How can we help?

Introduction to Torii Browser Extension

Noga Tubi
Noga Tubi
  • Updated
How does the Torii browser extension work?


Torii utilizes multiple discovery sources to map your organization's SaaS stack.

Torii browser extension is a discovery source that can be deployed on the employee's browser as an additional discovery source.


Torii extension analyzes user behavior to detect logins to business applications.

The entire analysis is performed locally on the client-side, meaning that no cookies, login information nor browsing history information is sent to Torii servers

Once a SaaS application is detected the only information recorded - is the Torii user ID and the visit time in the app.

Overview Video

🎥 Browser Extension Overview

Why do you need it?

  • The extension assists application discovery, as well as usage discovery per user

  • It helps evaluate app usage and efficiency and comply with security certifications

  • The extension is the most powerful way to discover Shadow IT - unknown apps for the IT team

  • On top of that, the latest GDPR regulations require that companies have an up-to-date list of all SaaS being used

Collecting Data

  • The extension analyzes cookies and visits reported by the browser to map the business applications being used

  • The entire analysis is performed locally on the client, meaning that no cookies nor login information ever leaves the browser

  • The only information being sent to Torii’s servers is the detected business applications and a unique identifier of the logged-in user

  • Note: Only logins to apps using a business email address are collected, private usage is ignored


Browser extension modes

Torii browser extension operates in 3 alternative modes. These modes affect how and which data is being sent from the extension to Torii.

  1. Authenticated mode (recommended) - Torii collects data only from authenticated employees. This means that employees would need to log in to the extension in order for their usage data to be sent.

  2. Un-Authenticated mode - Torii collects data from all users of the browser extension. This means that usage data will be sent both to employees who have logged in to the extension and to those who have not.

  3. Disabled - The Torii extension will not collect any usage data from any employee

Where can you see the extension at work?

Usage sensed by the extension is reflected in a few areas of the Torii platform:

  • 1. Application >> Review tab >> Sources column see which apps have been discovered through the extension

  • In any Application,>> app's overview page you can see overall App usage, and which users have logged in to the app.

    In this example, you can see that this app was discovered solely by the Torii extension uncovering what might be a shadow application.

Note that the extension will collect and show usage for any app that is discovered, even for those discovered by other sources.

Filter extension discovery

By using filters, you can create an "Application view" that will help you see the new apps discovered by the Torii extension.

  • Go to Application >> Review tab and select filters that will help you spot the new applications that were discovered.

  • For example, where the source is “extension”



  • Q: What data is being collected?

  • A: Torii measures days used per month for each business application in order to provide usage and utilization information.

  • Q: Does the extension map applications with personal usage?

  • A: No. Torii identifies and maps only business SaaS applications and will never analyze or store personal usage.

    Examples of apps that are mapped: SalesForce, HubSpot, New Relic, MailChimp, and any app that is used for business purposes.

    Examples of apps that are not mapped: are Facebook, LinkedIn, Twitter, Audible, and any other personal apps.

    Some applications may offer different versions of their service for personal business use, such as Facebook vs Facebook ads, LinkedIn vs LinkedIn Recruiter, and Twitter vs Twitter ads. Torii only maps the business usage.

  • Q: Why when testing the extension I have a login window before activating the extension?
  • A: That’s the expected behavior. When the browser extension is installed and it doesn’t know who the user is, it asks the user to log in.
    Meanwhile, it will also try to identify the user. Once identified, (based on the user signed in to Chrome, by inspecting cookies and other data points), it will then start detecting the used apps

  • Q: Does the Torii extension have any effect on the browser performance?
  • A: No, the browser ext. doesn't slow down browser speeds or affect performance in any way

  • Q: How do we see user activity when deploying Torii's browser extension on more than one browser (Chrome, Firefox, and Edge)?

  • A: The report shows the latest browser that reported for a user, but we capture data from all


See the following "how-to" articles to deploy and communicate the Torii extension

IT side

End-user side





Was this article helpful?

1 out of 1 found this helpful

Have more questions? Submit a request