Grammarly

1. 01Grammarly runs as a browser extension on 3 devices and can read every page those users open, including webmail and internal apps. Manage it with the browser's ExtensionInstallBlocklist or allowlist policy.
2. 02Grammarly was seen only on endpoints, not in Entra or network discovery, so it may be used offline or from unmanaged networks. Check the device list for VPN gaps.

• ●Medium45GrammarlyGoogle Workspace (demo)1 person

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

No people are linked to this app.

1. endpoint_telemetry
   Defender for Endpoint saw Grammarly on 3 devices (0 accounts) in 30 days: installed on 2 devices; 1 browser extension
   Detail

   {
     "domains": [],
     "signals": {
       "network": 0,
       "process": 0,
       "software": 2,
       "extension": 3,
       "model_file": 0,
       "local_server": 0
     },
     "software": [
       {
         "name": "Grammarly for Windows",
         "devices": 2,
         "version": "1.100"
       }
     ],
     "processes": [],
     "extensions": [
       {
         "id": "kbfnbcaeplbcioakkpcpgfkobkghlhen",
         "name": "Grammarly: AI Writing Assistant",
         "browser": "Edge",
         "devices": 3
       }
     ],
     "deviceNames": [
       "LT-HENRY",
       "LT-IRIS",
       "LT-JACK"
     ]
   }