Is WhatRuns safe?

High risk

Tech-stack identification tool that transmits browsing data (URLs, titles, DOM content) to whatruns.com and shopper.com. Monitors AI chat prompts with debounced input tracking. PostMessage vulnerability allows DOM manipulation.

https://whatruns.comv1.8.20Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+6 more findings not shown

Book a call to see all findings
Updated 3 May 2026cmkdbmfndkfgebldhnkbfhlneefdaaip