Is Endpoint Verification safe?
Endpoint Verification collects device security posture data and transmits it to Google's secureconnect-pa API on a periodic schedule.
This Google enterprise extension reads hardware and OS-level attributes — including disk encryption status, screen lock, serial number, MAC addresses, installed antiviruses, and mTLS certificate fingerprints — via Chrome's enterprise.reportingPrivate APIs. The data is serialized and POSTed to secureconnect-pa.clients6.google.com every 10 minutes and on sign-in events. It also reads the SAPISID cookie from google.com domains to construct authentication headers for those API calls.
Who publishes itGoogle LLC - 21 other listings from the same operator, none carrying a finding
Google LLC - 21 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same operator - 21 listings
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.140.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on google.com
*://*.google.com/*
Read and change cookies, including the ones that keep you signed in
cookies
Detect when you step away from your computer
idle
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Store data in your browser
storage
Schedule its own background tasks
alarms
Receive push messages from its developer's servers
gcm
Sign you in with your Google account
identity
See the email address of your Google account
identity.email
Run hidden pages in the background
offscreen
Where it sends data
Destinations our analysis observed Endpoint Verification contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- secureconnect-pa.clients6.google.com
Endpoint Verification sends data to secureconnect-pa.clients6.google.com. No other extension we have analysed sends data here.
- secureconnect-pa.mtls.clients6.google.com
Endpoint Verification sends data to secureconnect-pa.mtls.clients6.google.com. No other extension we have analysed sends data here.