Annex Security

Annex is an enterprise security company focused on identifying and managing risks from browser extensions, developer tools, and third-party code libraries. Its platform helps organizations understand what software extensions actually do, uncovering malicious or suspicious behavior that traditional security tools may miss. Annex continuously monitors extension marketplaces and registries, comparing stated purposes with observed functionality. Its analysis combines static detection and code review to trace data flows, API calls, permission use, code changes, and other behaviors. The platform provides risk scores, clear findings, and actionable alerts to support security investigations and informed decisions.

Annex offers deep analysis, monitoring, investigation search, integrations, and API and MCP access. Its capabilities include detecting malicious code patterns, assessing permission risks, scanning dependencies for vulnerabilities, and identifying obfuscated or packed code. Organizations can review extensions across major browser and development platforms, including Chrome, Edge, Firefox, Brave, VS Code, Cursor, Windsurf, and Antigravity. Annex also provides developer documentation and resources to help teams start analyzing their software extensions and third-party code.