Add an extension
A user requests an extension or an administrator adds one to Allow.
Manage what your teams install
Know what to Allow.
Automatically vet and continuously monitor Visual Studio Code extensions. Enforce your allowlist through the endpoint management tools you already use.
✓ 30-day free trial✓ No new endpoint agent
How it works
From extension request to enforced policy.
Keep requests, automated assessment, and enforcement in one workflow.
Allow vets it
The automated pipeline analyzes the extension and produces a customer-facing result.
Publish allowed versions
Only extensions with an Allowed result enter the selected allowlist feed.
Enforce with your tools
Apply that feed through your existing Intune or macOS MDM workflow.
No new endpoint agent. No new enforcement platform.
VS Code governance
Assess VS Code extensions and deploy the result with the tools you already use.
Visual Studio CodeExtension platformSupported
Microsoft IntuneEndpoint enforcementSupported
JamfEndpoint enforcementSupported
Allowlist feedsMachine-readable policySupportedSimple by design
Simple pricing. No surprises.
One plan. The full platform. No feature gates, seat calculations, or negotiation required.
✓
No complex licensing tiers.Everyone gets the complete Allow workflow.
€200per allowlist / month
- ✓Continuous extension assessment
- ✓Static and behavioral analysis
- ✓Runtime inspection where needed
- ✓Version-aware monitoring
- ✓Central allowlist management
- ✓Deployment packages
- ✓Assessment evidence
- ✓30-day free trial
Why Allow
Enforcement is only half the problem.
Endpoint management tools can control which extensions are installed. They do not tell you which extensions should be trusted.
Extension stores are not security controls
Ratings, download counts, popularity, and publisher reputation are not substitutes for a security assessment.
Manual reviews do not scale
Extensions change. New versions appear, behavior shifts, and fresh risks can emerge after the original approval.
Know what belongs in policy
MDM can enforce a policy. Allow helps your team determine what should be in it.
Product capabilities
One place to manage extension trust.
A decision workspace for security teams, backed by continuous, multi-layered assessment.
Assessment pipeline
Evidence at every stage. A clear result at the end.
Allow applies deeper validation where it adds value, without turning the assessment into a black box.
New versionCompare with previously trusted version
1Extension→
2Static analysis→
3Behavior analysis→
4Runtime when needed
ASSESSMENT RESULTALLOWCANNOT VETBLOCK
FAQ
Questions, answered.
Everything you need to evaluate Allow with confidence.
Read the documentation Browse all guides →Allow is a Visual Studio Code extension security and allowlist management platform. It automatically vets extensions, publishes allowed versions, and monitors them as they change.
Extensions can access sensitive code, browsing data, credentials, and business systems. Store ratings and popularity are useful signals, but they are not a security assessment.
Endpoint management platforms are excellent at enforcing policy. They do not determine which extensions belong in that policy. Allow provides the assessment and decision workflow, then connects the approved list to your existing tooling.
No. Allow works alongside tools such as Intune or Jamf. Your existing platform remains the enforcement layer, and no new endpoint agent is required.
Allow combines deterministic security checks, static analysis, behavioral analysis, runtime inspection where needed, and version-aware comparison. Customer-facing results are Allowed, Queued, Vetting, Blocked, or Cannot vet. No security product can guarantee detection of every malicious behavior.
Allow continuously monitors approved extensions and compares new versions with previously trusted releases, making meaningful changes easier to identify and review.
Allow is designed to surface security-relevant behavioral changes in new versions. As with every security control, it cannot guarantee detection of every malicious update.
Yes. Allow provides a structured request and review workflow so teams can ask for the tools they need without bypassing security.
Yes. Publisher-wide scanning is available as a workflow convenience, but trust is never inherited: every extension is assessed and decided on individually.
No. Allow connects with the endpoint management platform you already use.
Yes. Expand an extension to inspect the available identity, static, runtime, and judge evidence behind its automated result.
Allow reduces risk and improves decision quality, but no security system offers perfect detection. It should be used as part of a layered security program with appropriate endpoint controls and incident response.
Allow costs €200 per allowlist, per month. There are no feature tiers or per-seat calculations.
Yes. Every workspace starts with a 30-day free trial of the full Allow platform.
If you do not subscribe, your workspace becomes read-only. Your assessment history and decisions remain available to review.
Start with your first allowlist
Take control of your extensions.
Give teams a clear request path and enforce only versions that Allow has vetted.
Start your free trial →30 days free · No new endpoint agent