Bastion
Checks your security compliance status, failing tests and code findings from your Bastion account.
What Bastion can do in ChatGPT
Track and work on compliance by asking.
Compliance Status
See where you stand on SOC 2, ISO 27001, HIPAA and GDPR.
Failing Tests
Dig into the tests that fail and what they need.
Upload Evidence
Add evidence and submit controls for review from the chat.
Policy Answers
Ask questions answered from your own policies and documents.
Code Findings
Monitor code security findings and GitHub configuration status.
You stay in control
You approve access, and you can disconnect Bastion at any time.
Apps 1
What Bastion does in ChatGPT
The Bastion plugin connects your Bastion account to ChatGPT so you can manage security and compliance work by asking. It shows where you stand on frameworks such as SOC 2, ISO 27001, HIPAA and GDPR, and lets you dig into the tests that are failing.
It can also act, not just report. You can upload evidence and submit controls for review from the chat. You can ask security and compliance questions and get answers based on your own policies and documents in your Bastion knowledge base, instead of generic advice.
On the engineering side, it shows code security findings and the status of your GitHub configuration. The listing says all data is limited to your signed-in account, so you only ever see your own company's information. It is built for teams already using Bastion to prepare for audits.
Who it is for
- Startups preparing for a SOC 2 or ISO 27001 audit
- Security and compliance leads
- Engineering teams fixing code security findings
How to add Bastion to ChatGPT
- Open the Bastion listing in ChatGPT ↗.
- Click Install plugin.
- Sign in to your Bastion account when asked and approve the access it requests.
- Start a chat and ask for what you need, mentioning Bastion if ChatGPT does not pick it up.
- To stop, disconnect Bastion under apps in your ChatGPT settings.
Questions about Bastion
What is the Bastion ChatGPT plugin?
The Bastion plugin connects your Bastion account to ChatGPT so you can manage security and compliance work by asking. It shows where you stand on frameworks such as SOC 2, ISO 27001, HIPAA and GDPR, and lets you dig into the tests that are failing. It is listed in ChatGPT's plugin marketplace under Security.
What can I ask Bastion to do in ChatGPT?
For example: "What is our current SOC 2 compliance status?", "Which ISO 27001 tests are failing and why?", "Upload this access review as evidence for the control".
Who makes the Bastion plugin for ChatGPT?
The ChatGPT listing names Bastion Technologies as the developer. The version listed on 8 October 2026 was 1.0.0.
How do I add Bastion to ChatGPT?
Open the Bastion listing in ChatGPT, click Install plugin, sign in to your Bastion account and approve the access it asks for. Then ask for what you need in a chat, mentioning Bastion if ChatGPT does not pick it up.
Can Bastion change things in my account, or only read?
It reads your compliance status, tests, policies and code findings in Bastion, and it can upload evidence and submit controls for review. Data is limited to your own account.
Who is the Bastion plugin for?
Startups preparing for a SOC 2 or ISO 27001 audit, security and compliance leads and engineering teams fixing code security findings.
Which compliance frameworks does Bastion cover?
The listing names SOC 2, ISO 27001, HIPAA and GDPR.
Are answers based on my own policies?
Yes. Questions go to your Bastion knowledge base, so answers come from your own policies and documents.
Does Bastion see my ChatGPT chats?
When Bastion is connected, ChatGPT may share the parts of your chats and memories that matter for a request with Bastion. What Bastion does with that data falls under its own terms and privacy policy. ChatGPT keeps your training-data settings, and you can disconnect at any time.
How do I disconnect Bastion from ChatGPT?
Open your ChatGPT settings, go to apps, and disconnect Bastion. You can reconnect later from the listing.
What are alternatives to Bastion in ChatGPT?
Similar plugins in the ChatGPT marketplace include Above Security, Codex Security and Orca Security. Each has its own page in this directory.
Privacy and your data
When Bastion is connected, ChatGPT may share the parts of your chats and memories that matter for a request with Bastion. What Bastion then does with that data falls under its own terms and privacy policy, not only OpenAI's. ChatGPT keeps your training-data settings for data that comes from connected apps, and you can disconnect at any time.
Bastion privacy policy ↗Bastion terms ↗OpenAI: apps in ChatGPT ↗