AI 产品解读Enterprise web browsing security control — provides color-coded URL safety ratings and blocks malicious page navigation and suspicious file downloads as part of Trellix Endpoint Security
Protects enterprise users from phishing sites, malicious downloads, and dangerous web content by integrating browser-level controls with the locally installed Trellix Endpoint Security platform
User browses web → extension content scripts (mcafee_wa_coreengine.js, mcafee_wa_contentplg.js) injected on all pages evaluate URLs → background script (mcafee_wa_bkground.js) communicates via native messaging with locally installed Trellix Endpoint Security software (siteadvisor.mcafee.chrome.extension) → software returns safety ratings → extension sets color-coded toolbar icon and blocks/warns on dangerous pages → user sees safety status and blocked navigation if needed
Color-coded URL safety ratings (green/yellow/red/grey toolbar icons)Blocking navigation to malicious and phishing web pagesBlocking suspicious file downloads with warning promptsLogin page detection for phishing/pharma protectionSearch result safety annotations in search enginesPassword protection monitoring
- 目标用户
- Enterprise employees whose organizations deploy Trellix Endpoint Security Web Control / IT-managed environments requiring centralized web security controls
- The 'upgrade' and 'subscription' strings are legacy McAfee SiteAdvisor localization entries; cannot fully confirm if any are actively referenced in the UI without exhaustive runtime tracing, but no functional billing/payment code exists in source.
- The cookie syncing behavior (doubleclick.net, zeotap.com at lines 1156-1188 of bkground.js) is notable but orthogonal to the login/paid analysis.
- The extension's full behavior depends on the native host application (Trellix Endpoint Security Web Control) which is not included in the extension package.
付费分析未识别到付费功能
The extension itself contains no payment processing, feature gating, or subscription management code. The heuristic-detected 'subscription' and 'upgrade' keywords are legacy localization strings inherited from the older McAfee SiteAdvisor consumer product — e.g., 'Synchronize Subscription' (res_133), 'Upgrade to [%SITEADVISORPLUS%]' (res_125/res_140), and 'Buy Now' (res_141). These are static UI message strings, not active billing features. The extension is an enterprise component (`enterprise: true` hardcoded at mcafee_wa_bkground.js:50) of Trellix Endpoint Security, licensed at the organizational level. No Stripe, PayPal, or payment platform code exists. No upgrade prompts or feature locks were found in the functional JavaScript.
- 置信度
- 88
- 支付平台
- --
- 来源
- AI / 高
- 需要登录
- 否
- 登录理由
- The extension requires no user login or account. All 'login' keyword hits in source code (mcafee_wa_contentplg.js lines 1299-1412) are a LoginLinter class that detects whether the *visited webpage* is a login page for phishing detection — not authentication for the extension. The 'token' references (line 28) are static URL parameters (`whitelistUrl: "about:blank?command=whitelist&token=1"`), not auth tokens. The extension communicates with a locally installed native host (`siteadvisor.mcafee.chrome.extension` at mcafee_wa_bkground.js:2647) — the Trellix Endpoint Security Web Control software — via native messaging. No OAuth flows, no login UI, no credential entry exists in the extension.