Jsmon Extension

## Jsmon Security Analyzer — Browser Extension

Automatically capture and analyze web traffic directly from your browser.
Every JavaScript file, API response, config, and document is sent to
Jsmon's engine for real-time security analysis — no manual uploads, no proxies required.

### What it detects

- **Exposed secrets** — API keys, tokens, credentials leaked in JS or config files
- **Shadow APIs** — undocumented or forgotten endpoints buried in frontend code
- **Supply chain risks** — vulnerable or suspicious NPM packages loaded at runtime
- **Sensitive data exposure** — PII, internal paths, environment variables
- **Misconfigured assets** — insecure headers, open redirects, debug artifacts

### Supported file types: 20+ extensions

### How it works

1. Install the extension and connect your Jsmon account
2. Browse normally — the extension passively captures traffic
3. Matched file types are forwarded to Jsmon for deep analysis
4. View findings in your Jsmon dashboard: secrets, APIs, risks, asset inventory

### Who it's for

- **Security engineers** running recon or pen tests on web applications
- **AppSec & EASM teams** monitoring their organization's external attack surface
- **Bug bounty hunters** accelerating JS recon workflows
- **CISOs & compliance teams** enforcing continuous visibility across web assets

### About Jsmon

Jsmon is an AI-powered External Attack Surface Management platform trusted
by security teams worldwide. Built by practitioners, for practitioners.

🔗 jsmon.sh