Browser extensionFirefox

Extuno checks a Firefox add-on before install and after every update.

Extuno reads every Firefox update statically, runs it live in a sandbox, and reviews the source with AI. The diff against the previous release is where a new WebExtension permission, an injected content script, or data leaving the browser shows up.

In shortTo check a Firefox extension for supply-chain risk, scan the published artifact, not just the source, and compare each new version against the last. Extuno runs static analysis, a dynamic sandbox, and AI review across every Firefox release, then reports evidence on every finding.

Scan a Firefox extension See an example

Firefox - live inspectionexample

acme-tab-suspender 4.0.2
firefox add-on

4.0.1->4.0.2

Static

Dynamic

Analyzing update

What Extuno catches in Firefox

Every finding is backed by evidence.

Each finding names the change, why it is dangerous, and the recommended action.

Diff finding

Content-script injection

A new content script injects markup that loads code from a remote origin.

Critical

Diff finding

New optional permissions

An update requests clipboard and history access not present before.

Review

Diff finding

Form-field harvesting

The add-on reads password fields and posts values off-domain.

Critical

See it on a poisoned update

v3.1.2 added one fetch() carrying document.cookie

The permission diff surfaces new access; the sandbox records the data leaving the browser.

+ Vulnerability and secret-leak testing on every version
+ Static analysis reads the code without running it
+ Dynamic sandbox runs it live and records behavior
+ AI code analysis reads the full source and correlates the change against prior versions

How it works

Firefoxmanifest diffv4.0.1 -> v4.0.2

tabs
storage
+ host permission: *://*/*
+ scripting (remote code)

extensiontelemetry-ff.net

Scan your first Firefox extension free.

5 free credits on signup. One credit per scan, no card required.

Try Free Talk to sales

FAQ

Common questions

Does Extuno support Firefox?

Yes. Extuno scans Firefox with static analysis, a dynamic sandbox, and AI code analysis, and diffs every version to catch one that was clean but poisoned through an update.

How does Extuno scan Firefox?

Extuno acquires the published Firefox artifact, reads it statically with 1100+ rules, runs it in a network-segmented sandbox, reviews the source with AI, and diffs it against the prior version. The finding names the file, the change, why it is dangerous, and the fix.

What does Extuno catch in Firefox?

Leaked secrets, obfuscated or malicious code, dangerous permissions and APIs, exfiltration and command-and-control behavior, and the headline signal: a version that turns malicious after an update.