Plexicus Indago is a lightweight, free web security audit tool designed for Chrome, specifically catering to Pentesters and DevSecOps professionals. This add-on enables real-time auditing of websites as users browse, automatically identifying vulnerabilities that could be exploited. Key features include a robust vulnerability scanner with CVE integration, which identifies outdated libraries, and specialized detection for React-specific vulnerabilities, ensuring comprehensive coverage for modern web applications.

In addition to its scanning capabilities, Plexicus Indago includes a secret and sensitive data sniffer that detects hardcoded credentials, API keys, and other sensitive information. It also provides real-time monitoring for Cross-Site Scripting (XSS) risks, checks security headers, and ensures CSRF protection by detecting missing anti-CSRF tokens. The tool's third-party script monitor further enhances security by auditing external scripts, making it an essential asset for maintaining web application security.