$ claude plugin marketplace add Exabeam-Labs/plugins $ claude plugin install soc@exabeam # skills: soc-investigate, triage-cases, rule-tuning > investigate <id>
Add Exabeam's knowledge and capabilities to the AI agent of your choice, on your terms. Bring your own AI, your choice of model, agent harness and data sovereignty, and put Exabeam's products to work inside it.
The Exabeam Plug-in Catalog is Exabeam's official collection of supported plugins for AI CLI environments such as Claude Code and OpenAI Codex. Each plugin extends what Exabeam can do by packaging product knowledge, workflows, and integrations as skills that security practitioners can invoke directly from the agent tools they already use.
Analysts, detection engineers, and SOC leads don't have to wait for new features to reach a console. They can install a plugin in minutes and put Exabeam-aware skills to work on everyday tasks like investigating alerts, triaging cases, tuning detections, and more.
Every plugin in the catalog is built, tested, and maintained by Exabeam. It is versioned against Exabeam releases and backed by Exabeam support under your existing agreement, so teams can adopt agent-driven workflows with confidence.
Plugins run in the agent environment you choose, against your own Exabeam tenant, so you keep control over model selection and data sovereignty.
Plugins are designed so consequential actions stay under practitioner control. Approvals are required before state-changing operations, and containment is recommended rather than executed automatically.
A single command adds Exabeam's entire Plug-in Catalog to your AI agent, so every supported plugin is available to you at once. It works the same way in Claude Code and OpenAI Codex.
claude plugin marketplace add Exabeam-Labs/plugins
codex plugin marketplace add Exabeam-Labs/plugins
Each plugin has one install key in the format <plugin>@exabeam, and it's the same in both Claude Code and Codex. For example, the SOC plugin installs as soc@exabeam in either tool.
Exabeam Agentic SOC plugin, an agentic SOC analyst for Exabeam New-Scale, as a plugin for Claude Code and OpenAI Codex. It does the work, not just the chat: hand it an alert or a case and it pulls the events, pivots on the entities, baselines them against what is normal for them, tests the benign explanation and writes the verdict, then acts in the SIEM: opens and annotates the case, updates…
View details →Check back here
The plugins distributed here are distributed under the Exabeam Enterprise Agreement and are subject to the same terms of use as the Exabeam products they work with. This Plug-in Catalog is governed by the same agreement unless specified otherwise; each plugin carries its own LICENSE and NOTICE.
A plugin may include open-source software. That software stays under its own license inside the distribution, its license text ships with the plugin, and the plugin's LICENSE names what it includes and where the source is also available (for the plugins here, through the Open Agent and AI Security community). The Enterprise Agreement governs this software distribution.
