Is Ciphix Mendix dev tools safe?

Medium risk

Ciphix Mendix dev tools saves Mendix passwords and bearer tokens in page localStorage as plaintext.

When the dev tools are enabled on a Mendix app, the user switcher stores entered usernames and passwords in that page's localStorage. The performance feature also saves a websocket bearer token there, and later uses it in Authorization headers for the app's devtools REST requests.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Bizzomatev2.7.0Chrome Web Store
42Risk
Who publishes it

Bizzomate B.V. - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Bizzomate
Declared legal entity
Bizzomate B.V.
Registered address
Nieuweweg 25, Valkenburg 6301ES, NL
Registered contact
Charles Bronzwaer

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.7.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

Updated 30 September 2026nkbokoloejkhohjlickhfkjfmbmboaof