Professional IT support
Our proactive IT support team relates to the challenges faced by other businesses and offers our own unique approach to help optimise your IT infrastructure and workflows. If you need helpdesk IT support, network management, cloud solutions, cybersecurity expertise, or strategic IT consulting, connect with us.
Learn more ->IT Support
Outsourced IT Support Packages & Pricing Remote IT Support Proactive IT Support Switching Providers Pricing Estimator
Fully managed IT services
IT is at the heart of every business. Make sure it’s managed reliably and professionally.
Learn more ->
Cyber Security services
IT is at the heart of every business. Make sure it’s managed reliably and professionally.
Learn more ->Featured Posts
Password theft is a common problem are passkeys the way to go?
Read more ->
Supply Chain Security
Read more ->Frequently Asked Questions
Here you can find a comprehensive collection of helpful answers to the questions we are most frequently asked, designed to provide quick and clear guidance on our services and how we work.
Learn more ->Featured Posts
Three Power Automate workflows to cut costs
Read more ->
The Reality of AI Licensing Waste
Read more ->Our Vision
Our vision is to make the organisations we partner with the very best they can be.
Learn more ->Featured Posts
How we keep your systems secure
Read more ->
Do you handle new starters and leavers for my business?
Read more ->Request free IT audit
Micro-SaaS Vetting
The 5 minute security check for browser add-ons
Browser add-ons often have a reputation for being "small"—a quick install for a tiny productivity boost. In reality, a browser extension is more like a micro-vendor sitting inside your browser session. It can see what you see, interact with your pages, and often access the same cloud apps your business runs on. This is why a security check matters. It isn’t about blocking every add-on; it’s about ensuring one over-privileged update doesn’t turn a "helpful helper" into a major data leak.
Why extensions are a high leverage risk
Extensions live where your staff work all day. Because they are granted "special authorisations," they can often read and modify everything in a browser tab—capturing form data, viewing browsing history, or accessing sensitive cloud tools. The risk is twofold: permissions overreach (asking for more data than required) and change over time (a safe extension today can be sold to a malicious developer tomorrow).
The 5-minute extension security check
Use this repeatable process to vet extensions without creating an IT bottleneck:
1. Vet the Developer like a Vendor
If you wouldn't give a random supplier access to your customer records, don't give a random extension access to your browser.
- Check: Does the developer have a professional website and a clear track record?
- Source: Only use official stores (Chrome Web Store, Microsoft Edge Add-ons) rather than manual downloads.
2. Treat the description as a contract
The store listing should be a mini-disclosure. It must clearly explain what the tool does and exactly why it needs specific data. Look out for any mention of "analytics" or "data sharing" that doesn't match the core feature.
3. The permission sanity check
This is the most critical step. Microsoft and Google both state that extensions must only request permissions essential for their function.
- Red Flag: Does a simple "dark mode" tool really need to "read and change all your data on all websites"? If the permission doesn't match the feature, don't install it.
4. Monitor "permission creep"
Extensions update automatically. If an add-on suddenly requests new, broader permissions, treat it with suspicion. It is often safer to uninstall the tool than to grant unexplained access.
5. Decide: approve, avoid, or escalate
- Approve: Credible vendor, clear purpose, and tight permissions.
- Avoid: Vague descriptions or "just in case" access requests.
- Escalate: If a tool is genuinely useful but requires broad access to sensitive systems, have IT review it and add it to a formal "allowlist".
From "quick Install" to managed standard
Unvetted extensions are a hidden vulnerability. By standardising how your team installs them, you turn impulse decisions into clear security standards. Focus on reducing extension sprawl, treating permission changes as red flags, and using browser-level controls to enforce safety by default. Contact us today
Get support tailored to your company's specific requirements!
Our mission is to provide technology guidance, expertise and support to enable our customers to grow their business.
Start Here
Sign up to receive useful information regarding your IT without the fluff
By Subscribing you are agreeing to receive our IT updates newsletter released each Month. You will not receive anything else.
