Security Monitoring Plugins
Icinga plugins for monitoring firewalls, certificates, antivirus, VPNs, intrusion detection, and security infrastructure.
Monitor your security stack with plugins covering SSL/TLS certificate expiry, firewall health, antivirus status, VPN tunnels, blacklist checks, rootkit detection, and threat intelligence. Detect vulnerabilities, expired credentials, and misconfigurations before they become breaches.
acme.sh Certificate Status Check
Monitors acme.sh certificate status, expiry, renewal failures, and installation integrity
Apache httpd Information Disclosure Check
Icinga plugin to check Apache httpd information disclosure in HTTP responses
Authentik Health Check
Icinga plugin to monitor Authentik identity provider health via its API
Barracuda Firewall Temperature & Fan Check
Monitors Barracuda firewall temperature sensors and fan status via SNMP for Icinga
Barracuda VPN Tunnel State Check
Monitors Barracuda firewall VPN tunnel states via SNMP for Icinga
Certificate Expiry Check
Icinga plugin to monitor SSL/TLS certificate expiry dates for HTTPS endpoints
Certificate Expiry Check
Icinga plugin to monitor SSL/TLS certificate expiry dates for web servers
Certificate Expiry Check
Icinga plugin to monitor SSL/TLS certificate expiry dates for HTTPS endpoints
Check Point IPS Update Check
Monitors Check Point IPS database update status on Management Servers and managed Gateways
ClamAV Daemon Connection Check
Monitors ClamAV daemon (clamd) connectivity and response time for Icinga
ClamAV Scan Check
Icinga check plugin that monitors ClamAV antivirus scan results for detected threats
ClamAV Scan Results Check
Icinga plugin to check ClamAV antivirus scan results from clamscan log files
ClamAV Virus Scan Check
Icinga check plugin for ClamAV antivirus scanning and virus detection reporting
Conntrack NAT Source Address Check
Icinga plugin to check conntrack NAT source IP addresses for a given destination
Conntrack Table Usage Check
Checks netfilter connection tracking table usage and kernel drop/eviction counters
Debian System Integrity Check
Icinga plugin to verify Debian system integrity using debsums for rootkit and tampering detection
DirXML/Identity Manager Driver State Check
Monitors Novell DirXML and Micro Focus Identity Manager driver states for Icinga
Drupal Site Health Check
Monitors Drupal 8 sites for security updates, module updates, core errors, and database migrations
Fail2ban Check
Monitors fail2ban banned IP counts across all jails with per-jail threshold alerting.
Fail2Ban Check
Icinga plugin to monitor Fail2Ban jails, banned IPs, and ban expiration times
Fortigate Dead Gateway Check
Monitors Fortigate firewall dead gateways via SNMP with packet loss and RTT thresholds
FortiGate Health Check
Comprehensive Icinga monitoring plugin for Fortinet FortiGate firewall health via REST API
FortiOS Firewall Statistics Check
Monitors FortiGate firewall policy traffic statistics via FortiOS REST API for Icinga
FortiOS HA Cluster Status Check
Monitors FortiGate FortiOS high-availability cluster status and member count via REST API
Gemini Server Check
Icinga plugin to monitor Gemini protocol servers, checking status codes, content, and certificates
Gitlab Access Tokens Expiration Check
Icinga plugin to monitor Gitlab personal, group, and project access token expiration dates
GitLab Version Check
Checks installed GitLab version for EOL status, available updates, and security vulnerabilities
Graylog Alerts Check
Monitors Graylog event stream alerts and reports critical states to Icinga2
HP Firmware Check
Checks HPE controller, SSD drive, and iLO firmware for critical vulnerabilities via SNMP
HTTPS Certificate and Content Check
Icinga plugin to check HTTPS certificate validity, expected status codes, and response content.
Infrastructure MITM Detection Check
Icinga check plugin for detecting Man-in-the-Middle attacks via traceroute and JARM fingerprinting
IPFire Pakfire Update Check
Icinga plugin to check IPFire Pakfire updates, package upgrades, and pending reboots
Keycloak Stats Check
Icinga plugin to monitor Keycloak server runtime stats, uptime, Java version, and feature flags
LDAP/LDAPS Check
Monitors LDAP/LDAPS server availability and response time for Icinga monitoring systems
Mailcow Rspamd Status Check
Icinga plugin to monitor Rspamd service status and mail filtering stats in Mailcow
Nextcloud Security Scan Check
Checks the security rating of a Nextcloud server via the Nextcloud security scanner API.
NGINX Information Disclosure Check
Checks how much an NGINX server discloses about itself in HTTP response headers and error pages
Nmap Port Scan Check
Icinga check plugin that performs nmap port scans and validates open ports against a whitelist
OCSP Stapling Check
Icinga plugin to monitor OCSP stapling validity and expiration on TLS servers
OpenCloud Security Check
Icinga plugin to scan and rate the security level of OpenCloud instances
OpenLDAP SyncRepl Replication Check
Checks OpenLDAP syncrepl replication state between provider and consumer servers
OpenVAS Feed Status Check
Icinga plugin to check if Greenbone OpenVAS vulnerability feeds are up to date
OpenVPN Client List Check
Icinga plugin to list and monitor clients connected to an OpenVPN server
OPNsense Firewall Check
Icinga check plugin for monitoring OPNsense firewall updates, IPsec, WireGuard, HA, and services
OPNsense pfctl State Table Check
Monitors OPNsense pfctl state table entries with configurable warning and critical thresholds.
Palo Alto HA Sync Check
Monitors Palo Alto firewall HA synchronisation status via REST API for Icinga
PAM Authentication Check
Icinga plugin to test PAM (Pluggable Authentication Module) operations using pamtester
Pi-hole Status Check
Icinga plugin to monitor Pi-hole status, blocking statistics, and availability
Postfix Greylist Policy Daemon Check
Monitors Postfix greylisting policy daemon health by testing TCP policy responses
Postfwd Rate Limit Check
Icinga plugin to check postfwd rate limits and detect senders exceeding sending thresholds
Proxmox Mail Gateway Check
Icinga plugin to monitor Proxmox Mail Gateway mail counts, spam, virus, and relay domain configuration
RADIUS Server Check
Icinga plugin to monitor RADIUS server availability and response time using radclient
RADIUS Server Check
Monitors RADIUS server availability and authentication response for Icinga
Random Monitoring Check Plugins Collection
Collection of Icinga check plugins for SSH, domain expiry, backups, OpenBSD updates, and more
RBL Blacklist Check
Icinga plugin to check if an SMTP server is listed on DNS-based Real-time Blackhole Lists (RBL)
Rootkit Scanner Check
Icinga check plugin that scans Linux systems for approximately 175 known rootkits
SafeNet HSM State Check
Checks the operational state and usage level of a Gemalto SafeNet ProtectServer Network HSM via SSH.
SAP Base Health Check
Monitors SAP system base health via CCMS, sapcontrol, RFC checks, and certificate expiration for Icinga
SATEON Field Network Device Status Check
Icinga plugin to monitor SATEON field network device status and hardware faults
Secure IMAP Connection Check
Monitors Secure IMAP (SIMAP) server connectivity and SSL certificate validity for Icinga
SentinelOne Threat Check
Icinga plugin to check for SentinelOne endpoint security threats via cloud API
Shadowsocks Server Check
Icinga plugin to monitor Shadowsocks proxy server availability by testing connections through the proxy
Shibboleth 3 IdP Login Check
Icinga plugin to perform end-to-end Shibboleth 3 IdP login checks with response time thresholds
Sophos Central Status Check
Monitors Sophos Central cloud service alerts and endpoint health status via API
Sophos XG Firewall Check
Monitors Sophos XG firewalls via SNMP for disk, memory, HA, licenses, services, and VPN status
SSH Authentication Methods Check
Icinga plugin to check enabled and disabled SSH authentication methods on remote hosts
SSH Daemon Log Check
Icinga plugin to monitor OpenSSH daemon logs for security events and anomalous login activity
SSH Login Check
Monitors SSH login authentication success or failure for Icinga monitoring systems
SSL Certificate Expiration Check
Monitors SSL/TLS certificate expiration dates and alerts before certificates expire
SSL/TLS Certificate Check
Monitors SSL/TLS certificate validity, expiration, and security best practices for Icinga
strongSwan IPSec Connections Check
Monitors strongSwan IPSec VPN connection states, IKE/CHILD SA status, and traffic counters.
TCP Connection Check
Icinga plugin to monitor TCP connections, response times, and SSL certificate validity
Tor Node Check
Icinga plugin for monitoring the status and availability of a Tor network node
Trassir NVR Health Check
Icinga plugin to monitor Trassir NVR server health and camera archive recording status
Trend Micro Deep Security Check
Icinga check plugin for monitoring Trend Micro Deep Security 9.5 host status and antimalware events
UniFi PoE Disconnect Check
Monitors and secures PoE port access on Ubiquiti UniFi switches by detecting disconnect events
VirusTotal URL Scan Check
Icinga check plugin that submits URLs to VirusTotal and alerts on malicious scan results
WatchGuard Firewall Check
Icinga plugin to monitor WatchGuard firewall health via SNMP including CPU, RAM, connections and VPN
Windows Services Check
Monitors Windows services status including automatic services and McAfee services for Icinga
WordPress Security Scan Check
Icinga plugin to scan WordPress sites for vulnerabilities, exposures, and hardening issues
XMPP Server Check
Icinga check plugin for monitoring XMPP server connectivity, STARTTLS, and certificate validity
Report this plugin
Know a plugin that belongs here?
Submit a Plugin
Know a plugin we're missing? Share the repository or web page URL and we'll review it.