Best Claude Code security tools

Structured logging, distributed tracing, and metrics — correlate agent swarm activity with application telemetry. As a mod (ADR-445): a tighten-only guard on its tools, /observe-mod, and a status file the console shows

Claude Code plugin (ADR-445 pattern) that ships a tighten-only tool guard hook denying business_pod_validate / business_pod_route_backend calls with secret-bearing, credential-path, or non-.json templates, plus a local /pods-mod command and a status file.

Market data ingestion -- feed normalization, OHLCV vectorization, and HNSW-indexed pattern matching.

The security default for organizations. Function hooks give every plugin a say on every event, in chain order, and the plugins a person installs sit in the user tier, beneath the organization's prepend tier and above its append tier. Some of what an organization sets today (its classic hooks, its managed CLAUDE.md and rules, its settings, its MCP allowlist, the deny rules in force on its machines) was never within a person's reach before function hooks; seated outermost, this plugin keeps exactly those out of the user tier's reach and adds no policy of its own. Everything else passes through untouched.

Dedicated ChatGPT Federation MCP publisher with isolated Nostr signing-key custody, OAuth-scoped publishing, and signed public-channel coordination over the Ruflo relay. As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows.

Claude Code mod that holds risky Bash commands (rm -r, force push, migrations) and shows what they would delete before running, cancelling after 60 s with no answer.

Schema migration management plugin for Claude Code with generate, validate, dry-run, and rollback commands, plus a tighten-only secret guard and /migrations-mod.

A Claude Code plugin and multi-tenant MCP service that coordinates team, run, task, memory and evidence records, plus a function-hook mod that blocks secrets in team writes.

pii-guard Mod (Claude Mods frontend)

AI safety scanning, PII detection, prompt injection defense, and adaptive threat learning.

AgentBBS cross-host agent federation for ruflo (ADR-164). Phase 1 exposes room coordination — federation_bbs_register / federation_bbs_publish / federation_bbs_watch / federation_bbs_human_join. Phase 2 (v3.40.0) adds signed cross-host federation — federation_bbs_identity (persistent Ed25519 node identity), federation_bbs_peer_add (pin a peer by nodeId + public key), federation_bbs_peers (audit/unpin), federation_bbs_serve (read-only pull endpoint), and federation_bbs_sync (pull pinned peers and union-merge what verifies). Every merged envelope is Ed25519-verified against a pinned key; unsigned/misattributed/oversize/over-hop envelopes are dropped and counted. Transport is HTTP pull and works on any network (Tailscale, LAN, VPN, loopback) — no tailnet required. Coordinates work ownership via claim messages (ClaimIssued/Released/Handoff/Ack). agentbbs lives in optionalDependencies; every handler gracefully degrades to {degraded:true} when the package is missing (ADR-150 pattern). As a mod (ADR-445 pattern): a tighten-only tool guard, a local slash command, and a status file the console shows.

DeepSeek chat and reasoning completions as ruflo skills (see `commands/ruflo-deepseek-harness.md`).