Is Acquia Web Governance extension safe?
Acquia Web Governance extension embeds Monsido OAuth client secrets used when refreshing tokens.
When an access token needs refresh, the service worker posts client_id, client_secret, refresh_token, grant_type, and redirect_uri to login.monsido.com/oauth/token. The embedded production and staging client secrets are part of that request flow, so they are packaged with every installed copy of the extension.
Who publishes itMonsido - no other listings under this identity
Monsido - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Acquia Web Governance extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- login.monsido.com
Acquia Web Governance extension sends data to login.monsido.com. No other extension we have analysed sends data here.