CSO Security for extensions