Total Extensions
—
across — devices
Critical / High Risk
—
require immediate review
Medium Risk
—
flagged for review
Unique Extension IDs
—
distinct extensions tracked
Extension Inventory
Columns
Name
Hostname
Username
Browser
Extension ID
Version
Platform
Risk
Loading… |
Extension History
All extensions ever seen on this org, including uninstalled
| Name | Hostname | Browser | Extension ID | Version | Status | Last Seen | Risk |
|---|---|---|---|---|---|---|---|
Loading… | |||||||
Devices
Loading…
| Hostname | Username | Platform | Extensions | Last Connected | Action |
|---|---|---|---|---|---|
Loading… | |||||
Allowlist
How it works: When the allowlist has at least one entry, the agent switches to allowlist mode — only extensions on this list are permitted. Everything else is automatically removed. If the allowlist is empty, the agent uses blocklist mode — only explicitly blocked extensions are removed.
macOS App Store Policy
Safari extensions are distributed as apps through the Mac App Store and cannot be blocked by browser policy alone.
Restricting the App Store is the recommended approach to prevent users from installing unapproved Safari extensions on macOS.
The agent applies this policy automatically via macOS managed preferences.
Recommendations
✓
Updates only — prevents installation of any new App Store apps including Safari extensions. Users can still receive OS and app updates. Best for high-security environments.
○
Require admin — users can still install apps but must enter an admin password. Suitable for environments where some App Store access is needed but should be controlled.
ℹ
For Chrome, Edge, Brave, and Firefox extensions, Extensight enforces policy directly via browser managed preferences — no App Store restriction needed.
| Extension ID | Name | Notes | Added | Action |
|---|---|---|---|---|
Loading… | ||||
Blocked Extensions
| Extension ID | Name | Reason | Blocked | Action |
|---|---|---|---|---|
Loading… | ||||
Removal Log
| Hostname | Extension | Extension ID | Browser | Status | Removed At |
|---|---|---|---|---|---|
Loading… | |||||
| Name | Role | MFA | Added | Actions | |
|---|---|---|---|---|---|
Loading… | |||||
Integrations
Connect Extensight to your existing security and communication tools.
💬
Slack
Not configured
Rich notifications for security events in your Slack workspace
📡
SIEM / Log Forwarding
Not configured
Forward security events to Splunk, Elastic, Datadog, or any HTTP endpoint
🔐
Okta SSO
Not configured
Let your team sign in with their Okta credentials via OIDC
Score Overrides
Manually set risk scores for specific extensions. Overrides take precedence over automatic scoring.
All overrides require a justification for audit purposes.
| Extension ID | Name | Score | Level | Justification | Set By | Action |
|---|---|---|---|---|---|---|
Loading… | ||||||
Download Agent
Install the Extensight agent on each device you want to monitor. The agent runs silently in the background and reports browser extensions every 1 minute. Your API key links the agent to your organization.
Organization API Key
Required during installation to link the agent to your organization. Keep this secret.
Loading…
macOS
Apple Silicon and Intel — one-line install
Quick Install (Recommended)
1Open Terminal and run:
Loading…
2The agent installs and starts reporting within 1 minute.
Manual Download
Windows
Windows 10 and 11 — installs as a native Windows service
Installation
1Download the agent binary:
Download agent-windows.exe
Download agent-windows.exe
2Open PowerShell as Administrator, navigate to your Downloads folder, and configure:
Loading…
3Install as a Windows service:
.\agent-windows.exe --install-service
4The agent is now running as ExtensightAgent in Windows Services and starts automatically on boot.
Uninstall Agent
Removing the agent stops extension reporting. Historical data stays visible until you remove the device from the Devices page.
macOS — Uninstall
1Stop and unload:
sudo launchctl unload /Library/LaunchDaemons/com.extensight.agent.plist
sudo launchctl unload /Library/LaunchDaemons/com.extensight.agent.plist
2Remove plist:
sudo rm /Library/LaunchDaemons/com.extensight.agent.plist
sudo rm /Library/LaunchDaemons/com.extensight.agent.plist
3Remove binary:
sudo rm /usr/local/bin/extensight-agent
sudo rm /usr/local/bin/extensight-agent
4Remove config:
sudo rm -rf /etc/extensight
sudo rm -rf /etc/extensight
After uninstalling, go to Devices and click Remove to clear this device from your dashboard.
Windows — Uninstall
1Open PowerShell as Administrator in the Extensight install folder and run:
.\agent-windows.exe --uninstall-service
.\agent-windows.exe --uninstall-service
2Delete the install folder and config: C:\Program Files\Extensight\ and C:\ProgramData\Extensight\
After uninstalling, go to Devices and click Remove to clear this device from your dashboard.
Keep your API key secret. If compromised, regenerate it from this page and redeploy the agent.