No malware found
In code review (v2.11.55)
Our reviewer read version 2.11.55 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.
What our analysis found
Clockify Time Tracker, used by 300,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in September 2026.
Analyst notes
The extension is a well-known time tracker from a trusted publisher. All network requests go to the publisher's own domain ([domain withheld]), and the data collected (PII, auth tokens, website content) matches the CWS-disclosed data categories. Permissions like scripting, tabs, and host_permissions are necessary for injecting timer buttons on integrated websites, as explained in the description. No code obfuscation or covert data exfiltration was found. The risk-engine's critical rating stems from broad permissions, not actual malicious behavior.
Clockify Time Tracker Chrome extension security report
ID: pmjeegjhjdlccodhacdgbgfagbpmccpe
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://clockify.me/
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Address
- 2100 Geng Rd STE 210 Palo Alto, CA 94303-3307 US
- Website
- Visit
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Screenshots & videos
Install growth
About this extension
Track time from anywhere on the web and improve productivity.
Read the publisher’s full description
Track time from anywhere on the web with one click. Later, analyze and export time at https://clockify.me/reports/summary FEATURES • Integrates with 50+ web apps • Idle detection • Reminders • Pomodoro timer • Automatically start/stop timer • Start a timer from selected text • Start/stop timer shortcut (Ctrl+Shift+U) • Default project for new time entries Q: Why does the extension need access to "read and change all your data on the websites you visit"? A: We use the "Read and change all your data on the websites you visit" permission only for putting a timer button on other websites and taking the task's names as a description for the timer. If you don't wish to see the button on other websites, you can disable it in extension's Settings>Integrations. The code for this extension is open source. Feel free to examine it and contribute on Github: https://github.com/clockify/browser-extension For more information on how Clockify works, check out our help article https://clockify.me/help/apps/chrome-extension If you have any issues or feedback, send us an email at support@clockify.com ABOUT CLOCKIFY Clockify is a time tracker that allows you to track the time you spend on projects and analyze your productivity. You can use Clockify on the web, desktop, and mobile – all your tracked data is synced in real time so you can seamlessly switch between devices. - Free and simple online timer - Analyze time in reports and export data - Invite team and track time together - Manage projects and monitor progress
User reviews
Extension files
Browse and explore files within this extension package
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
You reached today's free scan limit (3/3 unique extensions).
Upgrade for full visibility.
Related extensions
Popular in productivity/workflow
- ClassLink OneClick Extension14,000,000 users
- Clever13,000,000 users
- Volume Booster5,000,000 users
- Gopher Buddy4,000,000 users
- ClassLink Analytics+4,000,000 users