PluginStatsCorgea installs statistics
By Corgea · GitHub Marketplace
Security & quality for agents and humans — SAST, SCA, secrets, IaC, containers
Corgea has 768 recorded installs on GitHub Marketplace.
It ranks #213 of 1,393 tracked GitHub Marketplace listings by installs.
PluginStats has 1 daily observations since Oct 16, 2026; the latest is from Oct 16, 2026.
About Corgea
Corgea is the AI-native application security platform that finds the vulnerabilities your scanners miss, and ships verified fix PRs your developers actually merge. Full coverage across SAST, SCA, secrets, IaC, and containers, with 2x more true positives and 3x fewer false positives than legacy tools. Trusted by Zapier, epilot, Yageo, and and many others.
One AppSec platform. Real fixes. Less noise.
Corgea finds, triages, and auto-fixes the vulnerabilities that actually matter across your code, dependencies, secrets, IaC, and containers. Built on modern LLM-driven analysis, Corgea catches business logic flaws, broken authentication, and authorization gaps that syntax-only scanners can't see, and turns each finding into a verified pull request your developers can review and merge.
No more 800-finding backlogs. No more "we'll get to it next sprint." Just fixes that ship.
What Corgea covers
• AI-native SAST — Detects OWASP Top 10, CWE Top 25, plus business logic, authentication, and authorization flaws traditional SAST tools miss. • Software Composition Analysis (SCA) — Find vulnerable open source dependencies with reachability analysis, so you only fix what's actually exploitable. • Secrets scanning — Catch hardcoded credentials, API keys, and tokens before they leak. • Infrastructure as Code (IaC) — Terraform, CloudFormation, Kubernetes, Helm, and more. • Container scanning — Surface vulnerabilities in your images and base layers.
Auto-remediation that actually works
For every finding, Corgea's AI generates a fix, statically validates it for correctness, and opens a pull request, complete with an explanation of what changed and why it's safer. Your developers review, merge, and move on. Mean time to remediation drops from weeks to hours.
~3x fewer false positives
Corgea's AI reasons about your code the way a senior engineer would, understanding framework conventions, custom sanitizers, and your internal security controls. The result: roughly 3x fewer false positives than legacy SAST tools, so developers stay in flow and stop ignoring security alerts.
Description from the GitHub Marketplace listing.
- Security
- Code review
Where Corgea sits in the listing
Each band is one page of 20. Installs on a log scale. Placement is projected from installs, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.
Charts
Images: 30d · 1y · all time · 1600×900 dark
Adoption over time
7/30/90-day growth
Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.
Recent observations
Full history (1)Similar GitHub Marketplace plugins
Data source
Install counts (installations of each GitHub App across accounts and organizations) are read from public GitHub Marketplace listing pages. GitHub does not publish ratings. Category positions reflect GitHub's own popularity sort.
Listing: https://github.com/marketplace/corgea. First seen Oct 16, 2026; last successful collection Oct 16, 2026. See the methodology.