Docs
← Home Sign In Get Started

Overview

The Shieldome Chrome extension puts security intelligence at your fingertips. When you visit any website, the extension shows the security grade from the last Shieldome scan of that domain - without opening a new tab or visiting the dashboard. You see the grade badge, severity counts (critical, high, medium, low), and how long ago the site was last scanned.

Installation

  1. Download the extension from the Chrome Web Store (or install manually from the static/chrome-extension/ folder in developer mode).
  2. Click the Shieldome icon in your browser toolbar to open the popup.
  3. Click Configure or go to the extension options page and paste your API key. You can generate an API key in Settings > API Keys.
  4. Visit any website - the popup now shows the last scan result for that domain.
🔑
API key required. The extension fetches scan data from your Shieldome account using your personal API key (X-Shieldome-Key header). Without it, the popup shows the "Scan This Page" button only - no inline security data.

What the popup shows

ElementDescription
Grade badgeA large A/B/C/D/F badge based on the last scan score. Grey ? means no scan on record for this domain.
Security scoreNumeric score out of 100 from the last scan.
Severity pillsColor-coded counts for critical (red), high (orange), medium (yellow), and low (green) findings.
Last scannedRelative time since the last scan (e.g. "2h ago", "3d ago").

Actions

  • Scan This Page - opens the Shieldome app with the current URL prefilled, ready to run a new scan.
  • View Full Report - opens the detailed scan results page for the last scan (only shown when a scan exists).
  • Open Shieldome Dashboard - goes to your account dashboard.

Scan data freshness

The extension shows the most recent completed scan for the current domain's origin (scheme + hostname + port). If you scan a URL and then visit the site in the browser, the popup immediately reflects the new result on next open. The extension fetches fresh data each time you open the popup - there is no local cache.

Privacy

  • Your API key is stored in chrome.storage.local - it never leaves your browser except in requests to app.shieldome.com.
  • The extension only reads the current tab's URL when the popup is opened. It does not track browsing history, run in the background, or send telemetry.
  • Permissions required: activeTab (read current URL), tabs (query active tab), storage (save API key).

Setting your API key

Right-click the extension icon and choose Options, or click Configure in the popup when no key is set. Paste your API key and click Save. To rotate the key, generate a new one in Settings > API Keys, update it in the extension options, and revoke the old key.

Developer / manual installation

The extension source lives in static/chrome-extension/ in the Shieldome repository. To install manually:

  1. Open chrome://extensions in Chrome.
  2. Enable Developer mode (top-right toggle).
  3. Click Load unpacked and select the static/chrome-extension/ folder.

Note: manually-installed extensions do not auto-update. Pull the latest repo changes and reload the extension when a new version is released.