VeraSite

Privacy-first, local-only trust scoring for websites and Chrome extensions. Analysis runs entirely on-device.

VeraSite tells you, at a glance, how much you should trust the page in front of you — and every extension you have installed — without sending a single byte about your browsing to anyone. It computes a transparent 0–100 score and a plain-language Safe / Caution / Risky label, with the full reasoning shown right next to it. When you want to know "why?", every signal is visible: trackers detected, fingerprinting attempts, sensitive APIs requested, AI endpoints contacted without citations, privacy policy presence, connection security, and more. LOCAL-ONLY BY DEFAULT The default install does not contact any server. No URLs leave your device. No analytics, no telemetry, no crash reports. The score is computed locally from what your browser can already see. EXPLAINABLE Every score comes with a list of reasons in plain English and the raw evidence behind them. No black box. You can also tweak how much each signal weighs in the final score from Settings, and watch the score recompute instantly. MINIMAL PERMISSIONS VeraSite uses Chrome's activeTab permission so it only looks at a page when you click the toolbar icon. It does not request access to all your sites by default. If you want auto-analyze, you can opt in — and revoke it at any time. INSTALLED EXTENSIONS, RANKED VeraSite reads the metadata of your installed extensions (permissions, host scope, install type — never the contents of the extensions themselves) and shows you which ones are most aggressive, with a per-extension score and the reasons behind it. OPT-IN CLOUD ENRICHMENTS, WITH PAYLOAD PREVIEW If you ever want richer signals — WHOIS / domain age, Safe Browsing checks, VirusTotal lookups, Chrome Web Store metadata, signed list auto-updates — each is a separate toggle in Settings. Before any request is made, VeraSite shows you exactly what would be sent, where, and how long it would be retained. YOUR DATA IS YOUR DATA The audit log of recent analyses lives only on this device. Export it as JSON, or wipe everything VeraSite has stored from a single button. Settings, cache, and audit go together. OPEN SOURCE The full source is auditable so anyone can confirm the network behavior, the scoring math, and the consent flow. What it can't do: - VeraSite is not antivirus software. It is a signal aggregator that helps you make informed decisions. - A high score does not mean a page is safe to enter your bank password on. Always exercise judgment. - The bundled lists are curated, not exhaustive. Signed updates and manual imports keep them current — both off by default. Permissions explained: - activeTab: scope the analysis to the page you're looking at, only when you click the icon. - scripting: run a one-shot probe inside that page instead of an always-on content script. - storage: store your settings and recent analyses locally. - management: list installed extensions so we can score them. - tabs: read the URL of the active tab so the popup shows the right result and the badge stays in sync as you switch tabs. - alarms: re-check Pro license expiry once a day, locally, with no network call. If anything in this listing feels overstated or unclear, please send feedback. We will fix the listing or fix the product.