Is Workflowy Safe?

Exercise caution with Workflowy. Workflowy is a Chrome extension with a Nerq Trust Score of 48.2/100 (D), based on 3 independent data dimensions. It is below the recommended threshold of 70. Security: 90/100. Popularity: 0/100. Data sourced from Chrome Web Store metadata, permissions analysis, developer verification, and update history. Last updated: 2026-03-28. Machine-readable data (JSON).

Is Workflowy Safe?

NO — USE WITH CAUTION — Workflowy has a Nerq Trust Score of 48.2/100 (D). It has below-average trust signals with significant gaps in security, maintenance, or documentation. Not recommended for production use without thorough manual review and additional security measures.

Trust Score Breakdown

Security
90
Popularity
0

Key Findings

Security score: 90/100 (strong)
Popularity: 0/100 — Chrome Web Store

Details

AuthorUnknown
Categorychrome
SourceN/A

Safety Guide: Workflowy

What is Workflowy?

Workflowy is a Chrome extension — Infinitely nested list tool for notes, tasks, and brainstorming. Simple and powerful..

How to Verify Safety

Review permissions carefully. 'Read all data on all websites' is high risk.

You can also check the trust score via API: GET /v1/preflight?target=Workflowy

Key Safety Concerns for Chrome extensions

When evaluating any Chrome extension, watch for: excessive permissions, data harvesting, permission creep.

Trust Assessment

Workflowy has a Nerq Trust Score of 48/100 (D) and has not yet reached Nerq trust threshold (70+). This score is based on automated analysis of security, maintenance, community, and quality signals.

Key Takeaways

Detailed Score Analysis

DimensionScore
Security90/100
Privacy90/100
Reliability50/100
Transparency60/100
Maintenance60/100

Based on 5 dimensions. Data from Chrome Web Store metadata, permissions analysis, developer verification, and update history.

What data does Workflowy collect?

Workflowy has a privacy score of 90/100. Review the documentation and privacy policy for data handling details.

Full analysis: Workflowy Privacy Report · Privacy review

Is Workflowy secure?

Security score: 90/100. This meets the recommended security threshold for production use.

Nerq monitors this entity against NVD, OSV.dev, and registry-specific vulnerability databases for ongoing security assessment.

Full analysis: Workflowy Security Report

How we calculated this score

Workflowy's trust score of 48.2/100 (D) is computed from Chrome Web Store metadata, permissions analysis, developer verification, and update history. The score reflects 5 independent dimensions: security (90/100), privacy (90/100), reliability (50/100), transparency (60/100), maintenance (60/100). Each dimension is weighted equally to produce the composite trust score.

Nerq analyzes over 7.5 million entities across 26 registries using the same methodology, enabling direct cross-entity comparison. Scores are updated continuously as new data becomes available.

This page was last reviewed on March 28, 2026. Data version: 1.0.

Full methodology documentation · Machine-readable data (JSON API)

Frequently Asked Questions

Is Workflowy safe?
Exercise caution. Workflowy has a Nerq Trust Score of 48.2/100 (D). Strongest signal: security (90/100). Score based on security (90/100), popularity (0/100).
What is Workflowy's trust score?
Workflowy: 48.2/100 (D). Score based on: security (90/100), popularity (0/100). Scores update as new data becomes available. API: GET nerq.ai/v1/preflight?target=Workflowy
What are safer alternatives to Workflowy?
In the chrome category, more Chrome extensions are being analyzed — check back soon. Workflowy scores 48.2/100.
What permissions does Workflowy need?
Review Workflowy's requested permissions carefully. Extensions requesting 'Read and change all data on all websites' carry the highest risk. Current trust score: 48.2/100.
Is Workflowy's publisher verified?
Workflowy has a trust score of 48.2/100 (D). Below Nerq Verified threshold — conduct additional review.
API: /v1/preflight Trust Badge API Docs

Disclaimer: Nerq trust scores are automated assessments based on publicly available signals. They are not endorsements or guarantees. Always conduct your own due diligence.