Free
$0
- Up to 25 extensions per list
- Daily checks
- Risk report and change log
- Slack, Discord and Google Chat alerts
Browser extension risk, monitored
Your team's Chrome extensions, reviewed before they turn against you.
Extensions your company installs by policy update without asking anyone, and one update can add access to every website. Extension Watch reads each package straight from Google, grades its access, checks the list every day, and tells your team's chat when an update asks for more.
Try it
Paste extension IDs or Chrome Web Store URLs, one per line.
Pricing
Every new list starts on a 14 day Team trial with every feature. Billing is not connected yet, so no plan is charged and Team is granted by the operator.
Planned price
Team
$29/month
- Up to 50 extensions per list
- CSV inventory and change log exports
- Chrome policy export
- Admin audit log
Workspace
Review the extensions you scanned, then set a watchlist to catch silent updates.
The access grade shows how much an extension can do on your computer, not whether it is malicious. A password manager needs a high grade to work; a calculator does not.
No scan yet. Paste extension IDs or Web Store links on the start page to see their access grades here.
| Extension | Access | Score | Top finding | Details |
|---|
Methodology
Every grade comes from published rules. No model, no hidden weights.
Each finding is worth points by how much it can reach. Findings that describe the same power (for example broad host access, content scripts on all sites and script injection) form a group, and a group counts once, at its highest value. The score is the sum of the groups, capped at 100. Optional permissions are listed with 0 points because the browser does not grant them at install. Grade bands run from 0 to 19 for A, 20 to 39 for B, 40 to 59 for C, 60 to 79 for D, and 80 or more for F.
Watchlist
You are on the admin link. Keep it private, because it can change alerts and delete this list. Share the read-only link above instead.
Never post your admin link in a public issue.
Download inventory CSV Download change log CSV Download audit CSV Download Chrome policy JSON
Threshold mode leaves extensions that are not on the list installable and blocks only the listed extensions graded at or below the threshold. Default deny blocks every extension that is not on the list. Both modes keep every extension off the debugger permission and off the sensitive sites.
To apply the policy, open the Google Admin console, go to Chrome browser, then Custom Configurations under Chrome Enterprise Core. Paste the downloaded JSON as the ExtensionSettings policy value. On Windows, deploy the same JSON through the Chrome Group Policy templates. On macOS, add it to the com.google.Chrome configuration profile plist. On Linux, write it to a file under /etc/opt/chrome/policies/managed/.