AI product readAssessment lockdown/security extension for e-assessments running on ChromeOS, designed for the Vretta educational platform
Prevents cheating during online assessments by locking the browser environment — blocking tab switching, new tab/window creation, keyboard shortcuts, context menus, DevTools, clipboard operations, and enforcing fullscreen mode, ensuring students cannot access unauthorized resources during an exam
1. The Vretta assessment platform sends a VRETTA_ACTIVATE_REQUEST message to the extension via externally_connectable. 2. The content script forwards activation to the background service worker. 3. The background sets the browser into lockdown: enforces fullscreen, blocks new tabs/windows, monitors tab events, and starts URL watchdog. 4. The content script enforces in-page restrictions: blocks context menus, keyboard shortcuts, detects DevTools, clears clipboard, and traps focus. 5. If the assessment tab is accidentally closed, it is automatically recreated at the trigger URL. 6. To end the assessment, a supervisor enters the password, triggering VRETTA_DEACTIVATE_REQUEST which lifts all restrictions.
Tab and window lockdown — blocks creation of new tabs/windows during assessmentFullscreen enforcement — forces browser into fullscreen with polling-based re-enforcementContext menu and keyboard shortcut blocking — prevents right-click, Ctrl+C/V/X, F12, etc.DevTools detection — detects and warns when Developer Tools are openedClipboard clearing — clears clipboard on window blur events to prevent copy-pasteFocus trap — prevents focus from escaping to browser UI elements
- Target users
- Students on ChromeOS taking Vretta platform e-assessments / Teachers and invigilators supervising online assessments / Educational institutions using the Vretta platform
- Source code is heavily minified, making some logic harder to trace, but the overall architecture is clear from the sourcemap-embedded source references and enum declarations.
- The extension connects to firestore.googleapis.com for telemetry/logging (trigger_url_lost events), but the exact scope of data collection could not be fully determined from the minified code.
- Cannot confirm whether the Vretta platform itself (the destination web app) requires a user login to access assessments — only the extension itself is analyzed.
MonetizationNo paid features detected
No evidence of paid features, subscriptions, payment platforms, or feature gating within the extension. The 'pro' keyword hits in the static scan are false positives from obfuscated code (minified variable names). There are no Stripe, payment, subscription, billing, or upgrade references. The extension is a lockdown/security tool distributed as part of the Vretta educational platform infrastructure.
- Confidence
- 92
- Payment platform
- --
- Source
- AI / High
- Login required
- No
- Reason
- The extension does not require user login. It is activated externally by the Vretta assessment platform via chrome.runtime messages (VRETTA_ACTIVATE_REQUEST) through externally_connectable. The 'supervisor password' found in the code is a local password set by a teacher/invigilator to control lockdown deactivation, not an account login. Students interact with the extension only as passive subjects of the lockdown — they never authenticate.