Chrome Web Store
33Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

110 indicators in this extension

110 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

XQ Secure Gmail is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It comes from a trusted publisher and was last updated in July 2026.

XQ Secure Gmail

XQ Secure Gmail Chrome extension security report

ID: fldhbblbhbmilgnkklhlfablfiahlhke

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status
Active
Version
0.4.8.2
Size
0.61 MB
Rating
4.4/5
Reviews
7
Users
737
Type
Extension
Updated
Jul 25, 2026
Category
Communication
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
XQ Message, Inc
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
737

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
background
Permission
Medium
This permission allows continuous background operation. Rated Medium because it can perform actions without user awareness, consume system resources, and maintain persistent connections.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
management
Permission
Medium
This permission manages other installed extensions. Rated Medium because it can enable/disable other extensions and modify their settings, with changes being visible to users.
http://localhost/
Host
Medium
Host permission — access limited to this URL pattern.
https://mail.google.com/
Host
Medium
Host permission — access limited to this URL pattern.
https://inbox.google.com/
Host
Medium
Host permission — access limited to this URL pattern.
https://mail-attachment.googleusercontent.com/
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://mail.google.com/, https://inbox.google.com/, https://mail-attachment.googleusercontent.com/

110 indicators in this extension

110 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Data protection and email security for professionals and businesses when collaborating with customers and suppliers.

Read the publisher’s full description

Simple Secure Email Encryption Gmail, Zero-Trust & Future-Proofed XQ’s Secure Email is the simplest way to directly encrypt and track messages and files from your Gmail & Outlook workflows. It’s free to install and allows you to take encryption anywhere you work! With XQ, you can safely and securely communicate sensitive data with colleagues and third parties. You’ll never have to worry again about sending sensitive information and having it accessed by anyone other than the intended parties. Your data is encrypted before leaving your device and moving to the cloud, which makes it easy for employers to meet data privacy and compliance obligations. Easy Zero Trust Data Protection For Your Digital Workflows Extend Zero Trust security control across your entire communication workflow, starting with complete platform email protection. XQ helps teams meet compliance and maintain the recommended safeguards' integrity, availability, and confidentiality. Business Email Compromise Business Email Compromise is the #1 cyber-attack on businesses today. Breaches from Business Email Compromise and data leaks present a significant business risk. XQ can prevent damage from these attacks in real-time. The damage is already done when you notice and remediate the breach. XQ immediately notifies your admin when a Business Email Compromise (BEC) occurs and identifies where the attack is originating. XQ helps you reduce the risk of a breach and reduce the time a bad actor has access from months to minutes. XQ’s Secure Chat can also help remediate a BEC through its ephemeral secure channels. Know Sooner You know where your email recipients should be Immediate notifications if someone is trying to access your data who shouldn’t be Prevention Stop BEC while it is happening Rule sets stop unauthorized access by identity and geography Control Data After it is Sent Set identity, time, and location limits on your data Revoke access at any time For businesses concerned with Business Email Compromise, XQ is the best choice available. Ransomware Extortion Protection With millions of dollars at stake, ransomware attackers will likely find ways to hack into email even as their protections improve. Hackers will conduct a three-stage attack: Encrypt Your Data Encrypt your data and deny you access to it and your network. Exfiltrate Your Data Make a copy of your data Extort Your Company Demand payment each month with the threat of publishing all your intellectual property and customer data to the dark web. XQ encrypted email and files make that data useless. Each email is encrypted separately with its own key and its own dynamic access policies. Even if someone does gain access, with this level of granularity your email now has a blast radius of ONE. Dont let one mistake jeopardize your entire company. Lifecycle End-to-End Email and File Encryption Across Email, Files, Chat, Forms Deploy a single data control platform across your communications work suite starting with Gmail & Outlook that gives you a single security plane visibility across all your organizations' communications internally and externally. Secure Sharing As private company & consumer data is shared across cloud environments and disparate networks, XQ keeps it secure with continuous protection and lets you govern access throughout the data lifecycle. Ease of Use Senders and receivers should both have simple email and file security experiences. One button encryption for email and files for all users and recipients natively embedded in Gmail & Outlook does the trick. XQ is the easiest way to have digitally secure workflows and to extend that security to customers, vendors, and coworkers. XQ is layer on security and control that works where you already work. Data Control Your data is most at risk after it leaves your possession. With XQ, you retain the ability to know what happens to your data, revoke access to it or reprovision it with granular access controls for Data Lifecycle Management. Keep track of when, where, and by whom your data was accessed and reprovision or revoke access to that data even when it is in someone else's mailbox. Gain effortless and Unprecedented Control Over Your Data Data Blind XQ won't read your emails because we never have your data. The encrypted content stays within your existing service (i.e., Gmail & Outlook), and we provide the logic to encrypt, decrypt and modify the policies for data access. File Protection Keep attachments secure even after being sent from Gmail or Outlook to desktops, shared folders, Google Drive, or wherever files are stored and transmitted. Track when, where, and by whom access attempts occur. Secure Bubble Use XQ to build a secure bubble for colleagues, clients, vendors, and third parties. With encrypted messaging, you can be sure that your data are safe and secure. All of your invoices, contracts, and documents can be securely exchanged. Further, encrypted messages can be used as a verified channel to prevent phishing attacks and establish message provenance. Message Expiration Do you want an email with your name, address, and credit card information sitting exposed in your vendor’s inbox forever? Probably not. That’s why XQ lets you set an expiration date for any message you send. Choose any length of time, from six hours to six months. Revoke Message Unsend emails by revoking access to encrypted emails by the recipients. Just click the “Revoke” button, and your email is no longer accessible. Data Compliance Shouldn’t be a Hassle Privacy and Compliance Ensure only the intended recipients can read private consumer data. Meet the strictest compliance requirements with zero trust end-to-end encryption preventing unauthorized access to email, chat, support, forms, files, and data in flight to the cloud and throughout its lifecycle. XQ helps support HIPAA, PCI, GLBA / FINRA / SOX, GDPR, ITAR, EAR, CMMC, CUI, CJIS, and FERPA. Cross-Worksuite Collaboration XQ Message enables your workforce to collaborate and innovate safely in the applications they already use inside and outside your organization. XQ is deeply integrated into your current worksuite protecting data as it is shared across unknown environments. Chain of Custody for Visibility Across Environments Each interaction with your data, whether it is IoT, CCTV, email, or chat, is logged with who, where, and when the access was attempted. Each data object has its own individual and unique key and is bound to individual policies. This provides you with an unparalleled ability to manage your data inside and outside your organization. XQ provides a complete auditable trail. Data Residency XQ uniquely geolocates each data access request. This also means XQ can geofence data so that it never leaves its designated geography. XQ is the only solution providing geofencing at the data level for GDPR compliance. With XQ, data stays where it is supposed to. Data Control To Power Business Lifecycle end-to-end encryption data protection Extended trust frictionless sharing with customers and colleagues Maintain data visibility with audit logs to see who has attempted to access data, track where data travels, and take action to reduce/ mitigate breaches. Use SIEM integrations to improve threat remediation workflows. Customize your data loss prevention rule policies from the edge to the cloud. Use XQ Secure for protected file exchanges and collaboration. Securely connect site-to-site and on-prem to cloud data transfer BAA documents are available upon request for healthcare clients Your Data Can Do More Data-Centric Security Other solutions protect data by focusing on the security of networks, servers, or applications. XQ protects the data itself. Data-centric security allows organizations to overcome the disconnect between IT security and business strategy by marrying security services to the data they protect; When security isn’t an end in itself, data can do more. Extraordinary Ease of Use Changing behavior is hard. For security to work, people need to be able to use it easily. XQ is seamlessly incorporated into users’ existing workflows for extraordinary ease of use. Full-Lifecycle Data Control and Visibility Easily view who has accessed or forwarded an email — and adjust or revoke data access controls at any time. Integrate XQ with your SIEM to strengthen threat response and streamline compliance audits. Seamless Experiences Recipients who don’t have XQ installed still get the benefits of best in class user experience. Quick Deploy and Configuration Get up and running in a matter of minutes. Period. Data Loss Prevention (DLP) from the Edge to the Cloud There isn’t another system like XQ. Our patented architecture is true data-centric zero trust that future proofs your data security. XQ microsegments data at the edge and encrypts that data object with its own key and policies that protect it and tracks it throughout its life from the edge to the cloud throughout its lifecycle. XQ keeps your data safe wherever it lives. We protect & track all interactions with each data object from the network edge to the cloud. Our communications applications protect your data in email, chat, support, forms, and file sharing. Through our layer-on patented architecture, our goal is to securely connect data for the entire internet.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
110

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

110 indicators in this extension

110 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.4.8.2
Latest
0.61 MBNot scanned—
18ea3a013660168c56bf78d8efe11e01f6c62a1f727b569996512bd645ecc7bb
0.4.7.587
0.60 MBNot scanned—
6379e37c42c088e89e62a6bff1dfcd660ab14fe43afc61c9154ce3f0620b47d4
0.4.7.583
0.58 MBNot scanned—
6379e37c42c088e89e62a6bff1dfcd660ab14fe43afc61c9154ce3f0620b47d4
0.4.7.582
0.60 MBNot scanned—
6379e37c42c088e89e62a6bff1dfcd660ab14fe43afc61c9154ce3f0620b47d4
0.4.7.580
0.59 MBNot scanned—
6379e37c42c088e89e62a6bff1dfcd660ab14fe43afc61c9154ce3f0620b47d4
0.4.7.574
0.53 MBNot scanned—
6379e37c42c088e89e62a6bff1dfcd660ab14fe43afc61c9154ce3f0620b47d4
0.4.7.566
0.53 MBNot scanned—
6379e37c42c088e89e62a6bff1dfcd660ab14fe43afc61c9154ce3f0620b47d4
0.4.7.557
0.60 MBNot scanned—
6379e37c42c088e89e62a6bff1dfcd660ab14fe43afc61c9154ce3f0620b47d4
0.4.7.5
0.70 MBNot scanned—
bb49374d8d77f35e512ea805ecc97164b96be8f74a70ca3a0829f7ef1652b2e9
0.4.7.4
0.70 MBNot scanned—
bb49374d8d77f35e512ea805ecc97164b96be8f74a70ca3a0829f7ef1652b2e9
Showing 1 to 10 of 40 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.