Findings by source

Perplexity

Endpoint Perplexity AI · Search · extension: bmnlcjabgnpnenekpadlanbbkooimhnj

Policy · none set
Policy changes re-score this app on the next sync, which starts right away.
Finding · Open
Risk score
40
Medium
People
0
Accounts seen on devices
Devices
1
0 accounts · 30 days
Last seen
never
First seen n/a
endpointbrowser-extension
Next steps

Recommended actions

  1. 01Perplexity trains on data unless a business tier or opt-out is used. Verify which tier these users are on.
  2. 02Perplexity runs as a browser extension on 1 device and can read every page those users open, including webmail and internal apps. Manage it with the browser's ExtensionInstallBlocklist or allowlist policy.
  3. 03Perplexity was seen only on endpoints, not in Entra or network discovery, so it may be used offline or from unmanaged networks. Check the device list for VPN gaps.
Endpoint

What Defender for Endpoint saw

Browser extensions · 1
Devices
  • LT-MIA
Browser extensions
Perplexity - AI Search · Chrome1 device
Same app, other lanes

Related findings

Who

People

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

No people are linked to this app.

Why

Evidence

  1. endpoint_telemetry
    Defender for Endpoint saw Perplexity on 1 device (0 accounts) in 30 days: 1 browser extension
    Detail
    {
      "domains": [],
      "signals": {
        "network": 0,
        "process": 0,
        "software": 0,
        "extension": 1,
        "model_file": 0,
        "local_server": 0
      },
      "software": [],
      "processes": [],
      "extensions": [
        {
          "id": "bmnlcjabgnpnenekpadlanbbkooimhnj",
          "name": "Perplexity - AI Search",
          "browser": "Chrome",
          "devices": 1
        }
      ],
      "deviceNames": [
        "LT-MIA"
      ]
    }