Is CrowdStrike Threat Intelligence Browser Extension safe?
CrowdStrike Threat Intelligence Browser Extension scans page text for indicators and sends matches to CrowdStrike APIs.
When scanning starts, the extension extracts visible page text, including shadow DOM text, from pages where its content script runs. Detected indicator values are sent with the user's bearer token to CrowdStrike's lookup-indicators API.
Who publishes itCrowdStrike, Inc. - 1 other listing from the same operator, none carrying a finding
CrowdStrike, Inc. - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 10k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed CrowdStrike Threat Intelligence Browser Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.crowdstrike.com
CrowdStrike Threat Intelligence Browser Extension sends data to api.crowdstrike.com. One other extension we have analysed sends data here.