Recent posts
Latest from us
The browser extension permission dictionary
Every permission a browser extension can request, what it actually grants, and the risk if it is abused. A reference to keep open while you read a manifest or review a request.
Read article
The browser extension permission dictionary
Every permission a browser extension can request, what it actually grants, and the risk if it is abused. A reference to keep open while you read a manifest or review a request.
Read article
Lock down risky extensions without slowing your team down
You do not need a long policy document. You need four things that hold together: an allowlist, block by default, a request workflow, and the discipline to re-check the list. Here is how to build each.
Read article
Lock down risky extensions without slowing your team down
You do not need a long policy document. You need four things that hold together: an allowlist, block by default, a request workflow, and the discipline to re-check the list. Here is how to build each.
Read article
Spot a malicious extension like an expert security engineer
When an extension looks off, you do not need its source code to judge it. The first move is faster and far more revealing: compare what it does to what it asks for. This is the method we use at Ostral, step by step.
Read article
Spot a malicious extension like an expert security engineer
When an extension looks off, you do not need its source code to judge it. The first move is faster and far more revealing: compare what it does to what it asks for. This is the method we use at Ostral, step by step.
Read article
Find every risky extension hiding in your fleet
You cannot govern what you cannot see. Before any policy, you need a complete inventory of the extensions running in your organization. Here are the practical ways to build one, from a single machine to the whole fleet.
Read article
Find every risky extension hiding in your fleet
You cannot govern what you cannot see. Before any policy, you need a complete inventory of the extensions running in your organization. Here are the practical ways to build one, from a single machine to the whole fleet.
Read article