Is Ivanti Secure Access Extension safe?

Clean risk

Ivanti Secure Access Extension relays VPN authentication data between Pulse Secure portal pages and the locally installed Ivanti PSAL native application.

On pages matching the Pulse Secure VPN portal URL pattern (https://*/dana*), the extension injects a content script that listens for authentication messages from the page and forwards them to a background service worker. The background worker then passes these messages to the locally installed Ivanti PSAL application via the native messaging API. No data is sent to any remote server — all communication stays between the browser and the local Ivanti client software.

Ivanti, Inc.v22.3.1.18209Chrome Web Store
1Risk
Who publishes it

Ivanti Inc. - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Ivanti, Inc.
Declared legal entity
Ivanti Inc.
Registered address
10377 South Jordan Gateway, Suite 110, South Jordan, UT 84095, US
Registered contact
Ivanti Inc.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 22.3.1.18209. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026cikpkfgjohfbacpbglmbpefgfdegoolg