Extension Auditor
Sign Up
Chrome Web Store
20Versions
1Code reviewed

No malware found

In code review

Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.

16 indicators in this extension

16 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Netsweeper Client Filter, used by 50,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can read and change data on all websites and can inject scripts into pages. It comes from a trusted publisher and was last updated in April 2026.

Analyst notes

The extension is a legitimate enterprise content filter from a trusted publisher ([domain withheld]). All data collection is disclosed and sent to the publisher's own policy server. The critical permissions are required for URL monitoring and filtering. No unauthorized data exfiltration, code injection, or obfuscation beyond standard for WebAssembly and Flutter frameworks. The ML model's low risk score (0.00) and clean permhash cluster corroborate benignity.

Netsweeper Client Filter

Netsweeper Client Filter Chrome extension security report

ID: kdbgbpcphmnekmkhbcfmbdahceffhddn

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
13.59.55.56
Size
13.32 MB
Rating
1.4/5
Reviews
11
Users
50,000
Type
Extension
Updated
Apr 13, 2026
Category
Workflow & planning
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue
This publisherTrack record
2extensions
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
http://netsweeper.com/
Privacy
Privacy Policy
Help
Help Center
Country
CA
Address
15 William Lewis Street Kitchener, ON N2A4L5 CA
Website
Visit
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
250,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
identity.email
Permission
High
This permission directly accesses the user's email address. Rated High because it reveals personally identifiable information and can be used for tracking or targeting.
enterprise.deviceAttributes
Permission
High
This permission accesses device hardware information. Rated High because it can fingerprint devices, gather system information, and potentially identify enterprise assets.
offscreen
Permission
High
This permission creates hidden browser documents with full DOM access. Rated High because it can run background operations invisibly, potentially executing malicious code without user awareness.
webNavigation
Permission
High
This permission enables monitoring of all browser navigation events and transitions. Rated High because it can track every page visit, navigation method, and browsing pattern, potentially exposing sensitive browsing behavior and user activities.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation• 25% increase: Unsafe code evaluation capabilities increase attack surface
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
Unsafe WebAssembly Execution
Risk Factor
High
This extension's CSP allows "wasm-unsafe-eval".
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
declarativeNetRequestFeedback
Permission
Medium
This permission provides network request modification logs. Rated Medium because it can monitor network request changes and debug traffic modifications.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.

Each row lists a threat category the scanner evaluates. A checkmark means the review ran and found no matching issues in that category for this version.

  • Data Exfiltration

    Code review completed; no malicious patterns detected for this category.

  • Unauthorized Data Collection

    Code review completed; no malicious patterns detected for this category.

  • Network Interception

    Code review completed; no malicious patterns detected for this category.

  • Code Injection

    Code review completed; no malicious patterns detected for this category.

  • Credential Theft

    Code review completed; no malicious patterns detected for this category.

  • Obfuscation

    Code review completed; no malicious patterns detected for this category.

  • Tracking

    Code review completed; no malicious patterns detected for this category.

  • Privilege Escalation

    Code review completed; no malicious patterns detected for this category.

  • Phishing

    Code review completed; no malicious patterns detected for this category.

  • Remote Code Loading

    Code review completed; no malicious patterns detected for this category.

  • Other

    Code review completed; no malicious patterns detected for this category.

16 indicators in this extension

16 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Netsweeper Client Filter

Read the publisher’s full description

Netsweeper Client Filter for Chrome allows users running a Netsweeper Filtering service to integrate Chrome browsers to their central filtering service. The Netsweeper Chrome Client Filter will send all URL requests to a Netsweeper Policy Service to filter web surfing. The Netsweeper Policy Service is configurable and can be set to any deployed Netsweeper system. The policy service can be password protected by the Administrator of the policy service by setting a Client Filter uninstall password. You can configure the Chrome Client FIlter using the gSuite enterprise policy or via the Windows Registry/MacOS pList files. This allows you to customize and brand your defaults for all your users. When using the Netsweeper Client Filter the following data is transmitted to the Policy Service for filtering purposes: The complete URL of each web request and all elements on a web page The account name of the user signed into Chrome The IP address of the workstation as seen by the Policy Service The sole purpose of the Netsweeper Client Filter is to filter all URL requests and to extend the Netsweeper Policy Service and Client Filter platform to the Chrome browser. The Netsweeper Client Filter for Chrome is free but does require a Netsweeper Policy Service to be installed and configured. Netsweeper Privacy Policy: https://www.netsweeper.com/privacy-policy/ Netsweeper Support: https://www.netsweeper.com/support/ For more information feel free to email support@netsweeper.com

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up
URLs
14
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

16 indicators in this extension

16 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
13.59.55.56
Latest
13.32 MBNo malware found0
b964095f79527c6675caab3c6392ba42e03f8674ec87ddd27831405ab81051a0
13.59.55.55
13.32 MBNot scanned—
b964095f79527c6675caab3c6392ba42e03f8674ec87ddd27831405ab81051a0
13.58.55.55
13.32 MBNot scanned—
b964095f79527c6675caab3c6392ba42e03f8674ec87ddd27831405ab81051a0
13.46.55.55
13.32 MBNot scanned—
56cee7ec4a8ab8526b8c8fde5f94860b922af9ba283142585a36ef24fa8b2a54
13.40.55.55
13.32 MBNot scanned—
6f0737a120add110765853aebac5ffe76bbe48a68bd64d31db7880547097ef55
13.20.55.55
14.75 MBNot scanned—
6f0737a120add110765853aebac5ffe76bbe48a68bd64d31db7880547097ef55
12.51.55.55
5.83 MBNot scanned—
6f0737a120add110765853aebac5ffe76bbe48a68bd64d31db7880547097ef55
12.50.55.55
5.83 MBNot scanned—
6f0737a120add110765853aebac5ffe76bbe48a68bd64d31db7880547097ef55
12.50.55
6.44 MBNot scanned—
47fc70c833f2c491b746cb6550ea4528615164df556f912b11e6e844f1475b05
12.30.54.54
5.55 MBNot scanned—
6f0737a120add110765853aebac5ffe76bbe48a68bd64d31db7880547097ef55
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sign Up

Related extensions

More from http://netsweeper.com/