ThreatLens

Browser Intrusion Prevention System. Intercepts downloads, enforces rules, and pauses unknown files until authorized.

ThreatLens is a lightweight, zero-trust browser extension acting as an Intrusion Prevention System (IPS). Designed for security-conscious users and analysts, it prevents accidental malware infections by intercepting traditional downloads before they touch your local disk. Once intercepted, ThreatLens queries live threat intelligence feeds (VirusTotal and urlscan.io) to analyze the download's origin and behavior. Users are presented with a clear, in-browser prompt detailing the risk before explicitly choosing to 'Allow' or 'Block' the file. Features: Pre-Execution Pause: Halts downloads instantly, preventing zero-day payloads and embedded scripts from auto-saving. Multi-Engine Checking: Built-in integrations with urlscan.io and VirusTotal for immediate reputation scoring. Custom Trust Policies: Set up your own strict allowlists and blocklists based on domains or file types. In-Browser Prompts: Beautiful, SOC-style UI overlays to alert users of potential dangers contextually. Note: VirusTotal intel requires providing your own free API key in the extension settings.