Chrome Web Store
65Versions
1Code reviewed

No malware found

In code review (v2.0.6)

Our reviewer read version 2.0.6 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

93 indicators in this extension

93 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Otto: Pomodoro timer and Website Blocker, used by 60,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can observe network requests. It comes from a trusted publisher and was last updated in September 2026.

Analyst notes

The extension is a legitimate Pomodoro timer and website blocker. The broad permissions (declarativeNetRequest, scripting, <all_urls>, tabs) are necessary for its stated functionality. The reviewed source code (contentScript2.,, manifest) shows no malicious behavior. The publisher is Google-trusted, the extension is featured, and user reviews are positive. The ML model likely flagged the permission set and generic bundled code patterns, which are normal for this category.

Otto: Pomodoro timer and Website Blocker

Otto: Pomodoro timer and Website Blocker Chrome extension security report

ID: jbojhemhnilgooplglkfoheddemkodld

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
2.0.14
Size
2.30 MB
Rating
4.5/5
Reviews
216
Users
60,000
Type
Extension
Updated
Sep 3, 2026
Category
Workflow & planning
Price
Paid
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed
Scanned by Extension Auditor — Low RiskDevelopers: embed this badge to link to this report.

Publisher Contextual Analysis

Trusted
Author
https://ottoapp.me/
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
60,000

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Install growth

Item
Type
Severity
Description
<all_urls>
Permission
Critical
This permission grants access to all websites without restriction. Rated High because it can access any web content, monitor all web activity, and potentially steal sensitive data across all sites.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestBlocking
Permission
Critical
This permission allows the extension to intercept, modify, or block any web request in real-time before it reaches its destination. Rated Critical because it can modify sensitive data (like passwords, credit cards) before encryption, redirect traffic to malicious sites, or block security updates.
Dangerous Permission Combination
Risk Factor
Critical
This extension can intercept, modify, and block web requests in real-time.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2

93 indicators in this extension

93 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Otto is a mindful focus timer and website blocker that helps you overcome procrastination and manage distractions while you work.

Read the publisher’s full description

A Pomodoro timer and Website blocker helps you stay mindful and intentional, and helps you be aware of your distractions while you work. How to Install Otto? Be sure to pin the extension. This is important because the timer is displayed in the extension when you start a session. If you don’t pin it, you may not see it. Features - Pomodoro/Focus Timer - Website Blocker - Scheduled Blocker (block websites during specific times of the day) - Task timer - Workflows - Autoblock - Analytics - Reverse Pomodoro Data and Privacy We take your privacy very very seriously. We do not spy, collect, steal, or sell your data. That goes against our values of creating good software products and building trust with our users and customers. All the data that is collect for visualization is stored in your browsers local storage and indexDB. It never leaves it! We do collect events and page views using Google analytics. This will help us improve Otto. This is a list of data google analytics colelcts - how long people use the extension - the number of daily/weekly/monthly users - what part of the UI is most active (via GA events) If you have any questions, bug reports or feature requests, email at jbnj@ottoapp.me ✌️

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
93

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

93 indicators in this extension

93 indicators
1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
2.0.1
Latest
2.35 MBNot scanned—
ffd07f75e30f9f16eb12fbe02ca3850dd07b3c5ccb363c337bc31bfeeeed2dce
2.0.11
2.22 MBNot scanned—
ffd07f75e30f9f16eb12fbe02ca3850dd07b3c5ccb363c337bc31bfeeeed2dce
2.0.14
2.30 MBNot scanned—
795c943bba3b33fa6de4b748bb7458d54acb8d175118cd152a83e8d1829977d6
2.0.13
2.25 MBNot scanned—
ffd07f75e30f9f16eb12fbe02ca3850dd07b3c5ccb363c337bc31bfeeeed2dce
2.0.12
2.25 MBNot scanned—
ffd07f75e30f9f16eb12fbe02ca3850dd07b3c5ccb363c337bc31bfeeeed2dce
2.0.10
2.22 MBNot scanned—
ffd07f75e30f9f16eb12fbe02ca3850dd07b3c5ccb363c337bc31bfeeeed2dce
2.0.8
2.16 MBNot scanned—
ffd07f75e30f9f16eb12fbe02ca3850dd07b3c5ccb363c337bc31bfeeeed2dce
2.0.7
2.16 MBNot scanned—
ffd07f75e30f9f16eb12fbe02ca3850dd07b3c5ccb363c337bc31bfeeeed2dce
2.0.6
2.48 MBNo malware found0
ffd07f75e30f9f16eb12fbe02ca3850dd07b3c5ccb363c337bc31bfeeeed2dce
2.0.5
2.38 MBNot scanned—
ffd07f75e30f9f16eb12fbe02ca3850dd07b3c5ccb363c337bc31bfeeeed2dce
Showing 1 to 10 of 70 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.