BugEye door DeathEsther

BugEye is a minimal-permission browser security toolkit for authorized reconnaissance, OSINT, and web application security testing.

It provides 82 focused tools across 9 groups for inspecting browser tabs, security headers, cookies, CSP, JWTs, CORS, storage, links, scripts, source maps, DNS, WHOIS, certificates, subdomains, and other security-relevant information. It also provides reference material for common web security workflows.

BugEye observes and reports rather than performing automated exploitation, brute-force attacks, or denial-of-service activity. It is intended for authorized security testing only.

Privacy first: the extension does not include telemetry or analytics and does not use BugEye servers. Host access is requested only when required by a tool.