Is Klarway safe?
Klarway continuously captures screen video, webcam footage, and audio during exams and transmits them to its backend, while broadcasting session credentials to all page scripts.
During a proctoring session, the extension records the user's screen and camera as video files and monitors microphone volume and keyboard shortcuts, uploading all of this as blobs and JSON to Klarway's servers. It also broadcasts the session bearer token and proctoring key via postMessage with a wildcard target origin, making those credentials readable by any third-party script, iframe, or XSS payload present on the LMS page. Additionally, it collects hardware details (CPU, RAM, storage) and includes them in a final upload at session end.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itKlarway - no other listings under this identity
Klarway - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Klarway contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- generals.klarway.com
Klarway sends data to generals.klarway.com. No other extension we have analysed sends data here.