Is Xactware ClickOnce safe?

Clean risk

Xactware ClickOnce sends Xactimate and XactContents ClickOnce URLs to a local Xactware helper.

When a Xactimate or XactContents page requests a .application ClickOnce URL, the extension forwards that URL to the local Xactware native helper. It then redirects the browser request to javascript:void(), so the local helper can handle the ClickOnce launch instead of the tab loading the URL.

Xactwarev1.3Firefox Add-ons
2Risk
Who publishes it

Xactware - no other listings under this identity, 2 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Xactware

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

xactcontents.com
Also called by 2 other listings, including Xactware ClickOnce
xactimate.com
Also called by 2 other listings, including Xactware ClickOnce

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on xactimate.com

    https://*.xactimate.com/* and 1 more

  • Read and change your data on xactcontents.com

    https://*.xactcontents.com/* and 1 more

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Where it sends data

Destinations our analysis observed Xactware ClickOnce contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • xactware.clickonce.helper

    Xactware ClickOnce sends data to xactware.clickonce.helper. No other extension we have analysed sends data here.

Updated 30 September 2026amo-2673013