The ExtHive blog is being written
We are putting together writing on extension security, prompt privacy and the engineering behind local-first browser tools. No launch announcements padded into articles — just the things we learn building this.
What we are writing first
Six pieces already outlined. Each one started as a question we kept answering in support email.
- Security8 min
What actually happens to a secret you paste into ChatGPT
Retention windows, log surfaces and why rotating the key is the only real remedy once it has been sent.
Not published yet - Engineering12 min
Stitching a full-page screenshot without duplicating the navbar
Sticky elements, lazy-loaded media and the canvas size ceiling — the three problems every capture tool eventually hits.
Not published yet - Privacy6 min
Reading an extension's permissions before you install it
A practical guide to the Chrome permission model, which requests are routine and which should make you close the tab.
Not published yet - Engineering10 min
Running 40 regex detectors on every keystroke without jank
Debouncing, incremental scanning and keeping detection off the critical input path.
Not published yet - Product5 min
Why our free tiers are not crippled
The commercial argument for shipping a free plan people can genuinely live on, and what that costs us.
Not published yet - Security9 min
Prompt injection is not your biggest AI risk
For most teams, the leak goes the other way — outbound, pasted by a person in a hurry.
Not published yet
Want to read something specific?
If there is a question about extension security or capture tooling you have never found a straight answer to, tell us and we will write it properly.
Suggest a topic