13 extensions. One mission.

Free cybersecurity tools for Chrome, Edge, and Brave. Scam detection, breach alerts, tracker X-ray, dark patterns, and more. Built by pentesters. Used by everyone.

Excalion

Built by attackers. For defenders.

Excalion is built by Oletros, an offensive security company. We know how scams work, how trackers hide, how phishing pages fool you, and how supply chains get compromised. We turned that knowledge into 13 extensions that protect your browser. Most of them share anonymized findings back to a crowdsourced database so detection improves for everyone.

  • 13 extensions for security, privacy, compliance, and governance
  • Crowdsourced intelligence powered by anonymized user data
  • Built by offensive security professionals at Oletros
Excalion extension dashboard
Excalion

Why Excalion

13

Extensions covering every angle: scam detection, breach alerts, tracker X-ray, link safety, extension audits, dark patterns, email authentication, supply chain monitoring, compliance scoring, leak detection, and more.

Browse extensions

Free

Every B2C extension is 100% free. No trial, no paywall. Most extensions contribute anonymized findings to a shared intelligence database (opt-in) so everyone gets better detection. B2B tools add paid monitoring for security teams.

Get started

Dual view

Excalion sees what no EASM tool can. Browser-side extensions scan from inside while Perimetr scans from outside. Two perspectives on the same target. No blind spots.

How it works
Excalion

FAQ

Excalion is an ecosystem of 13 cybersecurity extensions for Chrome, Edge, and Brave. 8 are free for everyone (scam detection, breach alerts, tracker X-ray, link safety, extension audits, dark patterns, email authentication, HTTP header injection). 4 are B2B tools with a free scan tier (supply chain monitoring, compliance scoring, leak detection, shadow IT). All built by Oletros, an offensive security company.
The 8 B2C extensions are 100% free. No trial, no paywall, no account. The 4 B2B tools (SupplyChainGuard, ComplianceScope, LeakProbe, ShadowSaaS) offer a free tier for instant scans and a paid tier for continuous monitoring and team dashboards. Enterprise customers get everything unified in Perimetr.
Yes, 12 out of 13 extensions send anonymized scan findings to the Excalion API. This is opt-in by default with an explicit toggle to opt out. Opting out keeps the extension fully functional locally, but disables crowdsourced intelligence (blocklists, domain reputation, sector benchmarks, threat alerts). Some extensions also query external databases in real time (breach lookups via k-anonymity, phishing databases, CVE databases). ShadowSaaS is always-on by design (enterprise sensor deployed via MDM). The only exception is Invisible: 100% offline, zero network activity, zero data collection. No personal data is ever collected by any extension.
All Chromium-based browsers: Chrome, Edge, and Brave. All extensions use Manifest V3. Firefox is not supported at this time.
Perimetr is the enterprise tier. It bundles all Excalion extensions into a unified EASM dashboard with API access, team management, and SLA. The unique value: dual view. Browser-side extensions scan from inside while Perimetr scans from outside. Two perspectives, no blind spots.
Oletros, a company specializing in offensive security. We build tools that simulate real attacker behavior to stress-test defenses. That same expertise goes into building extensions that actually protect you.

13 extensions. Zero excuses.

Cybersecurity extensions for Chrome, Edge, and Brave. Crowdsourced intelligence, powered by anonymized data from every user who opts in.

Add to Chrome