Is ZoneAlarm Web Secure Advanced MV3 safe?
ZoneAlarm Web Secure authenticates to its local security agent using an API key hardcoded identically in every install.
When running in agent-paired mode alongside Check Point's locally installed endpoint agent, the extension sends commands over an HTTP control channel on localhost, authenticated with a fixed key ('248a62c2-e909-48a0-9606-7f7ec6ef96f3') that is compiled the same way into every copy of the published extension. Because the key is not unique per install, anyone who extracts it from the extension bundle and locates the local agent's listening port could replay the same authorization header against it. This channel is inactive unless the extension has been switched into agent-paired mode with a Check Point/ZoneAlarm endpoint agent installed locally.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itCheck Point Software Technologies Ltd. - 1 other listing from the same operator, none carrying a finding
Check Point Software Technologies Ltd. - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 1.0M+ users between them, none of them carrying a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 990.106.51. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Watch every request your browser makes
webRequest
Watch, block and rewrite every request your browser makes
webRequestBlocking
Start, monitor and manage your downloads
downloads
Open files you have downloaded
downloads.open
Store data in your browser
storage
Store an unlimited amount of data in your browser
unlimitedStorage
Show you desktop notifications
notifications
See the address and title of every tab you have open
tabs
Act on the current tab, but only after you click the extension
activeTab
Read and change your full browsing history
history
See every page you navigate to, as you navigate to it
webNavigation
Add items to the right-click menu
contextMenus
Keep running in the background while your browser is open
background
Sign you in with your Google account
identity
See the email address of your Google account
identity.email
Schedule its own background tasks
alarms