Recent posts
Latest from us

Chrome extension permissions explained: the full risk dictionary
What every Chrome, Edge and Firefox extension permission grants, and how risky it is. A reference to keep open while you review a manifest or a request.
Read article

Chrome extension permissions explained: the full risk dictionary
What every Chrome, Edge and Firefox extension permission grants, and how risky it is. A reference to keep open while you review a manifest or a request.
Read article

Lock down risky extensions without slowing your team down
You do not need a long policy document. You need four things that hold together: an allowlist, block by default, a request workflow, and the discipline to re-check the list. Here is how to build each.
Read article

Lock down risky extensions without slowing your team down
You do not need a long policy document. You need four things that hold together: an allowlist, block by default, a request workflow, and the discipline to re-check the list. Here is how to build each.
Read article

Spot a malicious extension like an expert security engineer
When an extension looks off, you do not need its source code to judge it. The first move is faster and far more revealing: compare what it does to what it asks for. This is the method we use at Ostral, step by step.
Read article

Spot a malicious extension like an expert security engineer
When an extension looks off, you do not need its source code to judge it. The first move is faster and far more revealing: compare what it does to what it asks for. This is the method we use at Ostral, step by step.
Read article

Find every risky extension hiding in your fleet
You cannot govern what you cannot see. Before any policy, you need a complete inventory of the extensions running in your organization. Here are the practical ways to build one, from a single machine to the whole fleet.
Read article

Find every risky extension hiding in your fleet
You cannot govern what you cannot see. Before any policy, you need a complete inventory of the extensions running in your organization. Here are the practical ways to build one, from a single machine to the whole fleet.
Read article
