2025年企业浏览器扩展安全报告：数据洞见风险影响与安全盲点英文版.pdfVIP

EnterpriseBrowser

ExtensionSecurity

Report2025

Real-lifedataonbrowserextensions,theirrisksandimpact,

usageinenterprises,andtheirkeysecurityblindspots

THEONLYREPORT

THATCOMBINES

STATISTICSFROM

EXTENSIONSTORES

WITHREAL-LIFE

USAGEDATAFROM

ENTERPRISES!

Introduction

Browserextensionshavebecomeaubiquitouspartofthebrowsingexperience,and

manyusersoftenusesuchextensionstofixtheirspelling,finddiscountcoupons,or

otherproductivityuses.However,mostusersdon’trealizethatbrowserextensionsare

routinelygrantedextensiveaccesspermissionsthatcanleadtoseveredataexposure

shouldthosepermissionsfallintothewronghands.

Thisisparticularlyarisktoorganizationssincemanyorganizationsdonotcontrol

whatbrowserextensionsusersinstallontheirendpoints,andacompromisedbrowser

extensionofanindividualusercanleadtoexposureandbreachoftheorganizationasa

whole.

However,thereislackintangibleindustry-leveldataaboutbrowserextensionsecurity

thatcanquantifytheextentandlevelofrisk.

Thisresearchdoesexactlythat:

itprovidesharddataonbrowserextensions,their

permissions,thepublishersbehindthem,andenterprise

usagebasedondataandtelemetrytakenfrombothpublic

extensionstores,aswellasreal-lifedatacollectedfrom

LayerXSecurity’senterprisecustomerbase.

What’sInThisReport

Thisreportcoversseveralareasrelevanttobrowserextensionrisksandthreats,

including:

Howmanyenterpriseusersusebrowserextensions

Howmanyenterpriseextensionshaveriskypermissions

Howcommonarekeypermissionsthatcanaccessusers’cookies,

passwords,andbrowsinginformation

Whoarethedevelopersbehindbrowserextensions,andhowmuch

canwetrustthem