Is Azentio PANINI Control safe?

Azentio PANINI Control relays scan requests from any webpage to a native document-scanner program, with no check on which site sent them.

A content script runs on every website and listens for postMessage events, but it only checks that the message came from the same window, not which page sent it. That lets any website trigger the extension's connection to a native program (PaniniWrapper.exe) that drives a physical document scanner, and read back the result through a page-visible event. The extension pairs with Azentio's iMAL banking portal to capture document or check images during in-browser scanning workflows.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.