security guidance plugin