Is GetVM: Instant Free Linux and IDE Sidebar safe?

Low risk

GetVM removes Content-Security-Policy and X-Frame-Options headers from browser requests.

GetVM installs a browser-wide declarativeNetRequest rule that removes Content-Security-Policy and X-Frame-Options response headers. The rule applies to main frames, subframes, XMLHttpRequests, and WebSocket requests rather than being limited to GetVM-owned pages.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

getvm.iov1.6.16Chrome Web Store
17Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.6.16. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on getvm.io

    *://getvm.io/* and 1 more

  • Read and change your data on every site you visit

    <all_urls>

  • Act on the current tab, but only after you click the extension

    activeTab

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

  • Show a panel beside the page

    sidePanel

  • Add items to the right-click menu

    contextMenus

  • Block and redirect the requests your browser makes

    declarativeNetRequest

commands
Updated 30 September 2026cgenfommofedogdmkmjdndijcilplkmg