v135 · security

Origin Isolation Inspector

Add a list of origins and see how Chrome groups them under site-keyed (pre-135) vs origin-keyed (Chrome 135) process isolation. Origin-keyed puts each unique origin in its own process, shrinking the Spectre blast radius from site to origin granularity.

checking origin isolation…
Under site-keyed isolation, https://admin.example.com and https://api.example.com can share a process because they share the same eTLD+1 (example.com). A Spectre exploit in one could read memory from the other. Origin-keyed isolation (Chrome 135) puts each origin in its own process, so subdomains are fully separated.

Build your origin list

Origins to group

Stats

0
Origins
0
Site processes
0
Origin processes
0
Extra processes

Process grouping

Site-keyed (pre-135)

Add origins above.

Origin-keyed (Chrome 135)

Add origins above.

Memory and security tradeoff

Add origins to see the analysis.