Third party plugin security

[Danny Luksa]

Hello,

I'm hoping to implement plugins from Knights of the Editing Table <removed links> into my post workflow. Specifically, Excalibur <removed links> and Grave Robber <removed links> I edit in an enterprise organization, so any plugin installations go through our system administrators.

The issue is — these plugins do not pass the security checks our IT team performs. I'm told numerous security vendors have flagged it as malware. Thankfully the developer of the software is very responsive and has explained to me the reasoning behind these red flags. Between that and these plugins' very positive reputation in editing circles, I am very confident they do not contain malware. However understandably, our IT team will not move forward with the installation of these plugins.

I'm curious if anyone is able to share information about use cases for third party plugins like these in enterprise networks? Does anybody have extensive experience with these ones specifically? Is it normal for third party plugins to be flagged as potential malware? Are these ones actually malicious?

On paper, these plugins would save hours. Any info is greatly appreciated.

[Peru Bob]

Moved from Premiere Pro forum to the Enterprise and Teams forum.

[Danny Luksa]

Thanks!

[Kevin Stohlmeyer]

@Danny Luksa @Peru Bob I'm moving back to the Premiere forum for you - you'll find more responses from Premeire users familar with these plugins than the Enterprise forum. Sorry for any confusion.

[R Neil Haugen]

This is a problem across many, many corporations with video/audio post divisions.

As ... the type of security the um ... staffers (freaks seem interested in being security people) ... running security for corporations look for is not used in plugins. Ain't none of the plugins from Maxon, Digital Anarchy, any of those, gonna have any malware what so freaking ever. If they did, they couldn't sell their products  at all.

Because the vast majority of their market is professional users.

And ... a lot of the people using those plug-ins run on systems that are air-gapped. Talk about total security.

Is your entire organization air-gapped? Doubtful ...

But getting security wonks to actually test things out is often difficult. They won't go past "My test software says there is a 0.000001% chance of malware, so you can't use it."

Best wishes.