Security & Compliance Monitoring Plugins
Monitor certificates, vulnerabilities, policy compliance, and security posture across your infrastructure with Icinga.
Plugins for tracking SSL/TLS certificate expiration, detecting security vulnerabilities, verifying file integrity, enforcing cryptographic policies, monitoring domain expiry, and ensuring compliance with security standards — helping you prevent breaches and audit failures before they happen.
AbuseIPDB Check
Checks if an IP address is listed on AbuseIPDB and reports abuse categories for Icinga monitoring
AD Replication Check
Monitors Samba Active Directory domain controller replication status between cluster peers
Authentic2 Debug Mode Check
Icinga plugin to check if debug mode is enabled in Authentic2 configuration
Certificate Check
Monitors and validates SSL/TLS certificate chains for expiration, hostname, and SAN compliance
Certificate Expiration Check
Monitors SSL/TLS certificate expiration dates by scanning certificates stored in a GIT repository
Certificate Transparency Log Check
Monitors SSL/TLS certificates against Certificate Transparency logs to detect forged certificates
Certificate Transparency Log Check
Monitors Certificate Transparency logs for unexpected or unknown SSL/TLS certificates
Checksum Verification Check
Icinga plugin to verify file integrity by checking files against checksum references
Cisco XR RPKI Server State Check
Monitors Cisco IOS-XR RPKI server state and ROA validation counts via SSH CLI scraping
Crypto Policy Check
Icinga check plugin to verify the system-wide cryptographic policy matches the expected setting
DANE/TLSA Record Check
Icinga plugin to verify DANE/TLSA DNS records against TLS certificates served by a host
Domain Expiration Check
Icinga plugin to monitor domain name expiration dates and alert before domains expire
Domain Expiration RDAP Check
Icinga plugin to check domain name expiration dates via RDAP protocol
Drupal Site Health Check
Monitors Drupal sites for security updates, module updates, core errors, warnings, and pending database migrations.
EasyRSA Certificate Check
Icinga check plugin to validate EasyRSA certificates including CA certificate expiry
File Ownership Check
Icinga plugin to verify critical system file ownership matches expected owner and group values
FortiOS Version Check
Icinga plugin to check FortiOS version for end-of-life status and available updates
FreeBSD Package Audit Check
Monitors FreeBSD package vulnerabilities using pkg audit for hosts and running jails
GitLab Version Check
Icinga plugin to check GitLab version for EOL status, available updates, and security vulnerabilities
GoDaddy Domain Expiry Check
Icinga plugin to monitor GoDaddy domain expiry status via the GoDaddy API
GPG Key Expiration Check
Icinga plugin to monitor GPG key expiration dates for local and remote keys
Invoice Ninja License Check
Icinga plugin to monitor Invoice Ninja white label license expiration dates
Keycloak Version Check
Checks if the installed Keycloak version is end-of-life or outdated against endoflife.date API
LDAP Schema Compliance Check
Icinga plugin to check OpenLDAP slapd database schema compliance using slapschema
Let's Debug Domain Check
Icinga plugin to check domain validation status using the Let's Debug diagnostic service
Microsoft SNDS Blacklist Check
Checks if an IP address is blacklisted in Microsoft Smart Network Data Service (SNDS)
MySQL User Security Check
Checks MySQL/MariaDB user security for empty passwords, wildcard hosts, and excessive privileges
Nextcloud Enterprise Subscription Check
Icinga plugin to check Nextcloud Enterprise subscription status, license expiration, and user limits
Nextcloud Security Check
Icinga plugin to check Nextcloud instance security vulnerabilities via scan.nextcloud.com API
Nextcloud Security Scan Check
Icinga plugin to check Nextcloud instance security status via the Nextcloud Security Scan API
Nextcloud Security Scan Check
Checks Nextcloud server security rating and vulnerabilities via the Nextcloud security scanner API
OpenVPN Version Check
Checks if the installed OpenVPN version is end-of-life or outdated using the endoflife.date API
OS End of Life Check
Icinga plugin to check Linux distribution End of Life (EOL) status and alert before expiry
Python Virtualenv Security Audit Check
Icinga plugin to audit Python virtualenv packages for security vulnerabilities and outdated dependencies
RBL Blacklist Check
Checks if an SMTP server IP is listed on DNS-based Real-time Blackhole Lists (RBL/DNSBL)
SAP SCC4 Settings Check
Icinga plugin to monitor and verify SAP SCC4 client settings against expected configuration
Security.txt Expiration Check
Icinga plugin to monitor the expiration date of a website's security.txt file per RFC 9116
SELinux Mode Check
Icinga check plugin to verify that the current SELinux mode matches the expected setting
SPF Record Check
Icinga plugin to monitor and validate SPF (Sender Policy Framework) DNS records
SSL Certificate Expiration Check
Icinga plugin to monitor SSL/TLS certificate expiration dates with configurable warning thresholds
SSL Certificate File Expiration Check
Icinga check plugin to monitor SSL certificate file expiration dates using OpenSSL
VirusTotal URL Scan Check
Icinga plugin to scan URLs against 90+ security vendors via VirusTotal API
WHOIS Expiration Check
Monitors domain name WHOIS record expiration dates and alerts before domains expire
WordPress Installation Integrity Check
Icinga plugin to verify WordPress core and plugin file integrity using wp-cli checksums
X.509 Certificate Expiration Check
Icinga plugin to monitor X.509 SSL/TLS certificate expiration dates
XCA Certificate Expiration Check
Checks expiration dates of certificates and CRLs in a XCA-managed MySQL/MariaDB database
Report this plugin
Know a plugin that belongs here?
Submit a Plugin
Know a plugin we're missing? Share the repository or web page URL and we'll review it.