CRX aminer
Extension icon

Browsec VPN - Free VPN for Chrome

Version 3.92.4 View in Chrome Web Store

Last scanned: 7 days ago | force re-scan

Extension Details

Developer: https://browsec.com/
Rating: 4.4 ★ (33.7K ratings)
Users: 6,000,000

Context-Aware Verdict

HIGH
Risk Level
Trust Factors: Browsec VPN has strong trust indicators with 6 million users, a solid 4.4-star rating from over 33,000 reviews, and appears to be from an established VPN company. The high user adoption and positive ratings suggest legitimate functionality and user satisfaction.
Concerns: The extension requests extremely broad permissions that, while necessary for VPN functionality, create significant security exposure. The proxy permission allows complete control over your internet traffic routing. The webRequest permission enables interception and modification of all web requests. Host permissions for all URLs mean the extension can access every website you visit. Most concerning is the extensive CSP allowlist containing dozens of suspicious domains with generic names like "fastcache.xyz," "rapidcdn.click," and "speedycdn.fun" - these appear unrelated to legitimate VPN infrastructure and could indicate potential data collection or ad injection capabilities.

The combination of traffic interception capabilities with access to numerous third-party domains creates risk for data harvesting, traffic manipulation, or unwanted content injection beyond the stated VPN functionality.

Recommendations: Consider running this extension in a separate Chrome profile to isolate potential risks. Verify the legitimacy of the numerous domains in the CSP policy. Monitor network traffic when using the extension to ensure it's only connecting to expected VPN servers. Consider premium VPN services with better transparency about their infrastructure and data handling practices.

Security Analysis

HIGH
Overall Risk
Based on 4 total findings, ranked without considering overall context, including 3 high-risk and 1 medium-risk findings.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: proxy
This extension has the proxy permission. Can control proxy settings. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webRequest
This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.