Is qTest Integration safe?

Low risk

qTest Integration fetches any caller-supplied URL via the extension's broad host permissions, allowing pages to bypass CORS restrictions.

The extension is a workflow tool that autofills Jira, Rally, and VersionOne defect forms with data from qTest. Its service worker accepts a URL from any page via a message and fetches it using the extension's http://*/* and https://*/* host permissions, then returns the response to the page. This design lets any web page use the extension as a CORS proxy to retrieve content from origins it could not otherwise reach.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Tricentisv2025.1.3Chrome Web Store
17Risk
Who publishes it

Tricentis USA Corp. - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Tricentis
Declared legal entity
Tricentis USA Corp.
Registered address
5301 Southwest Pkwy Suite 200, Bldg 2 Suite 200, Austin, TX 78735-8986, US
Registered contact
Tricentis
Website
www.tricentis.com/services-support/

Same store account

2 other listings published from this account, 49k+ users between them, none of them carrying a finding.

Testim40k+LowqTest Web Explorer9k+Low

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2025.1.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

Updated 30 September 2026hmmohkncibpklokbkagphdagkibkjkmk