Security & Compliance Monitoring Plugins
Monitor certificates, vulnerabilities, policy compliance, and security posture across your infrastructure with Icinga.
Plugins for tracking SSL/TLS certificate expiration, detecting security vulnerabilities, verifying file integrity, enforcing cryptographic policies, monitoring domain expiry, and ensuring compliance with security standards — helping you prevent breaches and audit failures before they happen.
AbuseIPDB Check
Checks if an IP address is listed on AbuseIPDB and reports abuse categories for Icinga monitoring
acme.sh Certificate Status Check
Monitors acme.sh certificate status, expiry, renewal failures, and installation integrity
AD Replication Check
Monitors Samba Active Directory domain controller replication status between cluster peers
Apache HTTPD Security Check
Checks the local security posture of an Apache HTTPD installation against CIS benchmarks.
Authentic2 Debug Mode Check
Icinga plugin to check if debug mode is enabled in Authentic2 configuration
Certificate Check
Monitors and validates SSL/TLS certificate chains for expiration, hostname, and SAN compliance
Certificate Check
Icinga plugin to monitor X.509 certificate expiry, trust chain, and hostname validation
Certificate Expiration Check
Monitors SSL/TLS certificate expiration dates by scanning certificates stored in a GIT repository
Certificate Transparency Log Check
Monitors SSL/TLS certificates against Certificate Transparency logs to detect forged certificates
Certificate Transparency Log Check
Monitors Certificate Transparency logs for unexpected or unknown SSL/TLS certificates
Checksum Verification Check
Icinga plugin to verify file integrity by checking files against checksum references
Cisco XR RPKI Server State Check
Monitors Cisco IOS-XR RPKI server state and ROA validation counts via SSH CLI scraping
CPU Vulnerabilities Check
Icinga check plugin that reports CPU vulnerabilities without active kernel mitigations
Crypto Policy Check
Icinga check plugin to verify the system-wide cryptographic policy matches the expected setting
DANE/TLSA Record Check
Icinga plugin to verify DANE/TLSA DNS records against TLS certificates served by a host
Domain Expiration Check
Icinga plugin to monitor domain name expiration dates and alert before domains expire
Domain Expiration RDAP Check
Icinga plugin to check domain name expiration dates via RDAP protocol
Drupal Site Health Check
Monitors Drupal sites for security updates, module updates, core errors, warnings, and pending database migrations.
EasyRSA Certificate Check
Icinga check plugin to validate EasyRSA certificates including CA certificate expiry
File Ownership Check
Icinga plugin to verify file ownership and group settings on critical system files
FortiOS Version Check
Checks FortiOS version for end-of-life status and available updates via endoflife.date API
FreeBSD Package Audit Check
Monitors FreeBSD package vulnerabilities using pkg audit for hosts and running jails
GoDaddy Domain Expiry Check
Icinga plugin to monitor GoDaddy domain expiry status via the GoDaddy API
GPG Key Expiration Check
Icinga plugin to monitor GPG key expiration dates for local and remote keys
Invoice Ninja License Check
Icinga plugin to monitor Invoice Ninja white label license expiration dates
LDAP Password Expiration Check
Icinga plugin to monitor LDAP user password expiration dates based on password policy
LDAP Schema Compliance Check
Icinga plugin to check OpenLDAP slapd database schema compliance using slapschema
Let's Debug Domain Check
Icinga plugin to check domain validation status using the Let's Debug diagnostic service
Lynis Security Audit Check
Icinga plugin that runs Lynis security audits across subnet hosts and reports hardening posture
Microsoft SNDS Blacklist Check
Checks if an IP address is blacklisted in Microsoft Smart Network Data Service (SNDS)
MySQL Performance Metrics Check
Icinga plugin to audit MySQL/MariaDB performance knobs and deprecated configuration variables
MySQL User Security Check
Checks MySQL/MariaDB user security: anonymous accounts, empty/weak passwords, wildcard hosts, legacy auth
MySQL/MariaDB TLS Check
Checks MySQL/MariaDB TLS/SSL posture including encryption, certificate expiry, and user enforcement
Nextcloud Enterprise Subscription Check
Checks Nextcloud Enterprise subscription status, license expiration, and supported user count.
Nextcloud Security Check
Icinga plugin to check Nextcloud instance security vulnerabilities via scan.nextcloud.com API
Nextcloud Security Scan Check
Icinga plugin to check Nextcloud instance security status via the Nextcloud Security Scan API
NGINX Security Check
Icinga plugin to audit the local security posture of an NGINX installation against CIS benchmarks
OpenVPN Version Check
Checks installed OpenVPN version against EOL dates and alerts on available updates
OS End of Life Check
Icinga plugin to check Linux distribution End of Life (EOL) status and alert before expiry
Python Virtualenv Security Audit Check
Icinga plugin to audit Python virtualenv packages for security vulnerabilities and outdated dependencies
RBL Blacklist Check
Checks if an SMTP server IP is listed on DNS-based Real-time Blackhole Lists (RBL/DNSBL)
SAP SCC4 Settings Check
Icinga plugin to monitor and verify SAP SCC4 client settings against expected configuration
Security.txt Expiration Check
Icinga plugin to monitor the expiration date of a website's security.txt file per RFC 9116
SELinux Mode Check
Icinga check plugin to verify that the current SELinux mode matches the expected setting
SPF Record Check
Icinga plugin to monitor and validate SPF (Sender Policy Framework) DNS records
SSL Certificate Expiration Check
Icinga plugin to monitor SSL/TLS certificate expiration dates with configurable warning thresholds
SSL Certificate File Expiration Check
Icinga check plugin to monitor SSL certificate file expiration dates using OpenSSL
WHOIS Expiration Check
Monitors domain name WHOIS record expiration dates and alerts before domains expire
WordPress Checksums Check
Icinga plugin to verify WordPress file integrity against official wordpress.org checksums
WordPress Installation Integrity Check
Icinga plugin to verify WordPress core and plugin file integrity using wp-cli checksums
X.509 Certificate Expiration Check
Icinga plugin to monitor X.509 SSL/TLS certificate expiration dates
XCA Certificate Expiration Check
Checks expiration dates of certificates and CRLs in a XCA-managed MySQL/MariaDB database
Report this plugin
Know a plugin that belongs here?
Submit a Plugin
Know a plugin we're missing? Share the repository or web page URL and we'll review it.