Is zipBoard safe?

Low risk

zipBoard removes CSP and X-Frame-Options protections from every top-level and embedded page it can match.

zipBoard enables a declarative network request rule for all URLs that removes content-security-policy and x-frame-options response headers on main-frame and sub-frame navigations. Its background and content scripts also include a hardcoded bearer token used as the fallback Authorization header for requests to the zipBoard API.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

zipBoardv2.1.21Chrome Web Store
15Risk
Who publishes it

ZipBoard tech inc . - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
zipBoard
Declared legal entity
ZipBoard tech inc .
Registered address
501- 888 Hamilton St, Vancouver, BC V6B5W4, CA
Registered contact
ZipBoard tech inc .

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed zipBoard contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app.zipboard.co

    zipBoard sends data to app.zipboard.co. No other extension we have analysed sends data here.

Updated 30 September 2026hjggbopcacdchdecegldbeknhpeiheaf