Web applications are critical to modern digital infrastructure, yet they remain prime targets for cyberattacks due to vulnerabilities like cross-site scripting (XSS) and SQLi (SQL Injection). The Open Web Application Security Project (OWASP) reports that such flaws consistently rank among the top threats to web security. While the Linux OS stands as one stop shop for all security related tools, they require technical expertise and standalone execution, leaving casual users and small developers underserved. This research paper addresses the gap by developing a Google Chrome extension that passively scans websites for vulnerabilities during browsing and reports them for. By integrating real-time detection into a familiar browser environment, this tool aims to enhance accessibility and awareness of web security, offering a practical contribution to both education and practice.