Is Web Threat Shield safe?

Clean risk

Web Threat Shield sends every visited URL and resolved IP address to Webroot's cloud service for real-time reputation checks.

On each page load, the extension transmits the URL and the site's IP address to sn.webrootcloudav.com to classify the destination against Webroot's threat database (BCAP). If the page is not blocked, the extension also collects up to 1 MB of the page's HTML content and forwards it to Webroot's cloud or a locally installed WSA agent for phishing analysis (RTAP). IP addresses for all visited HTTP and HTTPS resources are captured via a webRequest listener and cached locally in IndexedDB before being included in outbound requests.

Webroot.comv2.3.26191.1Firefox Add-ons
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

sn.webrootcloudav.com
Updated 17 September 2026amo-643584