Extend VAAST. Build for AI security.
Xtension is the open plugin ecosystem for VAAST. First-party Sentrinels included. Community-built tools welcome.
First-party
The Sentrinel Network
Attack surface discovery
PII and secret leakage detection
RBAC and scope bypass replay
AI endpoint fuzzing
Behavioral anomaly correlation
Structured pentest report generation
Multi-step attack orchestration
Visual attack graph and coverage
Sentrinels are official first-party Xtensions, available on Pro and Enterprise plans.
Community
For developers
Open registry. Your tools, your rules.
The Xtension registry is PR-based and hosted on GitHub. Fork the registry repo, add your manifest to the community directory, and open a pull request. Automated schema validation runs on every submission. All community Xtensions must link to a public GitHub repo and use MIT or Apache-2.0 licensing.
manifest.json
{
"id": "my-xtension",
"name": "My Xtension",
"version": "1.0.0",
"description": "Does something useful.",
"author": "your-github-username",
"entrypoint": "dist/index.js",
"permissions": ["proxy.read", "ui.tab"],
"tier": "free"
}