Is Zscaler Real User Monitoring (RUM) safe?

Clean risk

Zscaler RUM collects page URLs, Web Vitals, and JS errors from every webpage and sends them to the local Zscaler ZDX native host.

On every page load, the extension gathers navigation timing, Core Web Vitals (LCP, FCP, INP, CLS), resource URL lists, JavaScript error counts, and DOM element counts. This data is sent from the content script to the service worker, which packages it and transmits it via a native messaging channel to the Zscaler ZDX application installed on the user's machine. The native host also delivers a policy controlling which domains are monitored and at what intervals.

Zscalerv0.1.37Chrome Web Store
0Risk
Who publishes it

Zscaler - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Zscaler

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Zscaler Real User Monitoring (RUM) contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • com.zscaler.zdx.rum.native.app

    Zscaler Real User Monitoring (RUM) sends data to com.zscaler.zdx.rum.native.app. No other extension we have analysed sends data here.

Updated 30 September 2026eojpolfgdcogokpbcgejpgeblcjellak