Is Integrated Online Buying safe?

Low risk

Integrated Online Buying stores punch-in settings from web pages and later posts supplier cart details to the configured URL.

A page message can set the extension's punch-in configuration without an origin check. When the user runs punch-in later, the extension fetches a site template, scrapes cart item codes, descriptions, quantities, unit costs, image and item URLs, and the current cart URL, then posts that basket and token to the configured punchTo destination.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Compleat Software Ltdv1.0.26183Chrome Web Store
15Risk
Who publishes it

Compleat Software Limited - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Compleat Software Ltd
Declared legal entity
Compleat Software Limited
Registered address
Buckingham House, West Street, Newbury, Berkshire RG14 1BE, GB
Registered contact
Compleat Software Limited

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Integrated Online Buying contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • config.punchTo

    Integrated Online Buying sends data to config.punchTo. No other extension we have analyzed sends data here.

  • punchout-live-uksouth.azurewebsites.net

    Integrated Online Buying sends data to punchout-live-uksouth.azurewebsites.net. No other extension we have analyzed sends data here.

Updated 2 November 2026bklgebioaienjikjnenfdamoeiddnpoj