Enables enterprise IT teams to steer and secure Chrome browser traffic (especially on Chromebooks) through Netskope's cloud security platform, providing web filtering, data loss prevention, and threat protection without requiring a traditional VPN or endpoint agent

1) Admin deploys extension via enterprise policy with tenant configuration in managed storage. 2) Extension reads tenant/config from MDM or user-entered value. 3) Proxy settings are configured to route traffic through eproxy-{tenant}:8081 or PAC script. 4) User authenticates via Netskope auth service (authservice.goskope.com); nspatoken cookie is captured and stored. 5) X-NS-PATOKEN header is injected on all subsequent HTTP requests via declarativeNetRequest. 6) Extension long-polls Netskope notification service for security alerts and displays user notifications when policy actions occur (e.g., blocked downloads).

Target users: Enterprise IT administrators managing Netskope deployments / End users in organizations using Netskope cloud security (primarily Chromebook users)

Cannot verify the actual authentication UI on authservice.goskope.com since it's an external service - cannot confirm whether it uses SSO, username/password, or both
The Netskope platform itself requires an enterprise subscription, but extension-level gating is not present in source code

Monetization

No paid features detected

The extension itself has no payment gates, premium features, subscription logic, or billing APIs. All keyword hits for 'pro' are false positives from 'proxy', 'process', 'private', 'promise', 'protected'. 'Subscribe' hits are event listener subscriptions (storage changes, scheduled alerts) in notification/longpull.js lines 34-35, 83, 97, 172-173. However, Netskope is a commercial enterprise security platform - organizations must have a Netskope subscription to use this extension. The extension requires a valid tenant configured by enterprise admins.

Confidence: 90
Payment platform: --
Source: AI / High
Login required: Yes
Reason: The extension facilitates authentication to the Netskope Cloud Explicit Proxy service. An 'nspatoken' is obtained from cookies at goskope.com (proxy.js lines 230-234), stored locally, and injected as an 'X-NS-PATOKEN' header on all web requests (proxy.js lines 239-284). Content scripts on authservice.goskope.com/nsauth/authenticate* (manifest.json lines 27-30) auto-complete the authentication flow. The extension also manages nsauth_check and nsauth_session cookies (proxy/constant.js line 3). This is destination_service authentication to Netskope's cloud security platform, not an extension-specific account.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：proxy
扩展能力较强：storage、cookies
主机权限覆盖范围较宽

Publisher

Netskope

Netskope Inc

Email: [email protected]
Phone: +886970858238
Address: 2445 Augustine Dr 3rd floor Santa Clara, CA 95054-3032 US

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access