Grandma's Guardian by Tsora Pop

A extension to protect your grandma, grandpa, or anyone! Introducing "Grandma's Guardian", a security tool you can setup for yourself or a loved one to reduce the likelihood they become victims of an online scam. Simply Install, add your top 20, delete any domains you know the user or yourself won't need, and safely browse! This is not intended as an Ad blocker, as advertisements will load on the web page. Best of all: Absolutely no data is collected on you by the developers. We just want you to empower family to be as safe as possible online. This extension works on Chromium-based browsers and on Firefox (desktop and Android, Firefox 140 or later).

Features:
Manifest V3
Domain Allow Listing: Only allow navigation to websites explicitly permitted! You no longer have to fear popups or clicking a malicious link.
Always-Block List: Remote-control tools (AnyDesk, TeamViewer, etc.) and abused hosting stay blocked, even under an allowed domain such as sites.google.com.
MIME Type Allow Listing: Only allow specific file types to be downloaded from any platform
Semantic Filtering: Hide scam wording from your user so they are less likely to engage with the scammer, with a "Show anyway" button.
Remote Lists: Subscribe to lists from the open source community for domains, blocked domains, MIME types, and scam phrases. Lists refresh daily; you can also import a local .txt file.
Helper Contact and Requests: Blocked pages show who to call, and let the user ask you to allow a site. Approve requests with one click.
Activity Logs: Blocked sites, stopped downloads, scam text (hidden or shown anyway) and setting changes. Export to CSV/JSON, or forward to a log collector or SIEM.
Disguise-resistant Scam Filtering: Catches spaced-out letters, look-alike characters, numbers for letters, invisible characters and phrases split across formatting.
Setup Guide: A step-by-step guide opens on first install.
Top Sites quick add: Quickly add the websites a user visits most to the allow list.

See CHANGELOG.md for what changed in 2.x.

Supported Platforms:
Windows
MacOS
ChromeOS Linux
Mobile (Vivaldi, Lemur, Titanium)

Supported Browsers:
Chrome
Edge
Brave
Opera
Vivaldi
Lemur
Titanium
Firefox 140+ (desktop) and Firefox for Android 142+: see Firefox

Disclaimer: This browser extension is developed by someone who is active in the defensive cyber security community and based in North Carolina, United States.

Community Asks: Please creates lists that work for your community. Whether this be industry specific, other countries, or localities, and share them on GitHub!

Grandma's Guardian GitHub: https://github.com/Tsora-Pop/Grandmas-Guardian
Published Lists by Developer: https://github.com/Tsora-Pop/Tsora-Pop.github.io/tree/main/lists

Only allowed browser extensions
The same allowlist approach, for browser extensions (Extensions tab). Scammers often have people install an extension: remote control, fake "security" tools, coupon or search add-ons that read every page and steal sign-ins.

Turn it on under Extensions → Only allow these browser extensions. The browser asks once for permission to manage extensions; it's optional, so updating Grandma's Guardian never needs new permissions. Extensions installed at that moment are added to the allowed list (review them in the list shown).
Any other extension is turned off as soon as it's installed or switched on (also if someone switches it back on by hand), and a page explains what it is, where it came from and what it can do in plain words: "Read and change website sign-in cookies (could take over accounts)". The person can Ask to allow it, or Remove it.
Always-blocked extensions are turned off even if allowed; only a support team can make an exception. The default list holds remote-control extensions (Chrome Remote Desktop). Add IDs by hand, or subscribe to online lists of IDs like the other lists; the bundled lists are in lists/extension/ for publishing on your list site.
Logged on the computer (Activity → Extensions, and the CSV/JSON export) and forwarded to a collector if that's on: name, ID, version, where it came from, its permissions and websites, and warnings for powerful permissions or installs from outside a store.
With a support team, requests go to the console with the same details; approving allows it for that computer or every computer. The console can also push extension IDs directly. An organization can require two people for risky extensions.
Never touched: Grandma's Guardian itself, themes, and extensions installed by the organization's policy. Turning the feature off switches back on everything it switched off.
For computers you manage, browser policy is stronger still (ExtensionInstallAllowlist / ExtensionInstallBlocklist in Chrome and Edge, ExtensionSettings in Firefox); this feature covers the computers you don't manage that way.