extuno
Firefox add-ons, checked before and after every release.
Extuno diffs each Firefox add-on update and flags new WebExtension permissions, content-script injection, and exfiltration - with static, dynamic, and AI analysis on every scan.
firefox add-on
Every finding is backed by evidence.
Each finding names the change, why it is dangerous, and the recommended action.
Content-script injection
A new content script injects markup that loads code from a remote origin.
New optional permissions
An update requests clipboard and history access not present before.
Form-field harvesting
The add-on reads password fields and posts values off-domain.
A trusted add-on turns on its users
The permission diff surfaces new access; the sandbox records the data leaving the browser.
- + Vulnerability and secret-leak testing on every version
- + Static analysis reads the code without running it
- + Dynamic sandbox runs it live and records behavior
- + AI code analysis reads the full source and correlates the change against prior versions
- tabs
- storage
- + host permission: *://*/*
- + scripting (remote code)
Scan your first Firefox extension free.
Your first 5 credits are free - that is 5 full scans, no card required.
Common questions
Does Extuno support Firefox?
Yes. Extuno scans Firefox with static analysis, a dynamic sandbox, and AI code analysis, and diffs every version to catch one that was clean but poisoned through an update.
How does Extuno scan Firefox?
Extuno acquires the published Firefox artifact, reads it statically with 1100+ rules, runs it in a network-segmented sandbox, reviews the source with AI, and diffs it against the prior version - naming the file, the change, why it is dangerous, and the fix.
What does Extuno catch in Firefox?
Leaked secrets, obfuscated or malicious code, dangerous permissions and APIs, exfiltration and command-and-control behavior, and the headline signal: a version that turns malicious after an update.
