Enables Google Workspace administrators to maintain visibility into the security posture of managed devices (laptops and desktops) by automatically collecting and syncing device metadata to the Google Admin console.

The extension is typically force-installed by a Google Workspace administrator via enterprise policy. Once installed, it automatically collects device information (OS, hardware identifiers, security posture) and syncs this data to Google's SecureConnect backend APIs. End users sign into their Google work/school account, and the extension periodically reports device status. Administrators can then view this information in the Google Workspace Admin console for compliance and security monitoring.

Target users: Google Workspace enterprise administrators / IT administrators managing corporate devices / End users on enterprise-managed devices (required by admin)

The background_service_worker.js is very large (19,742 lines) and minified, making full manual review impractical; focused on key sections near relevant line numbers.
Cannot verify the native helper binary (com.google.endpoint_verification.api_helper) as it is not included in the extension package.

Monetization

No paid features detected

The initial heuristic detected 'subscribe', 'upgrade', and 'license' keywords, but these are all false positives. 'subscribe' is used for event observer pattern (e.g., subscribing to sync state changes, account updates). 'upgrade' is used for Material Design Lite DOM component upgrading (componentHandler.upgradeDom). 'license' appears only as @license code comments. 'pro' matches are from 'prototype', 'protecting', 'proper', etc. There is no evidence of payment UI, billing APIs, premium feature gating, Stripe/payment processors, or subscription models. The extension is a free Google Workspace enterprise admin tool.

Confidence: 90
Payment platform: --
Source: AI / High
Login required: Needs review
Reason: The extension explicitly requires the user to be logged into a Google work or school account. The popup shows a signin view ('signin-view') when no accounts are present with the message 'requires you to be logged into your work or school account.' (messages.json line 18-19). An 'Add account' button redirects to https://accounts.google.com/addsession. The manifest declares OAuth2 with Google client_id and cloud-platform scope. The extension uses chrome.identity.getAuthToken and chrome.identity.getProfileUserInfo to authenticate.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging
扩展能力较强：cookies、storage

Publisher

google.com

Independent publisher

Email: [email protected]
Phone: --
Address: 1600 AMPHITHEATRE PARKWAY MOUNTAIN VIEW, CA 94043 US

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access