Is Avira Browser Safety safe?

Clean risk

Avira Browser Safety sends every URL you visit to Avira's cloud classification API and logs browsing events to Mixpanel analytics.

On each page navigation, the extension transmits the full normalized URL to v2.auc.avira.com for malware/phishing classification. In parallel, a persistent random user ID is linked to analytics events — including visited URLs and the list of all installed Chrome extensions — sent to Mixpanel. The extension-scan feature that collects installed extension metadata requires the optional 'management' permission and is off by default.

Avirav4.3.1.70Chrome Web Store
0Risk
Who publishes it

Gen Digital - 17 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Avira
Declared legal entity
Gen Digital
Registered address
60 E Rio Salado Pkwy, Tempe, AZ 85281-9124, US
Registered contact
Gen Digital Inc

Same store account

2 other listings published from this account, 15.0M+ users between them, none of them carrying a finding.

Shared hosts - 10 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

dispatch.avira-update.com
Also called by 2 other listings, including Avira Browser Safety
download.avira.com
Also called by 2 other listings, including Avira Browser Safety
offers.avira.com
Also called by 2 other listings, including Avira Browser Safety
trackers-test-page.avira.org
Also called by 2 other listings, including Avira Browser Safety
api.ciuvo.com
Also called by 4 other listings
avira.com
Also called by 4 other listings, including Avira Password Manager
extensions.avira.com
Also called by 4 other listings, including Avira Password Manager
ciuvo.com
Also called by 5 other listings
stage-stats.securebrowser.com
Also called by 5 other listings, including Norton Safe Web
stats.securebrowser.com
Also called by 5 other listings, including Norton Safe Web

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.3.1.57. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 4.3.1.70, which we have not unpacked yet.

  • Read and change your data on every site you visit

    <all_urls>

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Watch every request your browser makes

    webRequest

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Run its own code inside the pages you visit

    scripting

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Schedule its own background tasks

    alarms

  • See every page you navigate to, as you navigate to it

    webNavigation

Where it sends data

Destinations our analysis observed Avira Browser Safety contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.mixpanel.comwidely used

    Avira Browser Safety sends data to api.mixpanel.com. A widely used service: 35 other extensions we have analysed send data here.

  • v2.auc.avira.com

    Avira Browser Safety sends data to v2.auc.avira.com. One other extension we have analysed sends data here.

Updated 30 September 2026flliilndjeohchalpbbcdekjklbdgfkk