I built a free Chrome extension security scanner now Fortune 500 teams use it

Built this to speed up my own bug bounty workflow. Got tired of manually pulling apart .crx files to check what permissions extensions were asking for and why.

Paste a Chrome Web Store URL, it analyzes the extension and flags sketchy stuff. Added an LLM layer that catches things grep can't.

Made it free, mass awareness helps find more vulns. 20k+ people use it now, then random enterprise security teams started showing up. Still wrapping my head around that one.

https://crxplorer.com

Feedback welcome.