The Top Browser Extensions in Corporate Environments

When organizations think about software asset management (SAM), they usually think about installed applications, SaaS subscriptions, and cloud services. Browsers themselves are typically treated as standard software.

But inside the browser lives an entire ecosystem of third-party software that often escapes SAM programs entirely: browser extensions.

These extensions can access corporate data, record screens, manage passwords, and inject code into web applications. Yet most organizations have no inventory, no governance, and no risk assessment for them.

Based on telemetry from around one million corporate users on their work computers, Xensam has identified the most popular browser extensions used in real business environments. This is a layer of enterprise software that has largely gone unmeasured, unmanaged, and unseen.

The Top 10 Browser Extensions:

1. Grammarly – AI writing and grammar checker

2. uBlock Origin

3. Scribe – AI documentation, SOPs & screenshots

4. LastPass – Free password manager

5. Chrome Media Router

6. Zotero Connector – Research & citation management

7. Ruffle – Flash emulator

8. Adblock Plus

9. Loom – Screen recorder & screen capture

10. Tango – Document and automate your processes

Risk Insights from the Top-10 List

Let’s look at what this top-10 list tells us from a risk perspective.

High Risk Category: Data and Credential Exposure

Grammarly – AI writing and grammar checker

Grammarly processes everything users type in the browser. That can include emails, passwords, documents, internal tools, and chat systems. From a SAM and security perspective, this is a third-party cloud service embedded in daily workflows.

LastPass – Free password manager

Consumer password managers on corporate devices are often discouraged. They store corporate credentials in third-party vaults outside enterprise control, which can create governance and compliance challenges.

Loom – Screen recorder & screen capture

Screen recording tools are extremely useful, but they can capture sensitive systems, customer data, and internal processes. Recordings are often stored in the cloud and shared externally.

Moderate Risk Category: Workflow and Process Exposure

Scribe and Tango

These tools automatically document workflows. While valuable for productivity, they can inadvertently capture internal systems, credentials, and sensitive processes.

Zotero Connector

Primarily used for research and citation management. Lower risk, but still a third-party integration with browsing activity.

Lower Risk Category: Content and Browser Behavior

uBlock Origin and Adblock Plus

Generally considered low risk and often recommended. Still, they are third-party code running in the browser and should be inventoried.

Ruffle – Flash emulator

Mostly a legacy compatibility tool with limited enterprise impact.

Chrome Media Router

A built-in browser component used for casting media. Typically low risk, but still part of the browser’s software footprint.

The SAM Blind Spot: You Can’t Manage What You Can’t See

Most Software Asset Management (SAM) tools excel at discovering installed applications and SaaS subscriptions. Browser extensions fall into a grey zone: they are neither traditional software installs nor SaaS subscriptions.

As a result, many organizations simply don’t know:

• Which extensions are installed

• How many users are using them

• Whether they are free, paid, or enterprise-licensed

• Whether they align with security and compliance policies

For SAM professionals, this means an unmanaged software layer with licensing, cost, and risk implications.

Why Visibility Is the First Step

This is not about banning extensions. Many of these tools drive productivity and are widely used.

The goal is visibility and governance:

• Inventory which extensions are in use

• Understand adoption patterns and business justification

• Identify high-risk categories such as AI assistants, password managers, and screen recorders

• Support informed security and procurement decisions

Conclusion: The Browser Is Now a Software Platform

The browser is no longer just a tool to access applications. It is a platform running dozens of third-party components that interact with corporate data every day.

For SAM professionals, ignoring browser extensions means accepting a blind spot in software inventory, compliance, and risk management.

Xensam provides visibility into browser extensions across your environment, adding a missing layer to your software inventory.

For SAM teams, this means:

• A more complete software inventory

• Better alignment with security and compliance

• Insight into shadow IT inside the browser

• Data to support governance and procurement discussions