What the applications do on your network
With no Plugins enabled, CC Capture communicates outbound only, over HTTPS on port 443, with *.chromachecker.com, and listens on no port. A default installation opens nothing on your network.
Transport security
All traffic to ChromaChecker uses TLS 1.2 or 1.3. From version 4.0.567, certificate verification uses your operating system's own trust store — the macOS Keychain and the Windows certificate store — rather than a certificate list built into the application. A certificate authority your administrators have installed, including one used for TLS inspection, is therefore trusted by the application exactly as it is by your browsers. Verification is always mandatory; the applications provide no option to disable it.
Credentials
Credentials for third-party services and for equipment on your network are stored in the operating system's credential store (macOS Keychain, Windows Credential Manager), never in plain text in application settings and never on ChromaChecker servers. Where a workstation makes the credential store unavailable, the application says so in its log rather than failing silently.
Plugins declare their footprint
Plugins can change what a computer does on your network. Every Plugin declares, in a form we publish and the application reads:
- which inbound ports it opens, on which interfaces, and how access to them is authenticated;
- which outbound destinations and ports it contacts;
- whether it reaches the local network, and what for;
- what data leaves the computer, and where it goes;
- which credentials it stores, and where;
- whether it starts a background process;
- whether it stores browser cookies.
Plugins are opt-in. One that is not installed does nothing.
Documents for your IT department
- Network Connections & Firewall Requirements — every destination, port and listening socket, per plugin, with the rules to allow.
- Plugin Terms — per plugin, including the third-party providers involved and the data that leaves the computer.
Reporting a security issue
Write to security@chromachecker.com. Please include the version, the platform, and enough detail to reproduce. We will acknowledge receipt and keep you informed while we investigate.
