Leash

Do you know which of your extensions can read every site you visit? Extensions get sold, change owners, and quietly gain new permissions in updates. In 2026 alone, popular extensions with millions of users were caught injecting trackers and stealing credentials — weeks after an ownership change their users never heard about. Chrome shows you a list of what you've installed, but not what it all means. Leash reads your installed-extensions list and shows your real exposure at a glance. SEE — A clear summary: "23 extensions · 4 can read every site you visit", with sideloaded(outside-the-store) extensions flagged. RANK — Every extension sorted by how dangerous its permissions are, each one explained in plain language — "can read your clipboard", "can see every tab you open", "can attach a debugger". WATCH — Leash keeps a local snapshot. When an extension update quietly adds a new permission or broadens its site access, you get an alert naming exactly what changed. New installs and removals are logged too. ACT — Disable or remove an extension right from the list. Removal always goes through Chrome's own confirmation dialog — Leash never deletes anything silently. WHY LEASH • Zero site access — Leash requests NO host permissions. It cannot see any web page, ever. An auditor should need almost nothing to audit the things that take everything. • 100% on-device — your extension list never leaves your browser. No servers, no analytics. • Honest about itself — Leash appears in its own ranking, with its own permissions explained. • Free forever to scan — Pro ($6.99 one-time) keeps background monitoring on after the 14-day trial.