Is Citrix Secure Access (Canary) safe?
Citrix Secure Access (Canary) periodically sends browsing history and device/user telemetry to a Citrix-controlled endpoint.
The extension tracks every page navigation, then on a scheduled interval bundles the visited domains, embedded iframe domains, and internal application access into a payload with device ID, device IP/name, platform, and the signed-in user's ID and name, and sends it to a Citrix ZTNA telemetry endpoint (a cloud event-hub URL, or an on-prem `/secureAccess/cep/sessionActivity` endpoint depending on the deployment). Separately, on pages matched by an admin-configured clipboard policy, it captures copy/cut/paste content and relays it over a native-messaging connection to the locally installed Citrix Workspace app, so clipboard data can be redirected into a remote virtual desktop session.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itCloud Software Group, Inc. - 2 other listings from the same operator, none carrying a finding
Cloud Software Group, Inc. - 2 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 60k+ users between them, none of them carrying a finding.
Same operator - 1 listing
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Citrix Secure Access (Canary) contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- Citrix Workspace app (local native host)
Citrix Secure Access (Canary) sends data to Citrix Workspace app (local native host). Named as a recipient in this extension's own analysis.
- Citrix ZTNA telemetry endpoint (cloud event-hub or on-prem /secureAccess/cep/sessionActivity)
Citrix Secure Access (Canary) sends data to Citrix ZTNA telemetry endpoint (cloud event-hub or on-prem /secureAccess/cep/sessionActivity). Named as a recipient in this extension's own analysis.