ClickVeto Chrome extension security report

ClickVeto is a privacy-first Browser Action Firewall for Chrome. It connects popups, redirects, downloads, tab swaps and sensitive browser capabilities to the click or user action that caused them. Intended actions stay usable while unrelated side effects can be blocked. FREE CORE PROTECTION • Network Filter blocks known advertising, tracking, redirect and popunder domains. • Popup Guard stops unwanted windows and popunders. • Intent Firewall separates the destination you deliberately clicked from additional tabs or windows triggered by the same action. • Redirect Shield detects suspicious cross-site redirect chains. • Navigation Integrity detects correlated tab swaps and can restore the original tab when an unrelated destination replaces it. • Download Guard pauses or blocks risk-sensitive downloads according to your selected mode. • Local-App Bypass preserves deliberate localhost and 127.0.0.1 hand-offs, including tools such as JDownloader Click’n’Load. • Overlay Cleaner removes clearly detected full-screen advertising overlays. • Temporary and permanent website allowances, a custom blocklist and configurable risky file types. • Backup & Restore with integrity verification, preview, merge or replace modes and automatic rollback. • Integrated Test Center and searchable local Help Center. CLICKVETO PRO ClickVeto Pro Lifetime is an optional one-time upgrade that adds: • Per-site Veto Contracts for popups, navigation, redirects, downloads and sensitive capabilities. • Capability Firewall controls for notifications, location, camera, microphone, clipboard access, fullscreen and pointer lock. • Action Provenance showing the origin, target, risk signals and rule behind supported decisions. • Action Graph and Quarantine Inbox for reviewing related side effects from the same click. • Exact one-action retry permissions without permanently trusting a website. • Personal Site Reputation and Adaptive Lockdown for repeated aggressive behavior. • Download Intelligence with risk scoring, concrete signals and Chrome-confirmed final download status. • Twitch Stream Shield with per-channel exclusions, clean fallback handling when available, emergency ad-segment suppression and player recovery. Effectiveness may vary when Twitch changes its delivery system. LOCAL AND CONTROLLABLE Protection profiles range from compatibility-focused Standard mode to stricter enforcement. Individual websites can be configured without weakening protection everywhere else. Settings, site rules, reputation, protection events, backups, tests and Help Center searches remain local in the browser. ClickVeto does not sell browsing data and does not require a ClickVeto account. Only explicit ClickVeto Pro license activation and validation sends the license key and activation metadata to Lemon Squeezy’s licensing service. The local protection log covers supported browser-action decisions. Low-level network and Chrome content-setting blocks may not appear as individual log entries in the published Web Store build.