Jsmon Security Analyzer — Web Security Inspector 作者： Jsmon

Jsmon Security Analyzer — Browser Extension

Automatically capture and analyze web traffic directly from your browser.
Every JavaScript file, API response, config, and document is sent to
Jsmon's External Attack Surface Management (EASM) engine for real-time
security analysis — no manual uploads, no proxies required.

What it detects

• Exposed secrets — API keys, tokens, credentials leaked in JS or config files
• Shadow APIs — undocumented or forgotten endpoints buried in frontend code
• Supply chain risks — vulnerable or suspicious NPM packages loaded at runtime
• Sensitive data exposure — PII, internal paths, environment variables
• Misconfigured assets — insecure headers, open redirects, debug artifacts

Supported file types

JS · JSX · TS · HTML · PHP · ASPX · CFG · YAML · JSON · XML · ENV ·
INI · TXT · CSV · LOG · SQL · GRAPHQL · WASM · MAP · and more (20+ extensions)

How it works

1. Install the extension and connect your Jsmon account
2. Browse normally — the extension passively captures traffic
3. Matched file types are forwarded to Jsmon for deep analysis
4. View findings in your Jsmon dashboard: secrets, APIs, risks, asset inventory

Who it's for

• Security engineers running recon or pen tests on web applications
• AppSec & EASM teams monitoring their organization's external attack surface
• Bug bounty hunters accelerating JS recon workflows
• CISOs & compliance teams enforcing continuous visibility across web assets

About Jsmon

Jsmon is an AI-powered External Attack Surface Management platform trusted
by security teams worldwide. Built by practitioners, for practitioners.

🔗 jsmon.sh