Version 15.2.11.903 View in Chrome Web Store
The extension has 1 million users and a perfect 5.0 rating, suggesting widespread adoption. However, the rating is based on only 2 reviews, which is suspiciously low for such a large user base. The developer is Verint, a legitimate enterprise software company specializing in workforce optimization and analytics solutions. The extension appears to be part of Verint's Desktop and Process Analytics (DPA) suite, which is typically deployed in corporate environments for employee monitoring and productivity analysis.
The extension's permission set is extremely invasive and represents a comprehensive surveillance toolkit. The combination of webRequest interception, broad host permissions covering all websites, universal content script injection, and web navigation tracking creates a powerful monitoring system. The browsingData permission adds another layer of concern, potentially allowing access to browsing history and other sensitive browser data. The idle permission suggests employee activity monitoring capabilities. Most concerning is that these permissions far exceed what would be necessary for typical productivity tools.
This extension should only be used in managed corporate environments where employee monitoring is explicitly authorized and disclosed. Individual users should avoid installing this extension unless required by their employer. If mandatory for work, run it in a completely separate Chrome profile dedicated solely to work activities. Never use this profile for personal browsing, banking, or any sensitive activities. Organizations deploying this should ensure proper privacy policies and employee consent procedures are in place.
| https://clients2.google.com/service/update2/crx |
{ "name": "verint.dpa.chrome.trigger", "version": "15.2.11.903", "background": { "service_worker": "Verint.DPA.Background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "Chrome Web Socket Extension for DPA", "permissions": [ "contextMenus", "tabs", "alarms", "idle", "storage", "browsingData", "webNavigation", "webRequest" ], "content_scripts": [ { "js": [ "./data/js/Verint.DPA.Content.js" ], "run_at": "document_start", "matches": [ "http://*/*", "https://*/*", "<all_urls>", "file://*/*" ], "all_frames": true, "exclude_globs": [ "devtools://*" ], "match_about_blank": true } ], "host_permissions": [ "*://*/*", "<all_urls>" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.