Cakewalk Browser Extension

The Browser Extension powers App Discovery across your organization. It helps IT and Security teams uncover shadow IT and track real app usage while protecting employee privacy and company data.

🔎 What Does It Do?

The browser extension automatically detects which SaaS apps your users are signing into from their browsers and reports this back to Cakewalk.

This enables:

• App Discovery: Uncover every app used across the company, including unmanaged and unapproved ones.

• Access Visibility: Identify which users have access to which apps and when they last accessed them.

• Security Insights: Detect risky or unsanctioned apps, duplicate accounts and orphaned access.

• Governance Automation: Link discovered accounts to users and trigger onboarding/offboarding or review workflows.

---

⚙️ How Does It Work?

The extension runs passively in the background and detects when users visit URLs that are only accessible after login for supported SaaS applications. This allows Cakewalk to identify that a user has access to an app, without ever capturing passwords or session data.

• It detects access to supported apps.

• It maps those events to users in Cakewalk.

• It syncs this data securely to your organization’s Cakewalk environment.

• Admins and App Owners can then see which apps are being accessed, when they were last accessed and by whom.

💡 The extension never reads, stores or transmits personal data, passwords or session tokens.

---

📚 Which Apps Are Supported?

Cakewalk’s browser extension recognizes and maps 6,000 apps, covering:

• Major business apps: Google Workspace, Slack, Notion, HubSpot, Figma, Salesforce, etc.

• Common developer and cloud platforms: AWS, GCP, Azure, Linear, GitHub, etc.

• AI apps and agents: ChatGPT, Claude, Lovable, Cursor, ElevenLabs, etc.

Supported apps are continually updated as Cakewalk expands its app catalog. No configuration is required as the extension automatically syncs with the latest supported app list.

---

🛠️ Configuration Options

Admins can control how the extension operates across the organization:

Setting	Description
Enforce browser extension installation	Create a mandatory task for all users to install the Cakewalk browser extension.
Manage browser notifications	When disabled, the browser extension automatically tracks all accesses. If enabled, the browser extension only tracks applications after employee confirms their access.

All settings can be managed under Settings → Account → Browser Extension in the Cakewalk Admin Panel.

---

🌍 Supported Platforms

The Cakewalk Browser Extension works on:

• Google Chrome (latest versions)

• Microsoft Edge (Chromium-based)

• Mozilla Firefox (latest versions)

• All other Chromium-based browsers (Arc, Brave, Opera, etc.)

---

🔒 How Does It Keep My Data Safe?

Cakewalk’s browser extension is designed with privacy and security first:

• All App Discovery is performed locally on the user’s device. No browsing history is collected or sent to Cakewalk.

• It only collects metadata about app access (domain, timestamp and user identity).

• It does not capture or transmit content, credentials or cookies.

• All data is encrypted in transit and at rest, following industry standards (TLS 1.2+ / AES-256).

• Data is processed only within Cakewalk’s secure infrastructure.

• If you wish to exclude an app from the browser extension, make sure to mark it as Ignored in the App Governance table.

• Optional user consent: Admins can enable browser notifications. With this mode, users must explicitly approve each app or access detection before any data is sent to Cakewalk.

💡 Employees retain full transparency and control. They can always see which apps are tracked in their profile.

Read our Privacy Policy for more information on how Cakewalk stewards your data.

---

🚀 How Can I Roll It Out?

There are two main rollout methods:

Roll Out via Cakewalk Tasks

• Admins can assign “Install Browser Extension” tasks to all users.

• Each user receives a task in Cakewalk (and a Slack notification, if connected).

• If the user is logged into Cakewalk, the extension auto-authenticates with their profile upon installation.

Roll Out via MDM or Managed Browsers

• Distribute the extension organization-wide using your Mobile Device Management (MDM) solution (e.g. Intune, Kandji, Jamf) or Managed Browsers (e.g. Google Workspace).

• See rollout instructions for select platforms below.

💡 Cakewalk automatically detects who has installed the extension and displays coverage metrics in the Admin Dashboard

Microsoft Intune

Google Chrome

Extension link: Chrome Web Store – Cakewalk Browser Extension

Extension ID: mmndpdobkmoodjjapihanaaddehhfcaj

Update URL: https://clients2.google.com/service/update2/crx

Deployment (Windows via Intune Settings Catalog)

1. Go to Microsoft Intune admin center.

2. Navigate to Devices → Configuration profiles → Create profile.

3. Select Platform: Windows 10 and later, Profile type: Settings catalog.

4. Name the profile (e.g. Cakewalk-Chrome).

5. Add setting:

   • Search for Google Chrome → Extensions → Configure the list of force-installed apps and extensions.

   • Enable it.

   • Enter:

     mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx

6. Assign the profile to target groups.

7. Create and deploy.

Deployment (macOS via Intune Custom profile)

Upload a .mobileconfig with:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>ExtensionInstallForcelist</key>
  <array>
    <string>mmndpdobkmoodjjapihanaaddehhfcaj;https://clients2.google.com/service/update2/crx</string>
  </array>
</dict>
</plist>

Domain: com.google.Chrome

---

Microsoft Edge

Extension link: Edge Add-ons – Cakewalk Browser Extension

Extension ID: oldilaangbgeaagcpipiephobfhajmoh

Update URL: https://edge.microsoft.com/extensionwebstorebase/v1/crx

Deployment (Windows via Intune Settings Catalog)

1. In Intune admin center, create a new Windows 10 and later → Settings catalog profile.

2. Name the profile (e.g. Cakewalk-Edge).

3. Add setting:

   • Search for Microsoft Edge → Extensions → Control which extensions are installed silently.

   • Enable it.

   • Enter:

     oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx

4. Assign to target groups and deploy.

Deployment (macOS via Intune Custom profile)

Upload a .mobileconfig with:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>ExtensionInstallForcelist</key>
  <array>
    <string>oldilaangbgeaagcpipiephobfhajmoh;https://edge.microsoft.com/extensionwebstorebase/v1/crx</string>
  </array>
</dict>
</plist>

Domain: com.microsoft.Edge

---

Mozilla Firefox

Extension link: Direct download: https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi

Extension ID (from manifest.json): [email protected]

⚠️ The .xpi must be served with MIME type:

application/x-xpinstall

Deployment (Windows via Intune ADMX / Imported templates)

1. Import the latest Firefox ADMX & ADML into Intune.

2. Create a new profile: Windows 10 and later → Templates → Imported Administrative Templates (Preview).

3. Configure:

   • Navigate to Mozilla → Firefox → Extensions → ExtensionSettings.

   • Set JSON:

     {
       "[email protected]": {
         "installation_mode": "force_installed",
         "install_url": "https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi"
       }
     }

4. Assign and deploy.

Deployment (macOS via Intune Custom profile)

Upload a .mobileconfig with:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>policies</key>
  <dict>
    <key>ExtensionSettings</key>
    <dict>
      <key>[email protected]</key>
      <dict>
        <key>installation_mode</key>
        <string>force_installed</string>
        <key>install_url</key>
        <string>https://firefox-extension.getcakewalk.io/versions/cakewalk-firefox-extension-latest.xpi</string>
      </dict>
    </dict>
  </dict>
</dict>
</plist>

Domain: org.mozilla.firefox

---

✅ Once deployed, the Cakewalk Browser Extension is silently installed and locked in Chrome, Edge, and Firefox for all scoped users and devices.

Jamf

Google Workspace

Kandji

Mosyle