Site Shield

Real-time security score for every website. Detects phishing, malware, and ad trackers. Know if a site is safe before you click.

Know if a website is safe before you interact with it. Site Shield analyzes every page you visit and displays an instant security score (0–100) in your browser toolbar. HOW IT WORKS Every time you navigate to a website, Site Shield runs three checks in real time: 1. HTTPS ENCRYPTION Verifies whether the connection is encrypted. Unencrypted HTTP sites can expose your data to anyone sharing the same network, including on public Wi-Fi. 2. PHISHING AND MALWARE DETECTION Checks every URL against the Google Safe Browsing API — the same database that powers Chrome's built-in protection. Catches phishing pages, malware distributors, and deceptive sites before you enter any credentials or personal data. 3. TRACKER DETECTION Scans each page for 60+ known tracker domains, including analytics, advertising, and social media trackers. Trackers are identified and grouped by category: Analytics, Advertising, Social, Session Recording, and Marketing. WHAT THE BADGE MEANS Green ✓ — HTTPS active, no threats detected (score 80–100: SECURE) Amber ! — No HTTPS encryption (score 50–79: CAUTION) Red ✗ — Flagged by Safe Browsing as phishing or malware (score 0: DANGEROUS) Click the badge at any time to see your full security breakdown: the score ring, encryption status, Safe Browsing result, and the complete list of trackers found on the current page. SETUP Tracker detection and HTTPS checking work immediately — no configuration required. To enable phishing and malware detection, you need a free Google Safe Browsing API key: 1. Go to console.cloud.google.com and sign in 2. Create a new project and enable the Safe Browsing API 3. Create an API key under Credentials 4. Open Site Shield options (right-click the icon → Options) and paste your key The free tier allows 10,000 URL checks per day. Results are cached locally for one hour so frequently visited sites do not count against your quota. PRIVACY Site Shield has no servers. It does not collect your browsing history or transmit data to its developer. When a URL is checked against Safe Browsing, that request goes directly from your browser to Google's servers. Your API key is stored only in your browser's local extension storage. Full privacy policy: https://RLEO21.github.io/site-shield/privacy-policy.html.