Tracy Firefox

Tracy

A tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner.

Features & Capabilities

Tracy is a Firefox add-on designed to assist with finding all sinks and sources of a web application, providing insights into potential XSS vulnerabilities. It helps penetration testers identify input sources, follow input to sinks, and document risky input locations.

User Growth & Download Statistics

Manifest V2 Add-on
By:
Jake Heath
Daily users:
5
Rating:
5.00
(4)
Version:
0.9.2 Last updated: 2021-05-21
Version code:
5235754
Creation date:
2018-04-06
Risk:
High risk impact Low risk likelihood
Permissions:
Content scripts matches:
  • <all_urls>
Size:
910.55KB
Email:
ja*****@gmail.com
URLs:
Website
Full description:
See detailed description
Source:
Firefox Add-ons Store
Data ingested on:
2026-08-15
Compare stats and ranking:

Contact the developer

Chrome-Stats does not own this Firefox add-on. Please use these information below to contact the Firefox add-on developer.
Developed by:
Jake Heath
Firefox Add-ons Store
https://addons.mozilla.org/firefox/addon/tracyplugin/
Email:
ja*****@gmail.com
Website:
https://github.com/nccgroup/tracy

User Reviews

by Ma*****, 2020-05-28

Great tool, thanks Jake. One thing I would suggest is being able to turn off the green input highlight/tracy icon and just have tracy in the right click menu. Thanks again!
by Fi*****, 2019-08-05
View all user reviews ›

Is Tracy Safe?

Risk impact
Risk impact measures the level of extra permissions an extension has access to. A low risk impact extension cannot do much harms, whereas a high risk impact extension can do a lot of damage like stealing your password, bypassing your security settings, and accessing your personal data. High risk impact extensions are not necessarily malicious. However, if they do turn malicious, they can be very harmful.

Tracy requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.

Risk impact analysis details
  • Critical Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
  • High ****** *** ********* ** ******* *** ******* ******* ** ****** *** *** ******** ******
  • High ******* ******* **** *** ****** ***** *** ***** ** ******* **** ********* ********* ** * *********** *****
Risk likelihood
Risk likelihood measures the probability that a Firefox add-on may turn malicious. This is determined by the publisher and the Firefox add-on reputation on Firefox Add-ons Store, the amount of time the Firefox add-on has been around, and other signals about the Firefox add-on. Our algorithms are not perfect, and are subject to change as we discover new ways to detect malicious extensions. We recommend that you always exercise caution when installing a Firefox add-on.

Tracy has earned a fairly good reputation and likely can be trusted.

Risk likelihood analysis details
  • High This extension has low user count. Unpopular extensions may not be stable or safe.
  • Low **** ********* *** ******* **** **** * ****** **** ***** ******** *** **** ****** ** ** ****** *** *****
  • Low **** ********* *** ***** **** **** * ****** **** ***** ********** *** **** ****** ** ** ****** *** *****
  • Good **** ********* *** **** **** *******
Extension Guard
Extension Guard

Discover every extension in use, analyze risks, and enforce blocking policies with Extension Guard

Secure Your Browser
Upgrade to see full risk analysis details

Best Tracy Alternatives

Here are some Firefox add-ons that are similar to Tracy: