Last updated: September 12, 2026

CyberLensAI is operated by Astra Devs. The extension runs only when the user clicks it. It does not continuously monitor, sell, or use browsing activity for advertising.


In local mode, the extension inspects only the active page for browser-visible signals such as HTTPS usage, insecure resources and forms, password fields, external scripts, embedded frames, inline script surfaces, and common security response headers. To inspect response headers, it requests the active page again directly from that same website using the browser's existing session, with a five-second timeout. The page URL, page signals, and local result are not sent to CyberLensAI. Results are stored in a bounded, per-page cache in Firefox for up to 24 hours.


If the user explicitly connects a CyberLensAI account and starts a cloud scan, the extension sends the selected page URL to CyberLensAI over HTTPS. CyberLensAI stores the target URL, scan findings, security report, and related quota information in the user's account to provide the requested assessment, history, and remediation guidance.

The extension stores a revocable, Firefox-specific CyberLensAI credential in Firefox extension storage. Account connection uses a short-lived, single-use code through Firefox Identity; the credential is never placed in webpage content. Firefox treats the selected URL and credential as optional browsingActivity and authenticationInfo data. That permission is requested only when the user chooses to connect or run a connected scan. Declining or revoking it leaves private local checks available.

• activeTab: accesses only the website whose toolbar icon the user clicked.
• scripting: runs the local check in that selected tab.
• identity: completes user-initiated account connection.
• storage: stores the connection credential and bounded result cache locally.
• https://api.cyberlensai.com/*: supports user-requested cloud scans, quota lookup, and credential exchange.
• sidebar_action: displays the scanner in Firefox's sidebar.

Users can disconnect the browser-specific credential from the extension or CyberLensAI account settings, clear local data by removing the extension, and delete account data through CyberLensAI.

Full privacy policy: https://www.cyberlensai.com/privacy
Support: support@astrawebdev.com
Privacy inquiries: privacy@cyberlensai.com