Review applications with an evidence-first security workflow that maps attack surfaces, tests authentication and access controls, traces dangerous inputs, models threats, and verifies fixes.
Install
- 1Add it in ChatGPT
Open Plugins in the ChatGPT sidebar (web or desktop), search for “Tahr Security” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.
Skills 12
- Tahr Audit Android
Audit Android application security boundaries
- Tahr Audit Secrets and Config
Audit secrets, dependencies, and deployment config
- Tahr Map Attack Surface
Map the real application attack surface
- Review Tahr Findings
Review findings from an existing Tahr account
- Tahr Secure App
Run an evidence-backed application security review
- Tahr Test Access Control
Prove authorization flaws and reject weak signals
- Tahr Test AI Agents
Test LLM, RAG, and agent trust boundaries
- Tahr Test Authentication
Test authentication and session boundaries
- Tahr Test Business Workflows
Test stateful business logic for abuse
- Tahr Threat Model App
Threat-model an entire existing application
- Tahr Trace Dangerous Inputs
Trace untrusted input to dangerous sinks
- Tahr Verify Security Fix
Verify fixes with exploit-focused regression tests
Things to ask
- “Run a comprehensive evidence-backed security review of this application and prioritize demonstrated findings.”
- “Map this application's attack surface, roles, trust boundaries, routes, parameters, and exposed interfaces.”
- “Verify this security fix in the original vulnerable context and test for bypasses and regressions.”