Browser extensions have quietly become the largest unmanaged attack surfaces in the enterprise, and in particular, AI extensions have become the AI consumption channel that no one is talking about.
This report provides real-world data on extension usage across organizations, AI extension adoption, and actionable recommendations to reduce risk.
Key Findings You’ll Discover:
- 99% of enterprise users have at least one extension installed, and about 25% have more than 10 extensions
- About 15% of enterprise users have an AI extension installed
- AI extensions are 60% more likely to have a CVE, 3x more likely to have access to cookies, and 2.5x more likely to be able to execute remote scripts
- Extensions are not static - 34% of all extensions increased their permissions in the past 12 months, and AI extensions are 6 times more likely to have done so
- And more!
Download the LayerX Extension Security Report 2026 to uncover your browser extension risk and the controls needed to secure them.
