A browser extension that shows you every network call your other Chrome extensions make in real time

Chrome users have no visibility into what their installed extensions are actually sending over the network. The only tool that exists is a developer-focused open-source project with no consumer UX, no alerting, and no blocking. This gap leaves everyday users and privacy-conscious professionals completely blind to extension data exfiltration.

Demand Breakdown

GitHub

2,416

1,505

Social Proof 3 sources

dnakov/little-rat - Small chrome extension to monitor other extensions network calls

@gh:dnakov · 2023-08-01

2,416 HN

Let's build a Chrome extension that steals as much data as possible

2023-02-21

849 HN

Show HN: Little Rat - Chrome extension monitors network calls of all extensions

2023-08-14

656

Gap Assessment

CompetitiveMultiple tools exist but differentiation opportunities remain

3 tools exist (Little Rat, LayerX Enterprise Extension Security, SquareX (acquired by Zscaler)) but gaps remain: Consumer-grade UX, real-time push alerts, one-click block/allow rules, historical audit log, risk scoring per extension, export, subscription model.; Priced for enterprises, not individuals. No self-serve consumer plan. Overkill for a solo user or small team that just wants to know what their Grammarly or LastPass is phoning home..

Features7 agent-ready prompts

Real-time extension network request feed

▶

Per-extension risk scoring and flagging

▶

One-click block and allow rules

▶

Historical audit log with search and export

▶

Alert rules and push notifications

▶

Extension install scanner on first run and new installs

▶

Subscription paywall and license management

▶

Competitive LandscapeFREE

Product	Does	Missing
Little Rat	Open-source Chrome extension that logs network calls made by other extensions. Developer tool: raw request log, no UI beyond a dev-panel, no alerting, no blocking, no per-extension risk scoring.	Consumer-grade UX, real-time push alerts, one-click block/allow rules, historical audit log, risk scoring per extension, export, subscription model.
LayerX Enterprise Extension Security	Enterprise browser security platform with extension behavioral analysis, Extensionpedia risk database, and Chrome Enterprise integration. Full visibility into extension network activity for IT/security teams.	Priced for enterprises, not individuals. No self-serve consumer plan. Overkill for a solo user or small team that just wants to know what their Grammarly or LastPass is phoning home.
SquareX (acquired by Zscaler)	Disposable isolated browser tabs for opening untrusted links/files. Prevents malware from reaching the local machine. Not focused on monitoring what trusted installed extensions are sending.	Does not inspect or block network calls from already-installed extensions. Acquired, so roadmap is now Zscaler's.