Browser Extension Management

Browser extensions expand the functionality of web browsers, but they also represent a growing attack surface. Extensions can read and modify web page content, intercept network requests, access browsing history, and interact with credentials and authentication tokens. A single malicious or compromised extension can exfiltrate sensitive data, inject unwanted content, or provide a backdoor into corporate systems.

Privilege Manager gives administrators the tools to discover every browser extension installed across managed Windows and macOS endpoints, evaluate the risk each extension poses, and enforce policies that control which extensions are permitted to run.

Supported Browsers

Privilege Manager supports browser extension inventory and enforcement on the following browsers on Windows and macOS endpoints.

Browser	Inventory	Enforcement
Google Chrome	yes	yes
Microsoft Edge	yes	yes
Mozilla Firefox	yes	yes

Management Topics

Refer to the following topics for details about these aspects of browser extension management.

Understanding Browser Extension Management - Core concepts, supported browsers, and the discover-review-enforce workflow.

Enabling Extension Inventory - Step-by-step guide for creating an inventory policy and deploying it to endpoints.

Browser Extension Inventory Reports - Understanding the fleet-wide summary, per-computer detail, and drill-down reports.

Extension Resource Detail View - Inspecting an individual extension's identity, details, permissions, and installation footprint.

Risk Scoring - How Privilege Manager calculates risk scores for discovered extensions.

AI Detection - How AI-powered classification identifies extension categories and risk signals.

Building Enforcement Policies - Creating Allow List and Deny List policies to control which extensions can run.

Browser-Specific Behavior - Platform and browser differences that affect extension management.