blockade.io

What It Is

Blockade by 9b+ is a browser security extension positioned as a supplement to existing browser security controls such as Google Safe Browsing. It delivers indicators from cloud-based threat intelligence to the local extension and uses the browser’s web request API to inspect destinations before requests are sent. If a request matches a known malicious indicator, the user is redirected to a local warning page that displays relevant context.

Core Capabilities and Architecture

In terms of protection coverage, Blockade mainly blocks malicious websites, attack content, or known threat indicators in the browser access chain. It is not a full endpoint protection product or network security gateway. Deployment is lightweight: once the browser extension is installed, it runs automatically. Its architecture consists of cloud infrastructure and a local Extension. Threat intelligence is stored locally in the browser, and blocking actions are completed before traffic leaves the browser. The text also mentions an accessible API, an analyst toolbench, and open-source Python cloud nodes, suggesting a more participatory, self-hostable threat intelligence collaboration model.

Management, Privacy, and Integration

Management and alerting are mainly handled through the local warning page and cloud-based analyst review: malicious events are sent to cloud nodes, where analysts verify them and investigate further attacks. On privacy, Blockade claims it only collects web request and browser data when an attack is detected. Indicators submitted to cloud servers must be hashed by the user to avoid exposing indicators in plaintext. For integration, beyond the browser extension API, the text indicates that users can run their own cloud nodes or join existing analyst nodes, although administrator approval is required.

Pricing and Compliance

The crawled content does not disclose pricing model, payment methods, enterprise plans, SLA, or compliance certifications, so its commercial maturity should not be assumed. For enterprise use, it is still necessary to confirm browser compatibility, centralized policy distribution, log retention, auditing, compliance evidence, and support response processes.

Pros, Cons, and Best Fit

Its advantages are simple installation, no need to change user behavior, blocking at the browser request stage, and an emphasis on user control over blocked content and data usage. Self-hosting support also makes it suitable for researchers or security teams building private intelligence nodes. The drawbacks are that the author explicitly states it cannot stop all attacks, and its effectiveness depends heavily on intelligence quality. Its coverage is also limited to the browser, with no visible enterprise-grade console, reporting, or certification information. It is best suited to security researchers, small teams, and users who want to strengthen malicious-link protection in the browser.

Access in China

The text does not provide information on mainland China access, payment, or localization, so actual availability is unknown. If access is restricted, alternatives include built-in browser safe browsing, enterprise DNS/URL filtering, security gateways, or domestic endpoint security products.