# Jsmon Security Analyzer — Web Security Inspector

> Capture and analyze browser traffic in real time. Detects exposed secrets, shadow APIs, and supply chain risks in JS, HTML, JSON, YAML, and 20+ file types. Powered by Jsmon.

Canonical page: [https://chrome-stats.com/d/jsmon-extension](https://chrome-stats.com/d/jsmon-extension)

## Overview

- **ID:** `jsmon-extension`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Jsmon
- **Category:** web-development,privacy-security
- **Daily users:** 33
- **Weekly downloads:** 1
- **Version:** 2.0
- **Last updated:** 2026-07-10
- **First published:** 2025-04-16
- **Size:** 4.13 MB
- **Data as of:** 2026-09-15
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/jsmon-extension/)
- **Website:** [https://jsmon.sh](https://jsmon.sh/)

## Description

Jsmon Security Analyzer — Browser Extension

Automatically capture and analyze web traffic directly from your browser. 
Every JavaScript file, API response, config, and document is sent to 
Jsmon's External Attack Surface Management (EASM) engine for real-time 
security analysis — no manual uploads, no proxies required.

What it detects
<ul><li><strong>Exposed secrets</strong> — API keys, tokens, credentials leaked in JS or config files</li><li><strong>Shadow APIs</strong> — undocumented or forgotten endpoints buried in frontend code</li><li><strong>Supply chain risks</strong> — vulnerable or suspicious NPM packages loaded at runtime</li><li><strong>Sensitive data exposure</strong> — PII, internal paths, environment variables</li><li><strong>Misconfigured assets</strong> — insecure headers, open redirects, debug artifacts</li></ul>
Supported file types

JS · JSX · TS · HTML · PHP · ASPX · CFG · YAML · JSON · XML · ENV · 
INI · TXT · CSV · LOG · SQL · GRAPHQL · WASM · MAP · and more (20+ extensions)

How it works
<ol><li>Install the extension and connect your Jsmon account</li><li>Browse normally — the extension passively captures traffic</li><li>Matched file types are forwarded to Jsmon for deep analysis</li><li>View findings in your Jsmon dashboard: secrets, APIs, risks, asset inventory</li></ol>
Who it's for
<ul><li><strong>Security engineers</strong> running recon or pen tests on web applications</li><li><strong>AppSec &amp; EASM teams</strong> monitoring their organization's external attack surface  </li><li><strong>Bug bounty hunters</strong> accelerating JS recon workflows</li><li><strong>CISOs &amp; compliance teams</strong> enforcing continuous visibility across web assets</li></ul>
About Jsmon

Jsmon is an AI-powered External Attack Surface Management platform trusted 
by security teams worldwide. Built by practitioners, for practitioners.

🔗 <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/0f0f9e8e586f87e5b9a99b99f6b314f756ba83ac75445b7a4ef91670faef0e5f/http%3A//jsmon.sh" rel="nofollow">jsmon.sh</a>

## Rankings

- #19,749 — Overall
- #26 — analyzer
- #31 — security
- #36 — analyze
- #67 — risk
- #72 — secure

## Permissions and access

### Permissions

- `webRequest`
- `tabs`
- `storage`
- `https://api.jsmon.sh/*`
- `https://api-dev.jsmon.sh/*`
- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [Jsmon](https://chrome-stats.com/d/jsmon) — 5 users
- [JS Analyzer](https://chrome-stats.com/d/js-analyzer) — 45 users
- [SecretSifter: Credentials & Secrets Scanner](https://chrome-stats.com/d/secretsifter-extension) — 2 users
- [JS Deep Scraper Pro](https://chrome-stats.com/d/js-deep-scraper-pro) — 91 users, 5.00 / 5
- [JS Extractor](https://chrome-stats.com/d/js-extractor) — 32 users, 5.00 / 5
- [JS Recon Buddy](https://chrome-stats.com/d/js-recon-buddy) — 166 users, 5.00 / 5
- [Web Scraper - Export & Security Scanner](https://chrome-stats.com/d/web-scraper-export) — 156 users, 1.00 / 5
- [Web Explode](https://chrome-stats.com/d/web-explode) — 22 users, 5.00 / 5
- [YetAnotherBrowserExtension](https://chrome-stats.com/d/yetanotherbrowserextension) — 1 users
- [Security Pattern Scanner](https://chrome-stats.com/d/security-pattern-scanner) — 1 users
- [Tyre-Kicker-Security](https://chrome-stats.com/d/tyre-kicker-security) — 1 users
- [WEA - Web Exposure Analyzer](https://chrome-stats.com/d/wea-web-exposure-analyzer)

---

Source: [Chrome-Stats](https://chrome-stats.com/d/jsmon-extension)