Firefox Add-ons Verified

AdGuard VPN — Privacy & Security

by Adguard Software Ltd · 11.3K users · 3.9 rating
1bb104d4-06e1-54cf-9e9f-d39425951e13 | v2.11.1
82/ 100
HIGH risk
+17 since v2.10.4
Risk verdict
Review before use

Score-based assessment (high risk, 82/100). No analyst review available.

Analysis record

Analysed
1 months ago
Version
v2.11.1
Artifact
SHA256 3EB…885
Source
Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

277 detail rows

YARA Rule Matches

15 rules
SeverityRuleHitsFilesMetadata
HIGHsupply chain sourcemap appended iife 4
success-auth.jsconsent.jsoptions.js +1 more
-
LOWpostinstall file download 51
_locales/he/messages.jsonpreloadTheme.js_locales/ca/messages.json +48 more
-
LOWcredential generic tokens 7
custom-dns-links.jsoptions.jssuccess-auth.js +4 more
-
LOWNoUseWeakRandom 5
consent.jspopup.jsoptions.js +2 more
-
LOWpostinstall crypto operations 10
_locales/fa/messages.jsonexport.jscustom-dns-links.js +7 more
-
LOWpostinstall network communication 52
assets/fonts/regular.woff2_locales/hy/messages.json_locales/ja/messages.json +49 more
-
LOWpostinstall file manipulation 50
_locales/hy/messages.json_locales/uk/messages.jsonbackground.js +47 more
-
LOWpostinstall system command 55
_locales/nl/messages.json_locales/hy/messages.json_locales/sk/messages.json +52 more
-
LOWpostinstall registry modification 3
popup.jsoptions.jsbackground.js
-
LOWpostinstall obfuscation 9
popup.jsbackground.jsexport.js +6 more
-
LOWOriginsNotVerified 2
options.jsbackground.js
-
LOWLocalStorageShouldNotBeUsed 3
popup.jsoptions.jsbackground.js
-
LOWDebuggerStatementsShouldNotBeUsed 5
popup.jsconsent.jsoptions.js +2 more
-
LOWcredential env files 5
consent.jspopup.jsoptions.js +2 more
-
LOWpostinstall persistence mechanism 9
consent.jsbackground.jspreloadTheme.js +6 more
-

Network Indicators

Concrete URLs, domains, IPs, emails, and hashes extracted from the analyzed artifact.

1,310 total
...

Network indicators are queued for lazy loading

Scroll this section into view to load the detailed rows.

Publisher Evidence

Limited evidence

Adguard Software Ltd

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Firefox does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

48
Noisy-finding weight
x1.00
Publisher domain
adguard-vpn.com
Observed
Store verification signal
Limited signal
Limited
Extension portfolio
2
Portfolio

13 evidence rows available.

Finding Categories

4
Malware Signatures
3
Obfuscation
3
Network
1,310
IoC Indicators

YARA Rules Matched

15 rules(270 hits)
supply chain sourcemap appended iife postinstall file download credential generic tokens NoUseWeakRandom postinstall crypto operations postinstall network communication postinstall file manipulation postinstall system command postinstall registry modification postinstall obfuscation OriginsNotVerified LocalStorageShouldNotBeUsed DebuggerStatementsShouldNotBeUsed credential env files postinstall persistence mechanism

Requested Permissions

11 permissions
management

Manage other installed extensions

Dangerous
proxy

Control the browser's proxy settings

Dangerous
<all_urls>

Access and modify data on every website you visit

Dangerous
webRequest

Intercept, modify, and block all network requests

High
tabs
Medium
alarms
Low
contextMenus
Low
notifications
Low
privacy
Low
storage
Low
unlimitedStorage
Low

Security Analysis Summary

Security Analysis Overview

AdGuard VPN — Privacy & Security is a Firefox Add-ons extension published by Adguard Software Ltd. Version 2.11.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 81.76/100 (HIGH risk) based on 1587 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 6 finding(s)
  • Medium: 1315 finding(s)
  • Low: 266 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

AdGuard VPN — Privacy & Security is published by Adguard Software Ltd on the Firefox Add-ons marketplace. The extension has approximately 11K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Firefox version history

Risk trend by version

5 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected
82
Change since first
+17
Change from previous
+17
Versions:
First analyzed version
2.7.7
Jan 18, 2026
Risk range
65 to 82
Across analyzed versions
Latest analyzed version
2.11.1
Aug 21, 2026
Selected version
high
Version
v2.11.1
1 months ago
Risk score
82
Findings
1587
Change vs previous
+17

Pick any point on the chart to explore that version's code below.

About This Extension

AdGuard VPN — the best free solution for your online security from the creators of a famous ad blocker. Encrypt your connection, hide your IP address and websites you visit from anyone (including your Internet provider) and ensure anonymous browsing on the web. Conceal your location and unblock geographically restricted websites or content with no limitations on traffic. For 10 years AdGuard ad blocker has been protecting its users from annoying ads and spying trackers. Today, over 25 million people worldwide trust AdGuard with their privacy, so we added the brand new tool to even further strengthen their cyber security — AdGuard VPN. Complementary to all the features any modern VPN is armed with, AdGuard VPN has something more to offer — it’s integrated with other AdGuard products and provides protection from tracking and malware. Join us and surf safely! More on why you need AdGuard VPN: - Advanced Privacy Protection - Unblock Websites and Content - Speed &amp; Unlimited Traffic - No Logging Policy Why does AdGuard VPN require permissions? Here is detailed information on the permissions we need. We are always transparent to users about what we use and why we need it. - `proxy` - This is what the extension does. - `contextMenus` - We use this to add a context menu items that allow enabling or disabling the VPN. - `management` - We use this to provide an option to turn off another proxy-extension in one click. - `notifications` - We use this to show a notification after a successful user authentication via social networks. - `privacy` - We use this to provide the “Disable WebRTC” feature which is crucial to prevent websites from detecting user’s real IP address. - `storage`, `unlimitedStorage` - These permissions are required in order to store user settings - `webRequest`, `webRequestBlocking` - We use these for two purposes. First, we have a webRequest listener that is listening for error events. We use it to detect non-routable (hosted in the LAN, for instance) domains and automatically add them to the list of exclusions. Also, we have an `onAuthRequired` handler that handles authentication for the endpoints that require it. - `&lt;all_urls&gt;` is necessary because otherwise `onAuthRequired` won’t fire. Also, this is necessary for the non-routable domains detection feature. Stay in touch Support team: support@adguard<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/dcefb86536bb970c3cf66ad8c2699e4d51906386803f1a184c91227b514530bd/http%3A//-vpn.com" rel="nofollow">-vpn.com</a> Twitter: <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/f1f207ce9f7b28c235dc9013f975794f1e67ea4a680e62168b851ad851c90094/https%3A//twitter.com/AdGuard" rel="nofollow">https://twitter.com/AdGuard</a> Facebook: <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/909916670b11656c5e0263ea556a76964beb0f0abb984e970822dd0553c228a2/https%3A//www.facebook.com/adguarden" rel="nofollow">https://www.facebook.com/adguarden</a> Official website: <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/71b0aafa24b8e63850c2c8ebfb15c21c58af52d65a8d09730e5ec21ce744ad1a/https%3A//adguard-vpn.com" rel="nofollow">https://adguard-vpn.com</a> © Adguard Software Limited

Frequently Asked Questions