frameworks

27 commands

1,005

craftsman

claude

Engineering-discipline toolkit: minimal-diff coding, root-cause debugging, recurring-bug detection, and honest completion reports. Ten agents, seven skills, and cross-platform hooks.

7 skills · 2 commands · 10 agents · hooks

1,005

Parallel Codex workers inside Claude Code — multi-agent orchestration with git worktree isolation, resumable sessions, and dual-model PR review.

9 commands · 3 agents · 2 MCP servers

1,005

weft

claude

Deterministic workflow tracking with event-sourced logs for Claude Code

11 skills · hooks

1,005

bedrock

claude

Second Brain automation for Obsidian vaults — entity management, ingestion, compression, and sync via Claude Code skills

10 skills

1,005

bullpen

claude

The senior dev, unbundled: ten senior-dev instincts as skills (skeptic, closer, attacker, fact-checker, interrogator, stop-digging, doorman, historian, chameleon, explainer), each with lite/full/ultra intensity.

10 skills

1,005

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Install the "AAS Secure App Builder" workflow plugin from Agentic Awesome Skills.

12 skills

sickn33/agentic-awesome-skills 49,620

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain web-security-guard?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins192 plugins