Is Inven safe?
Inven reads your LinkedIn session cookies to page your full connection list and sends those connections to its own servers.
When LinkedIn sync is enabled, Inven's background worker reads your LinkedIn li_at and JSESSIONID cookies and uses JSESSIONID as a CSRF token to call LinkedIn's private Voyager connections API in batches of 500, then POSTs the resulting list of connection public IDs to api.inven.ai. Separately, while the side panel is open it watches every tab change and sends the registrable domain of each site you visit to api.inven.ai to look up company data. Both behaviors run only after you enable sync and open the panel.
Who publishes itInven - no other listings under this identity
Inven - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Inven contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.inven.ai
Inven sends data to api.inven.ai. No other extension we have analyzed sends data here.