Is Detectify Recorder safe?

Low risk

Detectify Recorder sends recording auth tokens through page-visible frame messages that can write stored commands.

During active recordings, its content script injects into all HTTP and HTTPS frames and child frames post commands plus an auth token to the top frame. The top-frame listener stores commands in chrome.storage.local when the token matches, without an origin allowlist, so pages or frames that observe the token can submit recorded commands.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

detectify-teamv4.5.2Chrome Web Store
15Risk
Who publishes it

Detectify AB - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
detectify-team
Declared legal entity
Detectify AB
Registered address
Medborgarplatsen 25, Stockholm 118 72, SE
Registered contact
Detectify AB

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.5.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • See the address and title of every tab you have open

    tabs

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Keep running in the background while your browser is open

    background

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

Updated 30 September 2026neeflaehflcedfiiojlebfkdochfdelj