Is Katalon Recorder | Automated Selenium Tests Genera safe?

Low risk

Katalon Recorder accepts local WebSocket commands that can start recording page navigation and form inputs across sites.

Katalon Recorder connects to a local Katalon Studio WebSocket on port 50001 and trusts JSON commands from that connection. A start-record command can enable its all-site content scripts to capture navigation and input-change events, including email, password, text, telephone, and URL fields, and send them back over the same local WebSocket.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Katalon.comv5.5.3Firefox Add-ons
21Risk
Who publishes it

Katalon.com - no other listings under this identity, 14 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Katalon.com

Shared hosts - 14 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api.katalon.com
Also called by 2 other listings, including Katalon Recorder
backend.katalon.com
Also called by 2 other listings, including Katalon Recorder
my.katalon.com
Also called by 2 other listings, including Katalon Recorder
analytics.katalon.com
Also called by 3 other listings, including Katalon Recorder
docs.appdynamics.com
Also called by 3 other listings
docs.katalon.com
Also called by 3 other listings
examples.javacodegeeks.com
Also called by 3 other listings
forum.katalon.com
Also called by 3 other listings
katalon.com
Also called by 3 other listings
protractortest.org
Also called by 3 other listings
seleniumhq.github.io
Also called by 3 other listings
todomvc.com
Also called by 4 other listings
bacubacu.com
Also called by 5 other listings, including Qualys Browser Recorder
bootstraptour.com
Also called by 6 other listings, including Ezoic, Lead Connect

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 5.5.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/ and 2 more

  • See the address and title of every tab you have open

    tabs

  • Act on the current tab, but only after you click the extension

    activeTab

  • Add items to the right-click menu

    contextMenus

  • Start, monitor and manage your downloads

    downloads

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Show you desktop notifications

    notifications

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Attach to pages with the browser's debugger, which can read and rewrite anything on them

    debugger

Where it sends data

Destinations our analysis observed Katalon Recorder | Automated Selenium Tests Genera contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • localhost:50001

    Katalon Recorder | Automated Selenium Tests Genera sends data to localhost:50001. Named as a recipient in this extension's own analysis.

Updated 30 September 2026amo-873029