Is SXG Validator safe?

Clean risk

SXG Validator fetches the active tab URL and its Google signed exchange cache URL when its popup is opened.

When you open the SXG Validator popup, it reads the active tab's URL and requests both that page and its corresponding Google signed exchange cache URL. If the response points to a certificate URL, the popup also fetches that certificate so it can display validation details.

https://developers.google.com/searchv1.1Chrome Web Store
0Risk
Who publishes it

Google Ireland, Ltd. - 97 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
https://developers.google.com/search
Declared legal entity
Google Ireland, Ltd.
Registered address
Gordon House Barrow Street, Dublin 4 D04 E5W5, IE
Registered contact
Google Ireland, Ltd.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed SXG Validator contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • webpkgcache.com

    SXG Validator sends data to webpkgcache.com. No other extension we have analysed sends data here.

Updated 30 September 2026hiijcdgcphjeljafieaejfhodfbpmgoe