Browser Extension Permissions: Decide What Deserves Access
Review an extension’s purpose, publisher and permissions; limit site access where supported, test with harmless data, and remove unnecessary add-ons.
Secure browser extensions, sessions, domains and web application boundaries.
Review an extension’s purpose, publisher and permissions; limit site access where supported, test with harmless data, and remove unnecessary add-ons.
Map TLS, tokens, signatures, stored-data keys and third-party dependencies into a practical cryptographic inventory with owners and migration evidence.
Evaluate browser and on-device AI by mapping model downloads, inference, telemetry, synchronization and cloud fallback instead of trusting a local-AI label.
Map domain ownership, registrar access, DNS administration and recovery dependencies before a lost account or unauthorized change disrupts your site.
Review PHP sessions from login to logout: strict mode, cookie settings, safe ID regeneration, timeout enforcement and server-side revocation tests.
Passkeys strengthen sign-in, while session handling and recovery need separate controls. Review phishing resistance, active sessions and account recovery together.