Same circle, same add-on ID, but it actually protects the person and audits the page they are on, including offline.

Security tab — looks through the current HTML, scripts, forms, URL and local storage for XSS indicators, SQL error text, CSRF gaps, leaked keys, HTTP/mixed content, missing CSP/SRI, copy-jack, punycode, short links, miners, hidden password fields, brand/link mismatch, card fields. It does not fire attack payloads.
Stronger URL tab — open-redirect params, traversal-shaped values, javascript: / data: URLs, markup in the address, credentials in the URL — not only HTTPS.
Do not type — if it finds a real risk it tells the user not to enter passwords, OTPs, cards or IDs; marks those fields; can block submit of a dangerous password/file form.
Live re-scan when the page HTML changes.
Export a local audit JSON and keep a short on-device history.
Still on-device / offline. Nothing is uploaded.