Every common browser, one picture
The agent reports extensions from Chrome, Edge, Brave, Vivaldi, Chromium, Opera and Firefox per device and user profile, with version, rights and origin.
Security Operations
Shadow IT
What staff installed themselves – and what rights it holds
A browser extension with access to all websites reads along with every form someone fills in – installed in two clicks, approved by nobody. This module makes visible what actually runs on the devices, rates it by the rights it requests and produces the policies you need to rein it back in.
ISO 27001BSI IT-GrundschutzNIS2
Features
Your benefits
The rights determine the risk
Access to all websites, cookies, clipboard, network traffic: the rating follows what the extension demands – not its store rating.
More rights after an update means back to review
If an approved extension expands its rights in an update, it automatically loses approval and goes through review again.
Co-determination built in
Detection is subject to co-determination, switched off by default and can report the user profile as a pseudonym only.
Capabilities
All capabilities at a glance
- Allow list per extension with the states under review, approved and prohibited
- Every new, unapproved extension becomes a finding
- Browser policies as a registry file, PowerShell script for Intune, macOS profile, Linux policy and Firefox policies.json
- Block list or allow list, depending on how strict you want to be
- isidaten does not enforce the policies itself – that stays with your deployment tooling
- SaaS detection: adopt cloud services in use into the cloud service register or block them
- Software reconciliation against a prohibited-software list and against approved remote maintenance tools
- Time-limited exceptions for third-party remote maintenance with request, approval or rejection
Experience Shadow IT live
Schedule a no-obligation demo – we will show you the module with your own use cases.