Is UserAdvocate safe?

Medium risk

UserAdvocate sends embedded UXArmy API credentials in headers on test API requests to app.uxarmy.com.

The extension includes a reusable UXArmy username and password in its bundled JavaScript. Its test API helpers attach those credentials as headers when making requests such as log, test-detail, video-detail, and screenshot calls to app.uxarmy.com.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

UserAdvocate by UXArmyv4.2.0Chrome Web Store
40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed UserAdvocate contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app.uxarmy.com

    UserAdvocate sends data to app.uxarmy.com. No other extension we have analysed sends data here.

Updated 30 September 2026gckbkibdgldakpaepgppcjkjpcbfmjec