https://github.com/foulest/osprey
Browser extension that protects you from malicious websites.
https://github.com/foulest/osprey
browser-extension chrome chrome-extension css firefox javascript security security-tools
Last synced: 6 months ago
JSON representation
Browser extension that protects you from malicious websites.
- Host: GitHub
- URL: https://github.com/foulest/osprey
- Owner: Foulest
- License: gpl-3.0
- Created: 2024-10-16T02:53:35.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-08-06T17:58:22.000Z (6 months ago)
- Last Synced: 2025-08-12T00:44:16.051Z (6 months ago)
- Topics: browser-extension, chrome, chrome-extension, css, firefox, javascript, security, security-tools
- Language: JavaScript
- Homepage:
- Size: 591 KB
- Stars: 99
- Watchers: 2
- Forks: 9
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Contributing: .github/CONTRIBUTING.md
- License: LICENSE
- Code of conduct: .github/CODE_OF_CONDUCT.md
- Security: .github/SECURITY.md
Awesome Lists containing this project
README
# Osprey: Browser Protection
[](LICENSE)
[](https://github.com/Foulest/Osprey/actions/workflows/github-code-scanning/codeql)
**Osprey** is a browser extension that protects you from malicious websites.
[Privacy Policy](https://github.com/Foulest/Osprey/blob/main/.github/PRIVACY.md)
• [Wiki (FAQs)](https://github.com/Foulest/Osprey/wiki)
• [MalwareTips](https://malwaretips.com/threads/osprey-browser-protection-discussion-and-updates.135565)
• [Wilders Security](https://www.wilderssecurity.com/threads/osprey-browser-protection.456729)
###
[](https://chromewebstore.google.com/detail/osprey-browser-protection/jmnpibhfpmpfjhhkmpadlbgjnbhpjgnd)
[](https://microsoftedge.microsoft.com/addons/detail/osprey-browser-protectio/nopglhplnghfhpniofkcopmhbjdonlgn)
[](https://addons.mozilla.org/en-US/firefox/addon/osprey-browser-protection)
###
## Official Partners
Osprey has **officially partnered** with industry-leading security companies to provide you with the best protection
possible. Check out some of our partners below:
###
###
## Our Mission
Our mission is simple: become the most trusted, transparent, and effective browser protection extension for home users
and businesses by empowering open-source intelligence to combat malware, phishing, and scams across the globe with our
partners. The best protection is free protection, and building a privacy-first, open-source tool that IT teams, security
researchers, and end-users can trust to secure their browsing, wherever they go, is the best way to provide it.
Osprey is committed to being non-profit, non-commercial, and open-source, **forever**, with no plans to monetize the
project in any way.
Unlike [other free browser extensions](https://www.ftc.gov/news-events/news/press-releases/2024/02/ftc-order-will-ban-avast-selling-browsing-data-advertising-purposes-require-it-pay-165-million-over),
Osprey doesn't collect, profile, and sell your browsing data behind your back. We're fully GDPR-compliant and committed
to being as transparent as possible. We don't use centralized servers or user accounts to protect your devices. Osprey
runs locally on your device, offline or online, with zero telemetry or back-end analytics. Check out
our [Privacy Policy here](https://github.com/Foulest/Osprey/blob/main/.github/PRIVACY.md) for more info.
The more protection providers join the project, the better the Osprey threat intelligence platform becomes. If you're
interested in improving global threat intelligence and want to join the project, feel free to get in contact with me
by [using my developer email found here.](https://chromewebstore.google.com/detail/osprey-browser-protection/jmnpibhfpmpfjhhkmpadlbgjnbhpjgnd#:~:text=English-,Developer,-Website)
## Warning
If the website is malicious, Osprey will block the page and display a warning:
From this page, you can report the website as safe, always ignore the website, go back to safety, and continue
anyway. By default, Osprey creates a browser notification for blocked pages that
[you can toggle on and off](https://github.com/Foulest/Osprey/wiki/Toggling-Notifications) using the context menu.
You can hide the continue and report buttons, lock down the protection options, and even hide the context menu
entirely using [the system policies](https://github.com/Foulest/Osprey/wiki/Setting-Up-System-Policies).
## Settings
You can configure the extension's protection options in the settings:
If you're unsure about the functions of each protection provider, **it's best to keep the default settings.**
You can restore them by right-clicking the extension icon and selecting **Restore default settings**.
## Detections
Osprey blocks websites that are classified as:
- [Malicious](https://us.norton.com/blog/malware/what-are-malicious-websites)
- [Phishing](https://us.norton.com/blog/online-scams/what-is-phishing)
- [Untrusted](https://mcafee.com/blogs/internet-security/how-to-tell-whether-a-website-is-safe-or-unsafe)
- [Adult Content](https://library.fiveable.me/key-terms/mass-media-society/adult-content)
## Protection Providers
The following providers are **enabled** by default:
- [x] **[AdGuard Security DNS](https://adguard-dns.io/?utm_source=osprey)**
- [x] **[alphaMountain Web Protection](https://www.alphamountain.ai/?utm_source=osprey)**
- [x] **[PrecisionSec Web Protection](https://www.precisionsec.com/?utm_source=osprey)**
- [x] [CleanBrowsing Security DNS](https://www.cleanbrowsing.org/filters/#step3)
- [x] [Cloudflare Security DNS](https://blog.cloudflare.com/introducing-1-1-1-1-for-families/#two-flavors-1-1-1-2-no-malware-1-1-1-3-no-malware-or-adult-content)
- [x] [DNS0.eu Security DNS](https://www.dns0.eu/zero)
- [x] [DNS4EU Security DNS](https://www.joindns4.eu/for-public)
- [x] [Quad9 Security DNS](https://www.quad9.net)
The following providers are **disabled** by default:
#### Security Filters
- [ ] **[Control D Security DNS](https://controld.com/?utm_source=osprey)**
- [ ] [Microsoft SmartScreen](https://learn.microsoft.com/en-us/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen)
- [ ] [G DATA Web Protection](https://www.gdata.de/help/en/consumer/FAQ/webProtectionWinFAQ)
- [ ] [CERT-EE Security DNS](https://www.ria.ee/en/news/application-developed-cert-ee-protects-against-phishing-and-malware)
- [ ] [Norton Safe Web](https://safeweb.norton.com)
#### Adult Content Filters
- [ ] **[AdGuard Family DNS](https://adguard-dns.io/?utm_source=osprey)**
- [ ] **[Control D Family DNS](https://controld.com/?utm_source=osprey)**
- [ ] [CleanBrowsing Family DNS](https://www.cleanbrowsing.org/filters/#step2)
- [ ] [Cloudflare Family DNS](https://blog.cloudflare.com/introducing-1-1-1-1-for-families)
- [ ] [DNS0.eu Family DNS](https://www.dns0.eu/kids)
- [ ] [DNS4EU Family DNS](https://www.joindns4.eu/for-public)
Providers disabled by default are either due to:
- Frequent reports of false positives
- Failure to respond to false positive reports
- Being an optional adult content filter
- Being a paid service that requires a license or API key
If a provider gives you false positives, report the links to them directly and disable them in the Protection Options
panel if needed. Osprey is designed to be customizable, so you can enable or disable any of the providers at any time.
Osprey does not have control over the providers' databases or how they classify URLs.
## Privacy
Osprey strips down each URL of tracking parameters before sending it to any APIs.
For example:
1. If you search for shirts on Amazon and
visit: https://www.amazon.com/s?k=shirts&crid=3TOVSW14ZHF8V&sprefix=shirt%2Caps%2C175&ref=nb_sb_noss_1
2. Osprey will only send https://amazon.com/s to any APIs you have enabled.
3. If the APIs report that the page is safe to visit, Osprey caches the result for 24 hours.
4. It will also be cached if you click 'Continue anyway' or 'Always ignore this website' on a blocked site.
5. As long as a URL is cached, no new network requests will be made for it.
The only data the APIs receive is the stripped-down URL, your user agent, and your IP address. Use a reputable VPN or
proxy service if you're concerned about IP-related privacy. There are also extensions that mask your user agent, if
you're so inclined.
As for why Osprey needs to check complete URLs instead of just the domain, many phishing attacks use legitimate
companies such as Jotform to host their phishing campaigns. If Osprey only checked a website's domain name, it wouldn't
detect those threats. Osprey only sends your hostname to its various DNS providers, so if you're highly concerned
about URL page privacy, DNS providers like Quad9 are there for you.
## Manual Install
> **Note:** You need to have a GitHub account to download artifacts.
You can install Osprey from the web stores listed at the top.
For other installations, you can install the extension manually:
### Chrome/Edge
1. Navigate to the [Actions section](https://github.com/Foulest/Osprey/actions/workflows) and click `Compile for Chrome`
or `Compile for Edge`.
2. Scroll down to the `Artifacts` section and download the artifact file.
3. Extract the artifact's ZIP file to a folder on your computer.
4. Navigate to `about://extensions` in your browser.
5. Enable `Developer mode` and click `Load unpacked`.
6. Select the downloaded ZIP file and click `Select Folder`.
### Firefox
> **Note:** This only works
> for [builds of Firefox that allow unsigned addons.](https://support.mozilla.org/en-US/kb/add-on-signing-in-firefox)
1. Navigate to the [Actions section](https://github.com/Foulest/Osprey/actions/workflows) and click
`Compile for Firefox`.
2. Scroll down to the `Artifacts` section and download the artifact file.
3. Extract the artifact's ZIP file to a folder on your computer.
4. Navigate to `about:addons` in your browser.
5. Click the gear icon and select `Install Add-on From File`.
6. Select the downloaded ZIP file and click `Select Folder`.
Osprey should now be installed in your browser.
## Disclaimer
Osprey: Browser Protection uses the names of third-party DNS and security providers solely for descriptive and
interoperability purposes. All trademarks, logos, and brand names are the property of their respective owners.
Osprey is not affiliated with or endorsed by any of the third-party providers listed in the extension, unless stated
otherwise. Use of their services is subject to their respective terms of use and privacy policies.
If you represent a listed provider and have questions, feedback, or concerns regarding attribution or inclusion, please
contact the developer via the
[Chrome Web Store contact link](https://chromewebstore.google.com/detail/osprey-browser-protection/jmnpibhfpmpfjhhkmpadlbgjnbhpjgnd#:~:text=English-,Developer,-Website).
## Getting Help
For support or queries, please open an issue in the [Issues section](https://github.com/Foulest/Osprey/issues).