Is Ycone safe?

Clean risk

Ycone adds CRM and automation tools to WhatsApp Web and sends WhatsApp IDs and voice messages to HiperChat servers.

On web.whatsapp.com, the extension opens socket.io connections to HiperChat servers, sending the user's WhatsApp ID along with device and tab identifiers. When the user triggers transcription, it downloads a voice message and posts it as base64 audio to HiperChat's speech-to-text service.

0Risk
Who publishes it

4 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Same store account

4 other listings published from this account, 47 users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Ycone contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • hc-stt.hiperchat.com.brwidely used

    Ycone sends data to hc-stt.hiperchat.com.br. A widely used service: 68 other extensions we have analysed send data here.

  • hc-wss.hiperchat.com.brwidely used

    Ycone sends data to hc-wss.hiperchat.com.br. A widely used service: 37 other extensions we have analysed send data here.

Updated 15 October 2026nomnnfchhlokbbdgbejhbnflmmajnlbf