2025年企业浏览器扩展安全报告：数据洞见风险影响与安全盲点英文版 .docxVIP

EnterpriseBrowserExtensionSecurityReport2025

Real-lifedataonbrowserextensions,theirrisksandimpact,usageinenterprises,andtheirkeysecurityblindspots

THEONLYREPORTTHATCOMBINESSTATISTICSFROMEXTENSIONSTORESWITHREAL-LIFEUSAGEDATAFROMENTERPRISES!

Introduction

Browserextensionshavebecomeaubiquitouspartofthebrowsingexperience,andmanyusersoftenusesuchextensionstofixtheirspelling,finddiscountcoupons,orotherproductivityuses.However,mostusersdon’trealizethatbrowserextensionsareroutinelygrantedextensiveaccesspermissionsthatcanleadtoseveredataexposureshouldthosepermissionsfallintothewronghands.

Thisisparticularlyarisktoorganizationssincemanyorganizationsdonotcontrolwhatbrowserextensionsusersinstallontheirendpoints,andacompromisedbrowser

extensionofanindividualusercanleadtoexposureandbreachoftheorganizationasawhole.

However,thereislackintangibleindustry-leveldataaboutbrowserextensionsecuritythatcanquantifytheextentandlevelofrisk.

Thisresearchdoesexactlythat:

itprovidesharddataonbrowserextensions,theirpermissions,thepublishersbehindthem,andenterpriseusagebasedondataandtelemetrytakenfrombothpublicextensionstores,aswellasreal-lifedatacollectedfromLayerXSecurity’senterprisecustomerbase.

What’sInThisReport

Thisreportcoversseveralareasrelevanttobrowserextensionrisksandthreats,including:

Howmanyenterpriseusersusebrowserextensions

Howmanyenterpriseextensionshaveriskypermissions

Howcommonarekeypermissionsthatcanaccessusers’cookies,passwords,andbrowsinginformation

Whoarethedevelopersbehindbrowserextensions,andhowmuchcanwetrustthem

Andmore…

Thefindingsareacombinationofpublicdatafromextensionstores,overlayedwithtelemetrycollectedfromLayerX’suniquedataset.

WhatMakesLayerX’sDataUnique

LayerX’sdatasetisuniquebecauseofwher