Skip to main content
ShadowAI Defense GitHub
← All services

Foyer Inc. · Browser Extension

Merlin (browser extension)

Block Enterprise tier: Not available DPA: No

Network signatures

Domains: merlin.foyer.work

SNI patterns: *.merlin.foyer.work, *.foyer.work

Client signatures

Browser extensions: Merlin: AI Assistant (risk: elevated)

Risk profile (1–5)

  • Data exfiltration: 5
  • IP loss: 4
  • Output quality (hallucination / legal): 3
  • Integration risk (OAuth, extensions, agentic): 4

Data egress concerns

  • Selected page content sent to vendor LLM proxy
  • Browser history when 'summarize tab' is invoked
  • Form contents on visited pages

Training-use default

Free tier and consumer-paid tiers vary; no enterprise tier with contractual training-use exclusion.

Applicable detection rules