[{"data":1,"prerenderedAt":2672},["ShallowReactive",2],{"application-flags":3,"navbar":7,"always-visible-banner":35,"trust-badges":98,"solution-nav":119,"mega-nav":264,"fa-icon-solid-faDisplay":419,"fa-icon-solid-faFilter":422,"fa-icon-solid-faCloudArrowUp":424,"fa-icon-solid-faEnvelope":427,"fa-icon-sharp-regular-faUserSecret":429,"fa-icon-sharp-regular-faBrainCircuit":432,"fa-icon-sharp-regular-faShieldCheck":434,"fa-icon-sharp-regular-faRadar":436,"fa-icon-solid-faMobileScreenButton":438,"fa-icon-sharp-regular-faSatelliteDish":441,"fa-icon-brands-faChrome":443,"fa-icon-sharp-regular-faPenNib":445,"fa-icon-sharp-regular-faBooks":447,"fa-icon-sharp-regular-faBriefcase":449,"fa-icon-sharp-regular-faBookOpenCover":451,"fa-icon-sharp-regular-faBrowser":453,"fa-icon-sharp-regular-faBook":455,"fa-icon-sharp-regular-faGrid":457,"fa-icon-sharp-regular-faBuilding":459,"fa-icon-sharp-regular-faHandshakeSimple":461,"fa-icon-sharp-regular-faArrowTrendUp":463,"fa-icon-sharp-regular-faCalendarStar":465,"fa-icon-sharp-regular-faNewspaper":467,"fa-icon-sharp-regular-faUsers":469,"fa-icon-sharp-regular-faMessagesQuestion":471,"blog\u002Franking-the-best-byod-security-solutions":473,"blog-topics":2295},[4],{"name":5,"enabled":6},"maintenanceMode",false,[8],{"createdDate":9,"id":10,"name":11,"modelId":12,"published":13,"meta":14,"query":20,"data":21,"variations":26,"lastUpdated":27,"firstPublished":28,"testRatio":29,"createdBy":30,"lastUpdatedBy":31,"folders":32,"lastUpdateSource":33,"stageModifiedSincePublish":6,"rev":34},1742208588866,"1c7a4e423bf54ac1a328bb4063459ef2","Banner","1c6207a5f24948ab82d4a0b17f251193","published",{"breakpoints":15,"hasAutosaves":6,"hasErrors":6,"kind":19},{"medium":16,"small":17,"xsmall":18},768,640,320,"data",[],{"link":22,"text":23,"type":24,"url":25},{},"Get the latest stats and analysis on browser-based attacks","web-banner","https:\u002F\u002Fpushsecurity.com\u002Fresources\u002Fbrowser-attacks",{},1790775413052,1742208637545,1,"CydmZnOWU1XuAaLhEDCoYNM4Z8W2","jKjF9r5jcvXU8tzZEfFQm31Iyvr2",[],null,"7f86angte9l",{"createdBy":36,"createdDate":37,"data":38,"folders":86,"id":87,"lastUpdated":88,"lastUpdatedBy":36,"meta":89,"modelId":92,"name":93,"published":13,"query":94,"testRatio":29,"variations":95,"firstPublished":96,"stageModifiedSincePublish":6,"lastUpdateSource":33,"rev":97},"ST0tXQM8slWpFrmioqKHmENB2qe2",1774965361051,{"ctaText":39,"text":40,"url":41,"blocks":42,"state":82},"ewrererw","testrfesssssssssss","",[43,71],{"@type":44,"@version":45,"id":46,"component":47,"responsiveStyles":61},"@builder.io\u002Fsdk:Element",2,"builder-ca12c06a52de41d7b8743da53118cd38",{"name":48,"tag":48,"options":49,"isRSC":33},"TopBannerContent",{"text":50,"ctaText":51,"url":52,"mainText":53,"cta":56,"styleVariant":59,"showMonsters":60},"New Webinar Series: Join John Hammond, Troy Hunt, and Matt Johansen for the State of Browser Attacks","Save Your Spot","https:\u002F\u002Fpushsecurity.com\u002Fwebinar\u002Fstate-of-browser-security",{"content":54,"fontSize":55},"\u003Cp class=\"\">Shadow AI monsters are lurking in the dark! Bust them all in our retro-inspired arcade game.\u003C\u002Fp>","text-base",{"content":57,"fontSize":55,"url":58},"\u003Cp class=\"\">Press start >>\u003C\u002Fp>","https:\u002F\u002Fpushsecurity.com\u002Flp\u002Fshadow-ai-busters","arcade",true,{"large":62},{"display":63,"flexDirection":64,"position":65,"flexShrink":66,"boxSizing":67,"marginTop":68,"marginBottom":68,"fontSize":69,"fontWeight":70},"flex","column","relative","0","border-box",".56rem","1.125rem","700",{"id":72,"@type":44,"tagName":73,"properties":74,"responsiveStyles":77},"builder-pixel-kdfvya5q2y","img",{"src":75,"aria-hidden":76,"alt":41,"width":66,"height":66},"https:\u002F\u002Fcdn.builder.io\u002Fapi\u002Fv1\u002Fpixel?apiKey=f3a1111ff5be48cdbb123cd9f5795a05","true",{"large":78},{"height":66,"width":66,"display":79,"opacity":66,"overflow":80,"pointerEvents":81},"block","hidden","none",{"deviceSize":83,"location":84},"large",{"path":41,"query":85},{},[],"fd266d0172cc47429be7ad10f48c99ad",1789552629325,{"breakpoints":90,"hasAutosaves":60,"hasErrors":6,"hasLinks":6,"kind":91},{"medium":16,"small":17,"xsmall":18},"component","0678d178ec8b41efb8a23c09dba7874d","always visible banner",[],{},1774968080803,"3z3a40dxklt",[99,103,107,111,115],{"title":100,"logo":101,"createdDate":102},"SOC2","https:\u002F\u002Fcdn.builder.io\u002Fapi\u002Fv1\u002Fimage\u002Fassets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2Fb6727a5e00004d6e9e69fc3068b8b64c",1784291539953,{"title":104,"logo":105,"createdDate":106},"GDPR","https:\u002F\u002Fcdn.builder.io\u002Fapi\u002Fv1\u002Fimage\u002Fassets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2Ffe49f53211674deaa5a6640d929cdf42?format=webp",1784291672535,{"title":108,"logo":109,"createdDate":110},"Cyber essentials","https:\u002F\u002Fcdn.builder.io\u002Fapi\u002Fv1\u002Fimage\u002Fassets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F53558c1045a342a7a28def960cd54ae7?format=webp",1784291702710,{"title":112,"logo":113,"createdDate":114},"ISO IEC 27001","https:\u002F\u002Fcdn.builder.io\u002Fapi\u002Fv1\u002Fimage\u002Fassets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F578a404a61cf45db951a41fe3554d12d",1784291766222,{"title":116,"logo":117,"createdDate":118},"ISO IEC 27701","https:\u002F\u002Fcdn.builder.io\u002Fapi\u002Fv1\u002Fimage\u002Fassets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2Fbe219844b13242fbba531959579a753c",1784291858848,[120,189,234],{"id":121,"label":122,"text":41,"navIcon":123,"items":124},"stop-browser-based-attacks","Stop browser-based attacks","solid:faShieldHalved",[125,130,135,140,145,150,155,160,165,169,174,179,184],{"title":126,"text":127,"url":128,"navIcon":129},"Phishing","Detect phishing behaviorally in the browser, regardless of the payload or delivery channel.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fzero-day-phishing","sharp-regular:faFishingRod",{"title":131,"text":132,"url":133,"navIcon":134},"Adversary-in-the-Middle","Detect and block MFA-bypassing AiTM phishing pages in real-time.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fadversary-in-the-middle-attacks","solid:faUserSecret",{"title":136,"text":137,"url":138,"navIcon":139},"ClickFix (and variants)","Intercept malicious copy and paste attacks at the point of interaction.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fclickfix-fix-variants","sharp-regular:faLaptopCode",{"title":141,"text":142,"url":143,"navIcon":144},"Device code phishing","Detect and block device code phishing kits designed to get around passkeys.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fdevice-code-phishing","solid:faTabletScreenButton",{"title":146,"text":147,"url":148,"navIcon":149},"Consent phishing","Detect and block malicious OAuth consent grants before access is authorized.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fconsent-phishing","solid:faThumbsUp",{"title":151,"text":152,"url":153,"navIcon":154},"Malicious OAuth integrations","Detect and block the root cause of SaaS supply chain attacks.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fmalicious-oauth-integrations","solid:faPlugCircleXmark",{"title":156,"text":157,"url":158,"navIcon":159},"Malicious browser extensions","Inventory, monitor, and block risky browser extensions.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fmalicious-browser-extensions","sharp-regular:faPuzzlePiece",{"title":161,"text":162,"url":163,"navIcon":164},"Malicious file downloads","Control which files users can download by type, source, and user group.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fmalicious-file-downloads","solid:faFileCircleXmark",{"title":166,"text":167,"url":168,"navIcon":164},"Infostealers","Detect infostealer delivery and respond to a compromise.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Finfostealer-malware",{"title":170,"text":171,"url":172,"navIcon":173},"Ghost logins","Surface hidden login paths that bypass SSO and expose accounts.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fghost-logins","solid:faGhost",{"title":175,"text":176,"url":177,"navIcon":178},"Mobile phishing (QR & SMS)","Detect phishing regardless of whether it arrives via email, SMS, or QR code.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fmobile-phishing-qr-code-sms","solid:faQrcode",{"title":180,"text":181,"url":182,"navIcon":183},"Credential stuffing","Identify reused and compromised credentials across SaaS logins.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fcredential-stuffing","custom:credentialStuffing",{"title":185,"text":186,"url":187,"navIcon":188},"Session hijacking","Detect and respond to stolen session token replay with browser session markers.","\u002Fsolution\u002Fstop-browser-based-attacks\u002Fsession-hijacking","solid:faCookieBite",{"id":190,"label":191,"text":41,"navIcon":192,"items":193},"achieve-security-outcomes","Achieve security outcomes","solid:faCheckToSlot",[194,199,204,209,214,219,224,229],{"title":195,"text":196,"url":197,"navIcon":198},"Stop account takeover","Stop ATO before it happens, in the browser","\u002Fsolution\u002Fachieve-security-outcomes\u002Fstop-account-takeover","sharp-regular:faUserSecret",{"title":200,"text":201,"url":202,"navIcon":203},"Harden unmanaged identities","Identify gaps and harden them with guardrails","\u002Fsolution\u002Fachieve-security-outcomes\u002Fharden-unmanaged-identities","sharp-regular:faRadar",{"title":205,"text":206,"url":207,"navIcon":208},"Investigate browser-related incidents","Investigate and respond with browser telemetry","\u002Fsolution\u002Fachieve-security-outcomes\u002Finvestigate-browser-related-incidents","sharp-regular:faSatelliteDish",{"title":210,"text":211,"url":212,"navIcon":213},"Secure shadow IT","See and control shadow SaaS in the browser","\u002Fsolution\u002Fachieve-security-outcomes\u002Fsecure-shadow-saas","sharp-regular:faShieldCheck",{"title":215,"text":216,"url":217,"navIcon":218},"Secure AI","See and control AI apps in the browser","\u002Fsolution\u002Fachieve-security-outcomes\u002Fsecure-ai","sharp-regular:faBrainCircuit",{"title":220,"text":221,"url":222,"navIcon":223},"Secure BYOD","Extend security to unmanaged devices without MDM","\u002Fsolution\u002Fachieve-security-outcomes\u002Fsecure-bring-your-own-device","solid:faMobileScreenButton",{"title":225,"text":226,"url":227,"navIcon":228},"Secure Chromebooks","Protect Chromebooks against in-browser attacks","\u002Fsolution\u002Fachieve-security-outcomes\u002Fsecure-chromebooks","brands:faChrome",{"title":230,"text":231,"url":232,"navIcon":233},"Data loss prevention","Enforce DLP at the point of interaction in the browser","\u002Fsolution\u002Fachieve-security-outcomes\u002Finvestigate-and-stop-data-loss","custom:investigateAndStopDataLoss",{"id":235,"label":236,"text":41,"navIcon":237,"items":238},"tool-replacements","Tool replacements","solid:faScrewdriverWrench",[239,244,249,254,259],{"title":240,"text":241,"url":242,"navIcon":243},"Email Security","Stop phishing outside of the inbox.","\u002Fsolution\u002Ftool-replacements\u002Femail-security","faEnvelope",{"title":245,"text":246,"url":247,"navIcon":248},"Remote browser isolation","Detect attacks that happen inside the browser session.","\u002Fsolution\u002Ftool-replacements\u002Fremote-browser-isolation","solid:faDisplay",{"title":250,"text":251,"url":252,"navIcon":253},"Secure web gateways","Detect attacks inside the browser after SWGs allowed the connection.","\u002Fsolution\u002Ftool-replacements\u002Fsecure-web-gateways","solid:faFilter",{"title":255,"text":256,"url":257,"navIcon":258},"CASB alternative","Catch browser-based identity threats in real time, not after the fact.","\u002Fsolution\u002Ftool-replacements\u002Fcloud-access-security-broker","solid:faCloudArrowUp",{"title":260,"text":261,"url":262,"navIcon":263},"Security awareness training","Block real phishing instead of training users on simulations.","\u002Fsolution\u002Ftool-replacements\u002Fsecurity-awareness-training","custom:securityAwareness",[265,293,354],{"id":266,"columns":267},"Solution",[268,283],{"kind":269,"heading":270,"span":29,"links":271},"links","Compare Push",[272,275,277,279,281],{"title":273,"url":247,"text":246,"navIcon":248,"variant":274},"vs Remote Browser Isolation","compact",{"title":276,"url":252,"text":251,"navIcon":253,"variant":274},"vs Secure Web Gateways",{"title":278,"url":257,"text":256,"navIcon":258,"variant":274},"vs Cloud Access Security Broker",{"title":280,"url":262,"text":261,"navIcon":263,"variant":274},"vs Security Awareness Training",{"title":282,"url":242,"text":241,"navIcon":243,"variant":274},"+ Email Security",{"kind":269,"heading":266,"span":45,"links":284},[285,286,287,288,289,290,291,292],{"title":195,"url":197,"text":196,"navIcon":198},{"title":215,"url":217,"text":216,"navIcon":218},{"title":230,"url":232,"text":231,"navIcon":233},{"title":210,"url":212,"text":211,"navIcon":213},{"title":200,"url":202,"text":201,"navIcon":203},{"title":220,"url":222,"text":221,"navIcon":223},{"title":205,"url":207,"text":206,"navIcon":208},{"title":225,"url":227,"text":226,"navIcon":228},{"id":294,"columns":295},"resources",[296,321,339],{"kind":269,"heading":297,"span":29,"links":298},"Resources",[299,306,311,316],{"title":300,"url":301,"text":302,"navIcon":303,"variant":304,"badge":305},"Research blog","\u002Fblog","Latest threat research and insights","sharp-regular:faPenNib","featured","Latest",{"title":307,"url":308,"text":309,"navIcon":310},"Resource library","\u002Fresources","Check out our webinars and downloads","sharp-regular:faBooks",{"title":312,"url":313,"text":314,"navIcon":315},"Customer stories","\u002Fcustomer-stories","What customers love about Push","sharp-regular:faBriefcase",{"title":317,"url":318,"text":319,"navIcon":320},"Help center","\u002Fhelp\u002Faudience\u002Fadministrators","Guides for employees and admins","sharp-regular:faBookOpenCover",{"kind":269,"heading":322,"span":29,"links":323},"Learn",[324,329,334],{"title":325,"url":326,"text":327,"navIcon":328},"Browser attacks in 2026","\u002Fresources\u002Fbrowser-attacks","The latest stats & analysis","sharp-regular:faBrowser",{"title":330,"url":331,"text":332,"navIcon":333},"Browser attacks glossary","\u002Fresources\u002Fbrowser-attacks-glossary","Understand the threat landscape","sharp-regular:faBook",{"title":335,"url":336,"text":337,"navIcon":338},"Browser attacks matrix","\u002Fresources\u002Fbrowser-identity-attacks-matrix","MITRE-inspired resource for red & blue teams","sharp-regular:faGrid",{"kind":294,"heading":340,"cards":341},"Latest resources",[342,348],{"title":343,"description":344,"cta":345,"background":347},"Browser-based attacks: the 2026 threat landscape","Half of attacks now reach victims outside of email. ClickFix is now the dominant browser attack technique. Get the latest stats and analysis from the Push Security team.",{"text":346,"url":326},"Read the report","orange",{"title":349,"description":350,"cta":351,"background":353},"The browser & identity attacks matrix","Check out the MITRE-inspired matrix of browser & identity attack techniques for red and blue teams. Get involved on GitHub.",{"text":352,"url":336},"Explore the matrix","black",{"id":355,"columns":356},"About",[357,375,398],{"kind":269,"heading":358,"span":29,"links":359},"Get to know us",[360,365,370],{"title":361,"url":362,"text":363,"navIcon":364},"About us","\u002Fabout","Meet the team and learn what drives us","sharp-regular:faBuilding",{"title":366,"url":367,"text":368,"navIcon":369},"Partners","\u002Fpartner","Become a partner and access resources","sharp-regular:faHandshakeSimple",{"title":371,"url":372,"text":373,"navIcon":374},"Investors","\u002Fabout#investors","Learn more about our investors and advisors","sharp-regular:faArrowTrendUp",{"kind":269,"heading":376,"span":29,"links":377},"Keep up with us",[378,383,388,393],{"title":379,"url":380,"text":381,"navIcon":382},"Events","\u002Fevents","See upcoming webinars and in-person events","sharp-regular:faCalendarStar",{"title":384,"url":385,"text":386,"navIcon":387},"News","\u002Fnews","Stay up to date on company news","sharp-regular:faNewspaper",{"title":389,"url":390,"text":391,"navIcon":392},"Careers","\u002Fcareers","Explore open roles","sharp-regular:faUsers",{"title":394,"url":395,"text":396,"navIcon":397},"Contact us","\u002Fcontact","Have a question? We're here to help","sharp-regular:faMessagesQuestion",{"kind":399,"heading":400,"testimonials":401},"testimonials","What customers say",[402,409,414],{"quote":403,"author":404,"jobTitle":405,"image":406,"url":313,"ctaText":407,"background":408},"Security is only as good as its weakest link. From day one, Push found the gaps that would allow attackers to circumvent our controls. We use Push every day — they're one of my favourite teams to work with.","Jason Waits","\u003Cp>CISO, Inductive Automation\u003C\u002Fp>","https:\u002F\u002Fcdn.builder.io\u002Fapi\u002Fv1\u002Fimage\u002Fassets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2Ff04c0c0689ce4a89ac0f0708d78c0a07","Read the customer story","white",{"quote":410,"author":411,"jobTitle":412,"image":413,"url":313,"ctaText":407,"background":408},"I'm not going to be able to shove a browser on everybody. I need to be able to support them where they are. Push gave us the visibility and control we needed while allowing people to choose their paths.","Myke Lyons","\u003Cp>CISO, Cribl\u003C\u002Fp>","https:\u002F\u002Fcdn.builder.io\u002Fapi\u002Fv1\u002Fimage\u002Fassets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F61920ec05c7a45b4b2259b8dded43c9b",{"quote":415,"author":416,"jobTitle":417,"image":418,"url":313,"ctaText":407,"background":408},"No matter the channel for phishing — email, LinkedIn, text — the employee clicks a link that opens a browser session. We see the main control point moving from the endpoint to the browser.","Ash Devata","\u003Cp>CEO, GreyNoise\u003C\u002Fp>","https:\u002F\u002Fcdn.builder.io\u002Fapi\u002Fv1\u002Fimage\u002Fassets%2Ff3a1111ff5be48cdbb123cd9f5795a05%2F392c75ae282342008130cf1147c20e82",{"w":420,"h":420,"d":421},512,"M448 96l0 256-384 0 0-256 384 0zM64 32C28.7 32 0 60.7 0 96L0 352c0 35.3 28.7 64 64 64l144 0-16 48-72 0c-13.3 0-24 10.7-24 24s10.7 24 24 24l272 0c13.3 0 24-10.7 24-24s-10.7-24-24-24l-72 0-16-48 144 0c35.3 0 64-28.7 64-64l0-256c0-35.3-28.7-64-64-64L64 32z",{"w":420,"h":420,"d":423},"M32 64C19.1 64 7.4 71.8 2.4 83.8S.2 109.5 9.4 118.6L192 301.3 192 416c0 8.5 3.4 16.6 9.4 22.6l64 64c9.2 9.2 22.9 11.9 34.9 6.9S320 492.9 320 480l0-178.7 182.6-182.6c9.2-9.2 11.9-22.9 6.9-34.9S492.9 64 480 64L32 64z",{"w":425,"h":420,"d":426},576,"M144 480c-79.5 0-144-64.5-144-144 0-63.4 41-117.2 97.9-136.5-1.3-7.7-1.9-15.5-1.9-23.5 0-79.5 64.5-144 144-144 55.4 0 103.5 31.3 127.6 77.1 14.2-8.3 30.8-13.1 48.4-13.1 53 0 96 43 96 96 0 15.7-3.8 30.6-10.5 43.7 44 20.3 74.5 64.7 74.5 116.3 0 70.7-57.3 128-128 128l-304 0zM305 191c-9.4-9.4-24.6-9.4-33.9 0l-72 72c-9.4 9.4-9.4 24.6 0 33.9s24.6 9.4 33.9 0l31-31 0 102.1c0 13.3 10.7 24 24 24s24-10.7 24-24l0-102.1 31 31c9.4 9.4 24.6 9.4 33.9 0s9.4-24.6 0-33.9l-72-72z",{"w":420,"h":420,"d":428},"M48 64c-26.5 0-48 21.5-48 48 0 15.1 7.1 29.3 19.2 38.4l208 156c17.1 12.8 40.5 12.8 57.6 0l208-156c12.1-9.1 19.2-23.3 19.2-38.4 0-26.5-21.5-48-48-48L48 64zM0 196L0 384c0 35.3 28.7 64 64 64l384 0c35.3 0 64-28.7 64-64l0-188-198.4 148.8c-34.1 25.6-81.1 25.6-115.2 0L0 196z",{"w":430,"h":420,"d":431},448,"M144-16l-48 112-48 0 0 48 48 0 0 32c0 17 3.3 33.2 9.3 48l-73.3 0 0 32 5.3 16 26.7 80-64 160 51.7 0 56.9-142.2 6.5-16.3c-1-3.1-10.1-30.3-27.2-81.5l51.4 0c22.6 19.9 52.2 32 84.7 32s62.1-12.1 84.7-32l51.4 0c-17.1 51.2-26.1 78.4-27.2 81.5l6.5 16.3 56.9 142.2 51.7 0-64-160 26.7-80 5.3-16 0-32-73.3 0c6-14.8 9.3-31 9.3-48l0-32 48 0 0-48-48 0-48-112-32 0-48 32-48-32-32 0zm80 272c-32.8 0-61-19.7-73.3-48l57.3 0 16-40 16 40 57.3 0c-12.3 28.3-40.5 48-73.3 48zm17.5 139.6l30.5-35.6 0-24-96 0 0 24 30.5 35.6-46.5 116.4 128 0-46.5-116.4z",{"w":420,"h":420,"d":433},"M192 48l40 0 0 108-12.4 0c-7.6-16.5-24.3-28-43.6-28-26.5 0-48 21.5-48 48s21.5 48 48 48c19.4 0 36.1-11.5 43.6-28l12.4 0 0 56-92 0 0 56.4c-16.5 7.6-28 24.3-28 43.6 0 26.5 21.5 48 48 48s48-21.5 48-48c0-19.4-11.5-36.1-28-43.6l0-16.4 52 0 0 172-40 0c-16.8 0-31.2-10.3-37.1-25.1l-6.4-16-17.2 1c-1.1 .1-2.2 .1-3.2 .1-30.9 0-56-25.1-56-56 0-9.5 2.4-18.5 6.5-26.3l8.7-16.2-13.4-12.6c-11-10.2-17.8-24.8-17.8-40.9 0-21.6 12.2-40.4 30.3-49.8l22.6-11.7-13.1-21.9c-5-8.4-7.9-18.1-7.9-28.6 0-30.9 25.1-56 56-56l24 0 0-32c0-13.3 10.7-24 24-24zm88 148l12.4 0c7.6 16.5 24.3 28 43.6 28 26.5 0 48-21.5 48-48s-21.5-48-48-48c-19.4 0-36.1 11.5-43.6 28l-12.4 0 0-108 40 0c13.3 0 24 10.7 24 24l0 32 24 0c30.9 0 56 25.1 56 56 0 10.5-2.9 20.3-7.9 28.6l-13.1 21.9 22.6 11.7c18 9.3 30.3 28.1 30.3 49.8 0 16.1-6.8 30.7-17.8 40.9l-13.4 12.6 8.7 16.2c4.2 7.8 6.5 16.7 6.5 26.3 0 30.9-25.1 56-56 56-1.1 0-2.2 0-3.2-.1l-17.2-1-6.4 16C351.2 453.7 336.8 464 320 464l-40 0 0-76 92 0 0-56.4c16.5-7.6 28-24.3 28-43.6 0-26.5-21.5-48-48-48s-48 21.5-48 48c0 19.4 11.5 36.1 28 43.6l0 16.4-52 0 0-152zM192 512l128 0c31.1 0 58.4-16.2 74.1-40.5 52.7-5.1 93.9-49.5 93.9-103.5 0-11.5-1.9-22.5-5.3-32.9 13.4-17.5 21.3-39.4 21.3-63.1 0-32-14.5-60.6-37.1-79.7 3.3-10.2 5.1-21.1 5.1-32.3 0-49.6-34.8-91.1-81.3-101.5-6.3-33.3-35.6-58.5-70.7-58.5L192 0c-35.1 0-64.4 25.2-70.7 58.5-46.5 10.4-81.3 51.9-81.3 101.5 0 11.3 1.8 22.2 5.1 32.3-22.7 19.1-37.1 47.7-37.1 79.7 0 23.7 8 45.6 21.3 63.1-3.5 10.4-5.3 21.4-5.3 32.9 0 54 41.2 98.5 93.9 103.5 15.6 24.3 42.9 40.5 74.1 40.5zM336 192a16 16 0 1 1 0-32 16 16 0 1 1 0 32zm32 96a16 16 0 1 1 -32 0 16 16 0 1 1 32 0zM176 352a16 16 0 1 1 -32 0 16 16 0 1 1 32 0zm16-176a16 16 0 1 1 -32 0 16 16 0 1 1 32 0z",{"w":420,"h":420,"d":435},"M267.6 4.5l207.5 80.5 19.2 7.4 1.2 20.5c2.9 50-4.9 126.3-37.3 200.9-32.7 75.2-91.1 150-189.4 192.5l-12.7 5.5-12.7-5.5C144.9 463.9 86.6 389.2 53.9 313.9 21.5 239.3 13.7 162.9 16.6 113L17.8 92.5 37 85 244.5 4.5 256 0 267.6 4.5zM64.1 126C63.1 169.5 71 232.9 97.9 294.8 126.1 359.7 175 422.4 256 459.6 337.1 422.4 385.9 359.7 414.2 294.8 441 232.9 449 169.5 448 126L256 51.5 64.1 126zm302.3 44.7L352.3 190.1 249.8 330.9 233 354c-8.8-9.1-30.9-32-66.2-68.6l-16.7-17.3 34.5-33.3c9.5 9.8 23.9 24.7 43.2 44.7l85.6-117.7 14.1-19.4 38.8 28.2z",{"w":420,"h":420,"d":437},"M497.4 49l17-17-33.9-33.9C473.6 4.9 453.3 25.2 419.7 58.8 375.4 22.1 318.5 0 256.4 0 115.1 0 .4 114.6 .4 256s114.6 256 256 256 256-114.6 256-256l-48 0c0 114.9-93.1 208-208 208s-208-93.1-208-208 93.1-208 208-208c48.8 0 93.7 16.8 129.1 44.9l-45.7 45.7c-23.5-16.8-52.3-26.6-83.4-26.6-79.5 0-144 64.5-144 144s64.5 144 144 144 144-64.5 144-144l-48 0c0 53-43 96-96 96s-96-43-96-96 43-96 96-96c17.8 0 34.5 4.8 48.8 13.3-52 52-79.5 79.5-82.7 82.7l33.9 33.9 17-17 224-224z",{"w":439,"h":420,"d":440},384,"M16 64C16 28.7 44.7 0 80 0L304 0c35.3 0 64 28.7 64 64l0 384c0 35.3-28.7 64-64 64L80 512c-35.3 0-64-28.7-64-64L16 64zm64 0l0 304 224 0 0-304-224 0zM192 472c17.7 0 32-14.3 32-32s-14.3-32-32-32-32 14.3-32 32 14.3 32 32 32z",{"w":420,"h":420,"d":442},"M208 0l24 0C386.6 0 512 125.4 512 280l0 24-48 0 0-24C464 151.9 360.1 48 232 48l-24 0 0-48zm24 96c101.6 0 184 82.4 184 184l0 24-48 0 0-24c0-75.1-60.9-136-136-136l-24 0 0-48 24 0zM48 256c0 114.9 93.1 208 208 208 22.9 0 45-3.7 65.6-10.5l-263-263C51.7 211 48 233.1 48 256zM0 256c0-36.5 7.6-71.3 21.4-102.7 6.7-15.3 14.9-29.9 24.4-43.5 7.7 7.7 61.5 61.5 161.2 161.2 30.5-30.5 49.5-49.5 57-57L297.9 248c-7.5 7.5-26.5 26.5-57 57 99.7 99.7 153.5 153.5 161.2 161.2-13.6 9.5-28.2 17.7-43.5 24.4-31.4 13.8-66.2 21.4-102.7 21.4-141.4 0-256-114.6-256-256z",{"w":420,"h":420,"d":444},"M0 256c0-46.6 12.5-90.4 34.3-128.9L144.1 318.3c21.9 39.2 63.8 65.7 111.9 65.7 14.3 0 27.1-2.3 40.8-6.6L220.5 509.6C95.9 492.3 0 385.3 0 256zm365.1 65.6c12.3-19.2 18.9-42.5 18.9-65.6 0-38.2-16.8-72.5-43.3-96l152.7 0c12 29.6 18.6 62.1 18.6 96 0 141.4-114.6 255.1-256 256L365.1 321.6zM477.8 128L256 128c-62.9 0-113.7 44.1-125.5 102.7L54.2 98.5C101 38.5 174 0 256 0 350.8 0 433.5 51.5 477.8 128zM344 256a88 88 0 1 1 -176 0 88 88 0 1 1 176 0z",{"w":425,"h":420,"d":446},"M406.1 198.1l0 0-3.6 10.7-56.3 168.8-221.5 69.9 98.5-98.5c5.2 1.9 10.8 3 16.7 3 26.5 0 48-21.5 48-48s-21.5-48-48-48-48 21.5-48 48c0 5.9 1.1 11.5 3 16.7l-98.5 98.5 69.9-221.5 168.8-56.3 10.8-3.6 0 0 60.1 60.1zM80 512l304-96 64-192c59.4-59.4 96.7-96.7 112-112-18.3-18.3-49.6-49.6-94.1-94.1L432-16C416.7-.7 379.4 36.6 320 96l-192 64-96 304 48 48z",{"w":425,"h":420,"d":448},"M404.8 45.3l12.4 46.4-77.3 20.7-12.4-46.4 77.3-20.7zm5.5 329.8l-58-216.4 77.3-20.7 58 216.4-77.3 20.7zm12.4 46.4l77.3-20.7 12.4 46.4-77.3 20.7-12.4-46.4zM315.1 19.6l-46.4 12.4 8.6 32-69.2 0 0-64-176 0 0 512 304 0 0-228.4c41.8 156.2 63.5 237.1 65.1 243 64.4-17.3 167.4-44.9 170-45.6l-12.4-46.4-107.7-401.8-12.4-46.4C413-6.6 371.7 4.4 315.1 19.6zM208.1 464l0-352 80 0 0 352-80 0zm-48-400l0 32-80 0 0-48 80 0 0 16zm0 80l0 224-80 0 0-224 80 0zm0 272l0 48-80 0 0-48 80 0z",{"w":420,"h":420,"d":450},"M168 0l-24 0 0 96-144 0 0 384 512 0 0-384-144 0 0-96-200 0zM464 256l-416 0 0-112 416 0 0 112zM320 304l144 0 0 128-416 0 0-128 144 0 0 48 128 0 0-48zm0-208l-128 0 0-48 128 0 0 48z",{"w":425,"h":420,"d":452},"M312 114.4l0 282.1 9.2-3.3C367.8 376.5 417 368 466.5 368l61.5 0 0-288-61.5 0c-38.5 0-76.7 6.6-113 19.6L312 114.4zM264 396.5l0-282.1-41.5-14.8C186.2 86.6 148 80 109.5 80l-61.5 0 0 288 61.5 0c49.5 0 98.7 8.5 145.3 25.2l9.2 3.3zM528 32l48 0 0 384-109.5 0c-44 0-87.7 7.6-129.2 22.4L288 456 238.6 438.4C197.2 423.6 153.5 416 109.5 416L0 416 0 32 109.5 32c44 0 87.7 7.6 129.2 22.4L288 72 337.4 54.4C378.8 39.6 422.5 32 466.5 32L528 32zM0 464l91.7 0c36.9 0 73.6 5 109.2 14.9l86.2 24 42.2-15.1c44-15.7 90.5-23.8 137.2-23.8l109.5 0 0 48-109.5 0c-41.3 0-82.2 7.1-121.1 21l-49.4 17.6-7.2 2.6-7.3-2-93.6-26c-31.4-8.7-63.8-13.1-96.4-13.1L0 512 0 464z",{"w":420,"h":420,"d":454},"M48 256l0 144 416 0 0-144-416 0zM0 64l512 0 0 384-512 0 0-384zm64 64l0 64 64 0 0-64-64 0zm120 8l-24 0 0 48 288 0 0-48-264 0z",{"w":430,"h":420,"d":456},"M24 0L0 0 0 432 .4 432c-.2 2.6-.4 5.3-.4 8l0 72 448 0 0-48-32 0 0-64 32 0 0-400-424 0zM368 400l0 64-320 0 0-24c0-22.1 17.9-40 40-40l280 0zM88 352c-14.4 0-28 3.5-40 9.6l0-313.6 352 0 0 304-312 0zm40-224l0 48 224 0 0-48-224 0zm224 96l-224 0 0 48 224 0 0-48z",{"w":420,"h":420,"d":458},"M112 64l0 48-48 0 0-48 48 0zM64 24l-40 0 0 128 128 0 0-128-88 0zm48 208l0 48-48 0 0-48 48 0zM64 192l-40 0 0 128 128 0 0-128-88 0zm0 208l48 0 0 48-48 0 0-48zM24 360l0 128 128 0 0-128-128 0zM280 64l0 48-48 0 0-48 48 0zM232 24l-40 0 0 128 128 0 0-128-88 0zm0 208l48 0 0 48-48 0 0-48zm-40-40l0 128 128 0 0-128-128 0zm88 208l0 48-48 0 0-48 48 0zm-48-40l-40 0 0 128 128 0 0-128-88 0zM400 64l48 0 0 48-48 0 0-48zM360 24l0 128 128 0 0-128-128 0zm88 208l0 48-48 0 0-48 48 0zm-48-40l-40 0 0 128 128 0 0-128-88 0zm0 208l48 0 0 48-48 0 0-48zm-40-40l0 128 128 0 0-128-128 0z",{"w":439,"h":420,"d":460},"M48 48l0 416 96 0 0-112 96 0 0 112 96 0 0-416-288 0zM0 0L384 0 384 512 0 512 0 0zM96 96l64 0 0 64-64 0 0-64zm192 0l0 64-64 0 0-64 64 0zM96 224l64 0 0 64-64 0 0-64zm192 0l0 64-64 0 0-64 64 0z",{"w":17,"h":420,"d":462},"M598.6 75.4L618 61.3 589.7 22.5C586 25.2 554.7 48 495.8 90.8l-34.1-22.7-6-4-145.2 0 0 0-144 0c-2.9 2.9-11.1 11.1-24.5 24.5-56.3-40.9-86.6-62.9-90.8-66.1L22.9 61.3c1.5 1.1 37.3 27.1 107.4 78.1l16.6 12.1c7.9-7.9 21.1-21.1 39.5-39.5l76.1 0-103 103-17 17c12.1 12.1 21.8 21.8 29.1 29.1 46.9 46.9 122.8 46.9 169.7 0L368.4 233.9 494.5 360c-16.7 16.7-29.4 29.4-38.1 38.1l-47-47-33.9 33.9 47 47-16 16-44.1 0-65-65-33.9 33.9 31 31-60.1 0-169-169-17-17-33.9 33.9 17 17 176 176 7 7 128 0 1 1 1-1 81.9 0 7-7c225.8-225.8 167.2-167.2 193-193l-33.9-33.9-64 64-143-143-17-17c-6.8 6.8-27.2 27.2-61.1 61.1-26.5 26.5-68.5 28-96.7 4.6l119.8-119.8 62.1 0 0 0 48.7 0c32.6 21.8 51.3 34.2 55.9 37.2l13.5-9.8 88-64z",{"w":425,"h":420,"d":464},"M352 96l224 0 0 224-48 0 0-142.1-191 191-17 17-17-17-111-111-139.8 139.8-17 17-33.9-33.9 17-17 156.8-156.8 17-17 17 17 111 111 174.1-174.1-142.1 0 0-48z",{"w":430,"h":420,"d":466},"M144 0l0 64 160 0 0-64 48 0 0 64 96 0 0 416-448 0 0-416 96 0 0-64 48 0zm0 112l-96 0 0 320 352 0 0-320-256 0zM261.6 228.2l84.1 12.2-60.9 59.3 14.4 83.8-75.2-39.6-75.2 39.6 14.4-83.8-60.9-59.3 84.1-12.2 37.6-76.2 37.6 76.2z",{"w":420,"h":420,"d":468},"M96 32l416 0 0 448-512 0 0-392 48 0 0 344 8 0c22.1 0 40-17.9 40-40L96 32zm38.4 400l329.6 0 0-352-320 0 0 312c0 14.4-3.5 28-9.6 40zM192 128l96 0 0 96-96 0 0-96zm152 48l72 0 0 48-96 0 0-48 24 0zM216 256l200 0 0 48-224 0 0-48 24 0zm0 80l200 0 0 48-224 0 0-48 24 0z",{"w":17,"h":420,"d":470},"M384 128a64 64 0 1 0 -128 0 64 64 0 1 0 128 0zm-176 0a112 112 0 1 1 224 0 112 112 0 1 1 -224 0zm252.8 76c5.9 2.6 12.4 4 19.2 4 26.5 0 48-21.5 48-48s-21.5-48-48-48l-.8 0c-1.6-16.6-5.8-32.4-12.1-47.1 4.2-.6 8.6-.9 12.9-.9 53 0 96 43 96 96s-43 96-96 96c-17.7 0-34.3-4.8-48.6-13.2 11.7-11.3 21.6-24.4 29.4-38.8zM208.6 242.8c-14.2 8.4-30.8 13.2-48.6 13.2-53 0-96-43-96-96s43-96 96-96c4.4 0 8.7 .3 12.9 .9-6.3 14.7-10.5 30.6-12.1 47.1l-.8 0c-26.5 0-48 21.5-48 48s21.5 48 48 48c6.8 0 13.3-1.4 19.2-4 7.8 14.4 17.7 27.5 29.4 38.8zM432 288l69.8 192-51.1 0-52.4-144-156.8 0-52.4 144-51.1 0 69.8-192 224 0zM151.2 304l-17.3 48-36.3 0-46.5 128-51.1 0 64-176 87.2 0zm354.8 48l-17.3-48 87.2 0 64 176-51.1 0-46.5-128-36.3 0z",{"w":425,"h":420,"d":472},"M144 354l-48 30 0-80-96 0 0-336 384 0 0 336-160 0-80 50zm0-56.6c43.5-27.2 65.6-41 66.2-41.4l125.8 0 0-240-288 0 0 240 96 0 0 41.4zM192 416l0-35.4 45.8-28.6 2.2 0 0 64 125.8 0c.6 .4 22.7 14.2 66.2 41.4l0-41.4 96 0 0-240-96 0 0-48 144 0 0 336-96 0 0 80-128-80-160 0 0-48zm0-340c-14.4 0-26.1 11.7-26.1 26.1l-40 0C125.9 65.6 155.5 36 192 36s66.1 29.6 66.1 66.1c0 29.7-17.7 46.9-33.3 55.6-4.5 2.5-8.9 4.8-12.9 6.2l-40 0 0-33.4c1.8-.2 3.6-.4 5.4-.6 9.7-1.1 19-2.1 27.9-7.1 7.5-4.2 12.9-10.1 12.9-20.8 0-14.4-11.7-26.1-26.1-26.1zM172 188l40 0 0 40-40 0 0-40z",{"id":474,"title":475,"authorsCollection":476,"content":486,"extension":2060,"faqItemsCollection":2061,"faqTitle":2154,"featured":6,"hashTags":33,"meta":2155,"metaTitle":2156,"ogImage":33,"postType":2157,"publishedDate":2158,"relatedBlogPostsCollection":2159,"slug":2198,"stem":2199,"subtitle":33,"summary":2200,"synopsis":2210,"sys":2211,"tagsCollection":2214,"topicsCollection":2220,"__hash__":2294},"blog\u002Fblog\u002Franking-the-best-byod-security-solutions.json","Ranking the best BYOD security solutions in 2026",{"items":477},[478],{"fullName":479,"firstName":480,"jobTitle":481,"socialLinks":482,"profilePicture":484},"Alex Henshall","Alex","Product Team",[483],"https:\u002F\u002Fwww.linkedin.com\u002Fin\u002Falexhenshall\u002F",{"url":485},"https:\u002F\u002Fimages.ctfassets.net\u002Fy1cdw1ablpvd\u002F2rz3Pre3b1MexPIQ4hzPUe\u002F0ef8a092b7e7df00fbce3f7d1ccb96d1\u002FAlex_Henshall.jpeg",{"json":487,"links":2016},{"nodeType":488,"data":489,"content":490},"document",{},[491,500,509,516,520,530,537,647,679,682,690,1168,1171,1179,1188,1196,1247,1278,1290,1302,1305,1313,1321,1340,1351,1409,1412,1420,1428,1445,1456,1479,1482,1490,1498,1528,1539,1550,1553,1561,1569,1599,1610,1621,1624,1632,1640,1682,1693,1704,1707,1715,1723,1742,1753,1787,1790,1798,1806,1823,1834,1845,1848,1856,1864,1893,1904,1915,1918,1926,1934,1951,1962,1973,1976,1984,1991,1998],{"nodeType":492,"data":493,"content":494},"paragraph",{},[495],{"nodeType":496,"value":497,"marks":498,"data":499},"text","Every organization has unmanaged devices touching corporate data, whether it has a bring your own device (BYOD) policy or not: contractors and agency staff working across several clients from one device, new hires waiting for equipment, and staff at a newly acquired company who are still on their old employer's equipment.",[],{},{"nodeType":501,"data":502,"content":508},"embedded-entry-block",{"target":503},{"sys":504},{"id":505,"type":506,"linkType":507},"2rCz0LKT7YMeVfd6z6PfkT","Link","Entry",[],{"nodeType":492,"data":510,"content":511},{},[512],{"nodeType":496,"value":513,"marks":514,"data":515},"The best BYOD and unmanaged device security solutions in 2026 are Push Security, Island, Prisma Browser, Chrome Enterprise Premium, Venn, Microsoft Intune with Entra Conditional Access, Zscaler, Citrix DaaS, 1Password Device Trust and Cisco ISE. We've ranked each on how well it protects corporate accounts and data on a device you don't control, how much it asks of the person who owns that device, and how much of their work it covers.",[],{},{"nodeType":517,"data":518,"content":519},"hr",{},[],{"nodeType":521,"data":522,"content":523},"heading-1",{},[524],{"nodeType":496,"value":525,"marks":526,"data":529},"Why browser security is the best option for BYOD",[527],{"type":528},"bold",{},{"nodeType":492,"data":531,"content":532},{},[533],{"nodeType":496,"value":534,"marks":535,"data":536},"Most legacy BYOD security tools were built to control a device or a network. On personal and contractor laptops, the work happens in web and cloud apps, so the browser is where security can reach without taking over someone's device. The common objections to the alternatives:",[],{},{"nodeType":538,"data":539,"content":540},"unordered-list",{},[541,557,572,587,602,617,632],{"nodeType":542,"data":543,"content":544},"list-item",{},[545],{"nodeType":492,"data":546,"content":547},{},[548,553],{"nodeType":496,"value":549,"marks":550,"data":552},"Mobile device management (MDM):",[551],{"type":528},{},{"nodeType":496,"value":554,"marks":555,"data":556}," few people will give IT control of their own laptop, and contractors' devices are often managed by another employer already.",[],{},{"nodeType":542,"data":558,"content":559},{},[560],{"nodeType":492,"data":561,"content":562},{},[563,568],{"nodeType":496,"value":564,"marks":565,"data":567},"Mobile application management (MAM):",[566],{"type":528},{},{"nodeType":496,"value":569,"marks":570,"data":571}," only covers the apps that support it, such as Edge on Windows.",[],{},{"nodeType":542,"data":573,"content":574},{},[575],{"nodeType":492,"data":576,"content":577},{},[578,583],{"nodeType":496,"value":579,"marks":580,"data":582},"Virtual desktops (VDI):",[581],{"type":528},{},{"nodeType":496,"value":584,"marks":585,"data":586}," costly and slow for work in cloud apps, and a phishing page inside the session still works.",[],{},{"nodeType":542,"data":588,"content":589},{},[590],{"nodeType":492,"data":591,"content":592},{},[593,598],{"nodeType":496,"value":594,"marks":595,"data":597},"Local enclaves and device posture checks:",[596],{"type":528},{},{"nodeType":496,"value":599,"marks":600,"data":601}," both need an agent on someone else's device, and a \"healthy\" device posture isn't the same as threat protection.",[],{},{"nodeType":542,"data":603,"content":604},{},[605],{"nodeType":492,"data":606,"content":607},{},[608,613],{"nodeType":496,"value":609,"marks":610,"data":612},"Clientless access and proxies:",[611],{"type":528},{},{"nodeType":496,"value":614,"marks":615,"data":616}," only cover the apps routed through them, and isolation doesn't stop malware-free attacks like phishing.",[],{},{"nodeType":542,"data":618,"content":619},{},[620],{"nodeType":492,"data":621,"content":622},{},[623,628],{"nodeType":496,"value":624,"marks":625,"data":627},"Network access control:",[626],{"type":528},{},{"nodeType":496,"value":629,"marks":630,"data":631}," only applies when the device is on the office network.",[],{},{"nodeType":542,"data":633,"content":634},{},[635],{"nodeType":492,"data":636,"content":637},{},[638,643],{"nodeType":496,"value":639,"marks":640,"data":642},"Replacement enterprise browsers:",[641],{"type":528},{},{"nodeType":496,"value":644,"marks":645,"data":646}," users have to switch to a new browser and change how they work.",[],{},{"nodeType":492,"data":648,"content":649},{},[650,654,663,667,675],{"nodeType":496,"value":651,"marks":652,"data":653},"But an enterprise browser doesn't have to mean a new browser. ",[],{},{"nodeType":655,"data":656,"content":658},"hyperlink",{"uri":657},"https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fmarket\u002Fsecure-enterprise-browsers",[659],{"nodeType":496,"value":660,"marks":661,"data":662},"Gartner defines the category",[],{},{"nodeType":496,"value":664,"marks":665,"data":666}," as delivered through a centrally managed browser extension, with a full custom browser as optional, and an ",[],{},{"nodeType":655,"data":668,"content":670},{"uri":669},"https:\u002F\u002Fpushsecurity.com\u002Fblog\u002Franking-the-best-enterprise-browsers",[671],{"nodeType":496,"value":672,"marks":673,"data":674},"enterprise browser extension",[],{},{"nodeType":496,"value":676,"marks":677,"data":678}," secures the session in the browsers people already use, without changing how they work. ",[],{},{"nodeType":517,"data":680,"content":681},{},[],{"nodeType":521,"data":683,"content":684},{},[685],{"nodeType":496,"value":686,"marks":687,"data":689},"Quick picks",[688],{"type":528},{},{"nodeType":691,"data":692,"content":693},"table",{},[694,738,782,825,867,910,953,996,1039,1082,1125],{"nodeType":695,"data":696,"content":697},"table-row",{},[698,709,718,728],{"nodeType":699,"data":700,"content":701},"table-header-cell",{},[702],{"nodeType":492,"data":703,"content":704},{},[705],{"nodeType":496,"value":706,"marks":707,"data":708},"#",[],{},{"nodeType":699,"data":710,"content":711},{},[712],{"nodeType":492,"data":713,"content":714},{},[715],{"nodeType":496,"value":266,"marks":716,"data":717},[],{},{"nodeType":699,"data":719,"content":720},{},[721],{"nodeType":492,"data":722,"content":723},{},[724],{"nodeType":496,"value":725,"marks":726,"data":727},"Approach",[],{},{"nodeType":699,"data":729,"content":730},{},[731],{"nodeType":492,"data":732,"content":733},{},[734],{"nodeType":496,"value":735,"marks":736,"data":737},"Best for",[],{},{"nodeType":695,"data":739,"content":740},{},[741,752,762,772],{"nodeType":742,"data":743,"content":744},"table-cell",{},[745],{"nodeType":492,"data":746,"content":747},{},[748],{"nodeType":496,"value":749,"marks":750,"data":751},"1",[],{},{"nodeType":742,"data":753,"content":754},{},[755],{"nodeType":492,"data":756,"content":757},{},[758],{"nodeType":496,"value":759,"marks":760,"data":761},"Push Security",[],{},{"nodeType":742,"data":763,"content":764},{},[765],{"nodeType":492,"data":766,"content":767},{},[768],{"nodeType":496,"value":769,"marks":770,"data":771},"Enterprise browser extension",[],{},{"nodeType":742,"data":773,"content":774},{},[775],{"nodeType":492,"data":776,"content":777},{},[778],{"nodeType":496,"value":779,"marks":780,"data":781},"Best overall",[],{},{"nodeType":695,"data":783,"content":784},{},[785,795,805,815],{"nodeType":742,"data":786,"content":787},{},[788],{"nodeType":492,"data":789,"content":790},{},[791],{"nodeType":496,"value":792,"marks":793,"data":794},"2",[],{},{"nodeType":742,"data":796,"content":797},{},[798],{"nodeType":492,"data":799,"content":800},{},[801],{"nodeType":496,"value":802,"marks":803,"data":804},"Island",[],{},{"nodeType":742,"data":806,"content":807},{},[808],{"nodeType":492,"data":809,"content":810},{},[811],{"nodeType":496,"value":812,"marks":813,"data":814},"Replacement enterprise browser",[],{},{"nodeType":742,"data":816,"content":817},{},[818],{"nodeType":492,"data":819,"content":820},{},[821],{"nodeType":496,"value":822,"marks":823,"data":824},"Tightly restricted contractor workspaces",[],{},{"nodeType":695,"data":826,"content":827},{},[828,838,848,857],{"nodeType":742,"data":829,"content":830},{},[831],{"nodeType":492,"data":832,"content":833},{},[834],{"nodeType":496,"value":835,"marks":836,"data":837},"3",[],{},{"nodeType":742,"data":839,"content":840},{},[841],{"nodeType":492,"data":842,"content":843},{},[844],{"nodeType":496,"value":845,"marks":846,"data":847},"Prisma Browser",[],{},{"nodeType":742,"data":849,"content":850},{},[851],{"nodeType":492,"data":852,"content":853},{},[854],{"nodeType":496,"value":812,"marks":855,"data":856},[],{},{"nodeType":742,"data":858,"content":859},{},[860],{"nodeType":492,"data":861,"content":862},{},[863],{"nodeType":496,"value":864,"marks":865,"data":866},"Palo Alto Networks customers",[],{},{"nodeType":695,"data":868,"content":869},{},[870,880,890,900],{"nodeType":742,"data":871,"content":872},{},[873],{"nodeType":492,"data":874,"content":875},{},[876],{"nodeType":496,"value":877,"marks":878,"data":879},"4",[],{},{"nodeType":742,"data":881,"content":882},{},[883],{"nodeType":492,"data":884,"content":885},{},[886],{"nodeType":496,"value":887,"marks":888,"data":889},"Chrome Enterprise Premium",[],{},{"nodeType":742,"data":891,"content":892},{},[893],{"nodeType":492,"data":894,"content":895},{},[896],{"nodeType":496,"value":897,"marks":898,"data":899},"Managed browser profile",[],{},{"nodeType":742,"data":901,"content":902},{},[903],{"nodeType":492,"data":904,"content":905},{},[906],{"nodeType":496,"value":907,"marks":908,"data":909},"Chrome-standard organizations and Chromebooks",[],{},{"nodeType":695,"data":911,"content":912},{},[913,923,933,943],{"nodeType":742,"data":914,"content":915},{},[916],{"nodeType":492,"data":917,"content":918},{},[919],{"nodeType":496,"value":920,"marks":921,"data":922},"5",[],{},{"nodeType":742,"data":924,"content":925},{},[926],{"nodeType":492,"data":927,"content":928},{},[929],{"nodeType":496,"value":930,"marks":931,"data":932},"Venn",[],{},{"nodeType":742,"data":934,"content":935},{},[936],{"nodeType":492,"data":937,"content":938},{},[939],{"nodeType":496,"value":940,"marks":941,"data":942},"Local secure enclave",[],{},{"nodeType":742,"data":944,"content":945},{},[946],{"nodeType":492,"data":947,"content":948},{},[949],{"nodeType":496,"value":950,"marks":951,"data":952},"Desktop apps on personal laptops",[],{},{"nodeType":695,"data":954,"content":955},{},[956,966,976,986],{"nodeType":742,"data":957,"content":958},{},[959],{"nodeType":492,"data":960,"content":961},{},[962],{"nodeType":496,"value":963,"marks":964,"data":965},"6",[],{},{"nodeType":742,"data":967,"content":968},{},[969],{"nodeType":492,"data":970,"content":971},{},[972],{"nodeType":496,"value":973,"marks":974,"data":975},"Microsoft Intune and Entra Conditional Access",[],{},{"nodeType":742,"data":977,"content":978},{},[979],{"nodeType":492,"data":980,"content":981},{},[982],{"nodeType":496,"value":983,"marks":984,"data":985},"MDM, MAM and session controls",[],{},{"nodeType":742,"data":987,"content":988},{},[989],{"nodeType":492,"data":990,"content":991},{},[992],{"nodeType":496,"value":993,"marks":994,"data":995},"Microsoft 365 organizations",[],{},{"nodeType":695,"data":997,"content":998},{},[999,1009,1019,1029],{"nodeType":742,"data":1000,"content":1001},{},[1002],{"nodeType":492,"data":1003,"content":1004},{},[1005],{"nodeType":496,"value":1006,"marks":1007,"data":1008},"7",[],{},{"nodeType":742,"data":1010,"content":1011},{},[1012],{"nodeType":492,"data":1013,"content":1014},{},[1015],{"nodeType":496,"value":1016,"marks":1017,"data":1018},"Zscaler",[],{},{"nodeType":742,"data":1020,"content":1021},{},[1022],{"nodeType":492,"data":1023,"content":1024},{},[1025],{"nodeType":496,"value":1026,"marks":1027,"data":1028},"Clientless access and browser isolation",[],{},{"nodeType":742,"data":1030,"content":1031},{},[1032],{"nodeType":492,"data":1033,"content":1034},{},[1035],{"nodeType":496,"value":1036,"marks":1037,"data":1038},"Existing Zscaler customers",[],{},{"nodeType":695,"data":1040,"content":1041},{},[1042,1052,1062,1072],{"nodeType":742,"data":1043,"content":1044},{},[1045],{"nodeType":492,"data":1046,"content":1047},{},[1048],{"nodeType":496,"value":1049,"marks":1050,"data":1051},"8",[],{},{"nodeType":742,"data":1053,"content":1054},{},[1055],{"nodeType":492,"data":1056,"content":1057},{},[1058],{"nodeType":496,"value":1059,"marks":1060,"data":1061},"Citrix DaaS",[],{},{"nodeType":742,"data":1063,"content":1064},{},[1065],{"nodeType":492,"data":1066,"content":1067},{},[1068],{"nodeType":496,"value":1069,"marks":1070,"data":1071},"Virtual desktops",[],{},{"nodeType":742,"data":1073,"content":1074},{},[1075],{"nodeType":492,"data":1076,"content":1077},{},[1078],{"nodeType":496,"value":1079,"marks":1080,"data":1081},"Thick-client and legacy apps",[],{},{"nodeType":695,"data":1083,"content":1084},{},[1085,1095,1105,1115],{"nodeType":742,"data":1086,"content":1087},{},[1088],{"nodeType":492,"data":1089,"content":1090},{},[1091],{"nodeType":496,"value":1092,"marks":1093,"data":1094},"9",[],{},{"nodeType":742,"data":1096,"content":1097},{},[1098],{"nodeType":492,"data":1099,"content":1100},{},[1101],{"nodeType":496,"value":1102,"marks":1103,"data":1104},"1Password Device Trust",[],{},{"nodeType":742,"data":1106,"content":1107},{},[1108],{"nodeType":492,"data":1109,"content":1110},{},[1111],{"nodeType":496,"value":1112,"marks":1113,"data":1114},"Device posture checks",[],{},{"nodeType":742,"data":1116,"content":1117},{},[1118],{"nodeType":492,"data":1119,"content":1120},{},[1121],{"nodeType":496,"value":1122,"marks":1123,"data":1124},"Keeping unknown devices out",[],{},{"nodeType":695,"data":1126,"content":1127},{},[1128,1138,1148,1158],{"nodeType":742,"data":1129,"content":1130},{},[1131],{"nodeType":492,"data":1132,"content":1133},{},[1134],{"nodeType":496,"value":1135,"marks":1136,"data":1137},"10",[],{},{"nodeType":742,"data":1139,"content":1140},{},[1141],{"nodeType":492,"data":1142,"content":1143},{},[1144],{"nodeType":496,"value":1145,"marks":1146,"data":1147},"Cisco ISE",[],{},{"nodeType":742,"data":1149,"content":1150},{},[1151],{"nodeType":492,"data":1152,"content":1153},{},[1154],{"nodeType":496,"value":1155,"marks":1156,"data":1157},"Network access control",[],{},{"nodeType":742,"data":1159,"content":1160},{},[1161],{"nodeType":492,"data":1162,"content":1163},{},[1164],{"nodeType":496,"value":1165,"marks":1166,"data":1167},"Personal devices in the office",[],{},{"nodeType":517,"data":1169,"content":1170},{},[],{"nodeType":521,"data":1172,"content":1173},{},[1174],{"nodeType":496,"value":1175,"marks":1176,"data":1178},"The 10 best BYOD and unmanaged device security solutions in 2026",[1177],{"type":528},{},{"nodeType":1180,"data":1181,"content":1182},"heading-2",{},[1183],{"nodeType":496,"value":1184,"marks":1185,"data":1187},"1. Push Security – Enterprise browser extension",[1186],{"type":528},{},{"nodeType":492,"data":1189,"content":1190},{},[1191],{"nodeType":496,"value":1192,"marks":1193,"data":1195},"Best for: protecting users and data on any unmanaged device, without changing browsers or enrolling the laptop.",[1194],{"type":528},{},{"nodeType":492,"data":1197,"content":1198},{},[1199,1203,1211,1215,1223,1227,1235,1239,1243],{"nodeType":496,"value":1200,"marks":1201,"data":1202},"Push is a browser extension that users on personal and contractor machines self-enroll without MDM, bringing ",[],{},{"nodeType":655,"data":1204,"content":1206},{"uri":1205},"https:\u002F\u002Fpushsecurity.com\u002Fsolution\u002Fachieve-security-outcomes\u002Fsecure-bring-your-own-device",[1207],{"nodeType":496,"value":1208,"marks":1209,"data":1210},"BYOD browser security",[],{},{"nodeType":496,"value":1212,"marks":1213,"data":1214}," to devices you don't manage. It runs in ",[],{},{"nodeType":655,"data":1216,"content":1218},{"uri":1217},"https:\u002F\u002Fpushsecurity.com\u002Fhelp\u002Fwhat-browsers-does-push-support",[1219],{"nodeType":496,"value":1220,"marks":1221,"data":1222},"Chrome, Edge, Firefox, Safari, Brave, Opera and Arc",[],{},{"nodeType":496,"value":1224,"marks":1225,"data":1226},", inside Island and Prisma Browser, and on ",[],{},{"nodeType":655,"data":1228,"content":1230},{"uri":1229},"https:\u002F\u002Fpushsecurity.com\u002Fsolution\u002Fachieve-security-outcomes\u002Fsecure-chromebooks",[1231],{"nodeType":496,"value":1232,"marks":1233,"data":1234},"Chromebooks",[],{},{"nodeType":496,"value":1236,"marks":1237,"data":1238},". Installed in a work profile, it governs work activity and leaves personal browsing",[],{},{"nodeType":496,"value":1240,"marks":1241,"data":1242},"\u002Fprofiles ",[],{},{"nodeType":496,"value":1244,"marks":1245,"data":1246},"out of scope.",[],{},{"nodeType":492,"data":1248,"content":1249},{},[1250,1254,1262,1266,1274],{"nodeType":496,"value":1251,"marks":1252,"data":1253},"Push keeps BYOD users safe from threats as they work online, detecting attacks like adversary-in-the-middle (AiTM) ",[],{},{"nodeType":655,"data":1255,"content":1257},{"uri":1256},"https:\u002F\u002Fpushsecurity.com\u002Fblog\u002Franking-the-best-anti-phishing-tools-and-software",[1258],{"nodeType":496,"value":1259,"marks":1260,"data":1261},"phishing",[],{},{"nodeType":496,"value":1263,"marks":1264,"data":1265},", device code phishing, ClickFix and stolen sessions through real-time behavioral threat detection and blocking. It also checks logins against compromised credentials, blocks personal accounts on work apps, inventories browser extensions and blocks malicious or unapproved ones, and controls uploads, downloads, clipboard activity and AI tool use. A Push-protected browser can be made a condition of access in your identity provider. ",[],{},{"nodeType":655,"data":1267,"content":1269},{"uri":1268},"https:\u002F\u002Fpushsecurity.com\u002Fpricing",[1270],{"nodeType":496,"value":1271,"marks":1272,"data":1273},"Pricing is published",[],{},{"nodeType":496,"value":1275,"marks":1276,"data":1277}," at $5 per user per month, with volume discounts for larger organizations.",[],{},{"nodeType":492,"data":1279,"content":1280},{},[1281,1286],{"nodeType":496,"value":1282,"marks":1283,"data":1285},"On a personal device:",[1284],{"type":528},{},{"nodeType":496,"value":1287,"marks":1288,"data":1289}," Users add the Push extension to the browser they already use. Nothing else is installed, and removing the extension removes the controls.",[],{},{"nodeType":492,"data":1291,"content":1292},{},[1293,1298],{"nodeType":496,"value":1294,"marks":1295,"data":1297},"Trade-offs:",[1296],{"type":528},{},{"nodeType":496,"value":1299,"marks":1300,"data":1301}," Push secures the browser, not the device. It doesn't check device posture, control private or desktop app access, or block screenshots.",[],{},{"nodeType":517,"data":1303,"content":1304},{},[],{"nodeType":1180,"data":1306,"content":1307},{},[1308],{"nodeType":496,"value":1309,"marks":1310,"data":1312},"2. Island – Replacement enterprise browser",[1311],{"type":528},{},{"nodeType":492,"data":1314,"content":1315},{},[1316],{"nodeType":496,"value":1317,"marks":1318,"data":1320},"Best for: locking down contractor workspaces with last-mile data controls.",[1319],{"type":528},{},{"nodeType":492,"data":1322,"content":1323},{},[1324,1328,1336],{"nodeType":496,"value":1325,"marks":1326,"data":1327},"Contractors and employees ",[],{},{"nodeType":655,"data":1329,"content":1331},{"uri":1330},"https:\u002F\u002Fwww.island.io\u002Fsolutions\u002Fbyod-workforce",[1332],{"nodeType":496,"value":1333,"marks":1334,"data":1335},"install the Island browser",[],{},{"nodeType":496,"value":1337,"marks":1338,"data":1339}," on their own device with \"no agents, MDM software, or device imaging required,\" and the identity provider makes corporate apps reachable only through it. Island has the broadest workspace controls in the category, including screenshot blocking, watermarking, redaction and private app access.",[],{},{"nodeType":492,"data":1341,"content":1342},{},[1343,1347],{"nodeType":496,"value":1282,"marks":1344,"data":1346},[1345],{"type":528},{},{"nodeType":496,"value":1348,"marks":1349,"data":1350}," Users install a whole new browser and have to do all their work in it.",[],{},{"nodeType":492,"data":1352,"content":1353},{},[1354,1358,1362,1370,1374,1382,1386,1394,1398,1405],{"nodeType":496,"value":1294,"marks":1355,"data":1357},[1356],{"type":528},{},{"nodeType":496,"value":1359,"marks":1360,"data":1361}," Island's ",[],{},{"nodeType":655,"data":1363,"content":1365},{"uri":1364},"https:\u002F\u002Fwww.island.io\u002Feducation\u002Fbrowser-extension-security-defending-against-credential-phishing",[1366],{"nodeType":496,"value":1367,"marks":1368,"data":1369},"phishing guidance",[],{},{"nodeType":496,"value":1371,"marks":1372,"data":1373}," leans on URL and domain policy plus isolation, which catches known bad sites but not new phishing pages that don't have a bad reputation yet. It's also one of the most expensive options here: its ",[],{},{"nodeType":655,"data":1375,"content":1377},{"uri":1376},"https:\u002F\u002Faws.amazon.com\u002Fmarketplace\u002Fpp\u002Fprodview-ii2id2xdlepzm",[1378],{"nodeType":496,"value":1379,"marks":1380,"data":1381},"AWS Marketplace listing",[],{},{"nodeType":496,"value":1383,"marks":1384,"data":1385}," starts at $250,000 a year, with ",[],{},{"nodeType":655,"data":1387,"content":1389},{"uri":1388},"https:\u002F\u002Fassets.applytosupply.digitalmarketplace.service.gov.uk\u002Fg-cloud-15\u002Fdocuments\u002F584424\u002F234060975999414-pricing-document-2026-01-22-1130.pdf",[1390],{"nodeType":496,"value":1391,"marks":1392,"data":1393},"per-user licensing on top",[],{},{"nodeType":496,"value":1395,"marks":1396,"data":1397},", which puts a 500-person company at around $350,000 a year at list price, against $30,000 for Push. See our ",[],{},{"nodeType":655,"data":1399,"content":1400},{"uri":669},[1401],{"nodeType":496,"value":1402,"marks":1403,"data":1404},"enterprise browser comparison",[],{},{"nodeType":496,"value":1406,"marks":1407,"data":1408},".",[],{},{"nodeType":517,"data":1410,"content":1411},{},[],{"nodeType":1180,"data":1413,"content":1414},{},[1415],{"nodeType":496,"value":1416,"marks":1417,"data":1419},"3. Prisma Browser – Replacement enterprise browser",[1418],{"type":528},{},{"nodeType":492,"data":1421,"content":1422},{},[1423],{"nodeType":496,"value":1424,"marks":1425,"data":1427},"Best for: Palo Alto Networks customers who want one policy engine from network to browser.",[1426],{"type":528},{},{"nodeType":492,"data":1429,"content":1430},{},[1431,1434,1441],{"nodeType":496,"value":41,"marks":1432,"data":1433},[],{},{"nodeType":655,"data":1435,"content":1437},{"uri":1436},"https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Fprisma-browser",[1438],{"nodeType":496,"value":845,"marks":1439,"data":1440},[],{},{"nodeType":496,"value":1442,"marks":1443,"data":1444}," brings Palo Alto's WildFire sandboxing, phishing page scanning and data loss prevention (DLP) with more than 1,000 classifiers into the browser, managed alongside Prisma Access.",[],{},{"nodeType":492,"data":1446,"content":1447},{},[1448,1452],{"nodeType":496,"value":1282,"marks":1449,"data":1451},[1450],{"type":528},{},{"nodeType":496,"value":1453,"marks":1454,"data":1455}," Users install Prisma Browser from an email link, without admin rights, and have to do their work in it. Palo Alto says its lighter extension is \"not recommended for unmanaged devices.\"",[],{},{"nodeType":492,"data":1457,"content":1458},{},[1459,1463,1467,1475],{"nodeType":496,"value":1294,"marks":1460,"data":1462},[1461],{"type":528},{},{"nodeType":496,"value":1464,"marks":1465,"data":1466}," Even if you ",[],{},{"nodeType":655,"data":1468,"content":1470},{"uri":1469},"https:\u002F\u002Fdocs.paloaltonetworks.com\u002Fprisma-browser\u002Factivation-and-onboarding\u002Factivate-standalone-prisma-browser-license",[1471],{"nodeType":496,"value":1472,"marks":1473,"data":1474},"buy it on its own",[],{},{"nodeType":496,"value":1476,"marks":1477,"data":1478},", it has to be managed from Palo Alto's Strata Cloud Manager console and send its logs to Palo Alto's logging service, so it makes most sense if you already use Palo Alto's platform.",[],{},{"nodeType":517,"data":1480,"content":1481},{},[],{"nodeType":1180,"data":1483,"content":1484},{},[1485],{"nodeType":496,"value":1486,"marks":1487,"data":1489},"4. Chrome Enterprise Premium – Managed browser profile",[1488],{"type":528},{},{"nodeType":492,"data":1491,"content":1492},{},[1493],{"nodeType":496,"value":1494,"marks":1495,"data":1497},"Best for: Chrome-standard organizations and Chromebook fleets.",[1496],{"type":528},{},{"nodeType":492,"data":1499,"content":1500},{},[1501,1505,1512,1516,1524],{"nodeType":496,"value":1502,"marks":1503,"data":1504},"At $6 per user per month, ",[],{},{"nodeType":655,"data":1506,"content":1508},{"uri":1507},"https:\u002F\u002Fchromeenterprise.google\u002Fproducts\u002Fchrome-enterprise-premium\u002F",[1509],{"nodeType":496,"value":887,"marks":1510,"data":1511},[],{},{"nodeType":496,"value":1513,"marks":1514,"data":1515}," applies copy and paste restrictions, screenshot blocking and context-aware access inside a ",[],{},{"nodeType":655,"data":1517,"content":1519},{"uri":1518},"https:\u002F\u002Fcloud.google.com\u002Fblog\u002Fproducts\u002Fchrome-enterprise\u002Fchrome-enterprise-improves-work-and-personal-profile-separation-and-brings-more-advanced-protections-for-unmanaged-devices",[1520],{"nodeType":496,"value":1521,"marks":1522,"data":1523},"managed work profile",[],{},{"nodeType":496,"value":1525,"marks":1526,"data":1527}," on a personal device.",[],{},{"nodeType":492,"data":1529,"content":1530},{},[1531,1535],{"nodeType":496,"value":1282,"marks":1532,"data":1534},[1533],{"type":528},{},{"nodeType":496,"value":1536,"marks":1537,"data":1538}," Nothing extra to install, but users have to sign in to a managed Chrome work profile and do their work in Chrome.",[],{},{"nodeType":492,"data":1540,"content":1541},{},[1542,1546],{"nodeType":496,"value":1294,"marks":1543,"data":1545},[1544],{"type":528},{},{"nodeType":496,"value":1547,"marks":1548,"data":1549}," It only covers Chrome's work profile, so the same app opened in another browser or a personal profile is outside its controls. Threat protection is built on Google Safe Browsing, which checks URLs against lists of known dangerous sites, and isn't deep enough to keep users safe from anything beyond basic threats. Push runs inside Chrome, so the two can work together, with Push adding deeper threat protection and visibility into apps and identity access.",[],{},{"nodeType":517,"data":1551,"content":1552},{},[],{"nodeType":1180,"data":1554,"content":1555},{},[1556],{"nodeType":496,"value":1557,"marks":1558,"data":1560},"5. Venn – Local secure enclave",[1559],{"type":528},{},{"nodeType":492,"data":1562,"content":1563},{},[1564],{"nodeType":496,"value":1565,"marks":1566,"data":1568},"Best for: BYOD users who need installed desktop apps as well as cloud apps.",[1567],{"type":528},{},{"nodeType":492,"data":1570,"content":1571},{},[1572,1576,1584,1588,1596],{"nodeType":496,"value":1573,"marks":1574,"data":1575},"Venn's agent creates an ",[],{},{"nodeType":655,"data":1577,"content":1579},{"uri":1578},"https:\u002F\u002Fwww.venn.com\u002Fblog\u002Fwhat-is-blue-border-how-venns-secure-enclave-works\u002F",[1580],{"nodeType":496,"value":1581,"marks":1582,"data":1583},"encrypted work enclave",[],{},{"nodeType":496,"value":1585,"marks":1586,"data":1587}," on a personal PC or Mac, where work apps run locally with DLP controls and remote wipe. It covers desktop apps like Office and Zoom, which browser tools don't, and Gartner lists it as a ",[],{},{"nodeType":655,"data":1589,"content":1591},{"uri":1590},"https:\u002F\u002Fwww.businesswire.com\u002Fnews\u002Fhome\u002F20260715238603\u002Fen\u002F",[1592],{"nodeType":496,"value":1593,"marks":1594,"data":1595},"sample vendor for Unmanaged Device Access",[],{},{"nodeType":496,"value":1406,"marks":1597,"data":1598},[],{},{"nodeType":492,"data":1600,"content":1601},{},[1602,1606],{"nodeType":496,"value":1282,"marks":1603,"data":1605},[1604],{"type":528},{},{"nodeType":496,"value":1607,"marks":1608,"data":1609}," Users install Venn's agent, which adds an encrypted virtual disk and routes work traffic through Venn's gateway. It's lighter than MDM, but it's still privileged software on someone else's computer, and it runs only on Windows and macOS.",[],{},{"nodeType":492,"data":1611,"content":1612},{},[1613,1617],{"nodeType":496,"value":1294,"marks":1614,"data":1616},[1615],{"type":528},{},{"nodeType":496,"value":1618,"marks":1619,"data":1620}," The enclave is built to stop data leaving, not to stop attacks coming in. A browser inside it is still an ordinary browser, so users are as exposed to threats online there as anywhere else.",[],{},{"nodeType":517,"data":1622,"content":1623},{},[],{"nodeType":1180,"data":1625,"content":1626},{},[1627],{"nodeType":496,"value":1628,"marks":1629,"data":1631},"6. Microsoft Intune and Entra Conditional Access – MDM, MAM and session controls",[1630],{"type":528},{},{"nodeType":492,"data":1633,"content":1634},{},[1635],{"nodeType":496,"value":1636,"marks":1637,"data":1639},"Best for: Microsoft 365 organizations.",[1638],{"type":528},{},{"nodeType":492,"data":1641,"content":1642},{},[1643,1647,1655,1659,1667,1671,1679],{"nodeType":496,"value":1644,"marks":1645,"data":1646},"Microsoft offers three options: enroll the device in Intune MDM, apply ",[],{},{"nodeType":655,"data":1648,"content":1650},{"uri":1649},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fintune\u002Fapp-management\u002Fprotection\u002Fenable-mam-windows",[1651],{"nodeType":496,"value":1652,"marks":1653,"data":1654},"app protection policies to Edge",[],{},{"nodeType":496,"value":1656,"marks":1657,"data":1658}," on personal Windows devices, or route sessions through ",[],{},{"nodeType":655,"data":1660,"content":1662},{"uri":1661},"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdefender-cloud-apps\u002Fproxy-intro-aad",[1663],{"nodeType":496,"value":1664,"marks":1665,"data":1666},"Defender for Cloud Apps",[],{},{"nodeType":496,"value":1668,"marks":1669,"data":1670}," to block downloads from single sign-on (SSO) apps. Intune Plan 1 is included in Microsoft 365 E3 and E5, or ",[],{},{"nodeType":655,"data":1672,"content":1674},{"uri":1673},"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fmicrosoft-intune-pricing",[1675],{"nodeType":496,"value":1676,"marks":1677,"data":1678},"$8 per user per month",[],{},{"nodeType":496,"value":1406,"marks":1680,"data":1681},[],{},{"nodeType":492,"data":1683,"content":1684},{},[1685,1689],{"nodeType":496,"value":1282,"marks":1686,"data":1688},[1687],{"type":528},{},{"nodeType":496,"value":1690,"marks":1691,"data":1692}," It depends on the option. MDM enrolls the whole device and lets IT wipe it, which is the hardest thing on this list to get employees to accept. MAM only needs users to sign in to Edge with their work account, and Defender for Cloud Apps needs nothing at all.",[],{},{"nodeType":492,"data":1694,"content":1695},{},[1696,1700],{"nodeType":496,"value":1294,"marks":1697,"data":1699},[1698],{"type":528},{},{"nodeType":496,"value":1701,"marks":1702,"data":1703}," Because employees push back on MDM, most organizations end up using MAM or the proxy for BYOD. That means giving up \"require compliant device,\" one of the strongest Conditional Access controls, because only enrolled devices can pass it. MAM works by blocking other browsers from Microsoft 365, which forces people into Edge, and it only covers apps that sign in through Microsoft Entra. The proxy only covers apps that sign in through your identity provider, so unsanctioned apps are outside it.",[],{},{"nodeType":517,"data":1705,"content":1706},{},[],{"nodeType":1180,"data":1708,"content":1709},{},[1710],{"nodeType":496,"value":1711,"marks":1712,"data":1714},"7. Zscaler – Clientless access and browser isolation",[1713],{"type":528},{},{"nodeType":492,"data":1716,"content":1717},{},[1718],{"nodeType":496,"value":1719,"marks":1720,"data":1722},"Best for: Zscaler customers giving contractors and partners app access.",[1721],{"type":528},{},{"nodeType":492,"data":1724,"content":1725},{},[1726,1730,1738],{"nodeType":496,"value":1727,"marks":1728,"data":1729},"Zscaler gives third parties ",[],{},{"nodeType":655,"data":1731,"content":1733},{"uri":1732},"https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fbyod-with-ztna",[1734],{"nodeType":496,"value":1735,"marks":1736,"data":1737},"\"agentless access… from the browser they already use,\"",[],{},{"nodeType":496,"value":1739,"marks":1740,"data":1741}," with isolation controls over uploads, downloads, printing and copy and paste.",[],{},{"nodeType":492,"data":1743,"content":1744},{},[1745,1749],{"nodeType":496,"value":1282,"marks":1746,"data":1748},[1747],{"type":528},{},{"nodeType":496,"value":1750,"marks":1751,"data":1752}," Nothing to install. Users reach apps through their normal browser via Zscaler's cloud.",[],{},{"nodeType":492,"data":1754,"content":1755},{},[1756,1760,1764,1772,1776,1784],{"nodeType":496,"value":1294,"marks":1757,"data":1759},[1758],{"type":528},{},{"nodeType":496,"value":1761,"marks":1762,"data":1763}," It only covers the apps you route through Zscaler, so unsanctioned apps, personal accounts and the rest of the web are outside it. Isolation keeps malicious code off the laptop, but does little against attacks that trick the user into handing over access (see ",[],{},{"nodeType":655,"data":1765,"content":1767},{"uri":1766},"https:\u002F\u002Fpushsecurity.com\u002Fsolution\u002Ftool-replacements\u002Fremote-browser-isolation",[1768],{"nodeType":496,"value":1769,"marks":1770,"data":1771},"Push vs. remote browser isolation",[],{},{"nodeType":496,"value":1773,"marks":1774,"data":1775},"). Private app access, isolation and data protection for unmanaged devices are each licensed separately, so it can also get ",[],{},{"nodeType":655,"data":1777,"content":1779},{"uri":1778},"https:\u002F\u002Fassets.applytosupply.digitalmarketplace.service.gov.uk\u002Fg-cloud-14\u002Fdocuments\u002F92354\u002F740976076733726-pricing-document-2025-03-21-1420.pdf",[1780],{"nodeType":496,"value":1781,"marks":1782,"data":1783},"expensive",[],{},{"nodeType":496,"value":1406,"marks":1785,"data":1786},[],{},{"nodeType":517,"data":1788,"content":1789},{},[],{"nodeType":1180,"data":1791,"content":1792},{},[1793],{"nodeType":496,"value":1794,"marks":1795,"data":1797},"8. Citrix DaaS – Virtual desktops",[1796],{"type":528},{},{"nodeType":492,"data":1799,"content":1800},{},[1801],{"nodeType":496,"value":1802,"marks":1803,"data":1805},"Best for: thick-client and legacy apps that can't run on the device.",[1804],{"type":528},{},{"nodeType":492,"data":1807,"content":1808},{},[1809,1812,1819],{"nodeType":496,"value":41,"marks":1810,"data":1811},[],{},{"nodeType":655,"data":1813,"content":1815},{"uri":1814},"https:\u002F\u002Fdocs.citrix.com\u002Fen-us\u002Fcitrix-daas\u002Foverview.html",[1816],{"nodeType":496,"value":1059,"marks":1817,"data":1818},[],{},{"nodeType":496,"value":1820,"marks":1821,"data":1822}," (desktop as a service) streams apps and desktops so corporate data never reaches the personal device. Windows 365, Azure Virtual Desktop and Amazon WorkSpaces work the same way.",[],{},{"nodeType":492,"data":1824,"content":1825},{},[1826,1830],{"nodeType":496,"value":1282,"marks":1827,"data":1829},[1828],{"type":528},{},{"nodeType":496,"value":1831,"marks":1832,"data":1833}," Users install the Citrix Workspace app or connect through a browser, then work inside a remote desktop. The install is easy; getting people to work in a slower virtual desktop is the hard part.",[],{},{"nodeType":492,"data":1835,"content":1836},{},[1837,1841],{"nodeType":496,"value":1294,"marks":1838,"data":1840},[1839],{"type":528},{},{"nodeType":496,"value":1842,"marks":1843,"data":1844}," It's a complex, costly way to secure work that happens mostly in cloud apps, and users notice the latency. It also protects the data more than the user: a phishing page opened in the virtual desktop's browser still harvests credentials.",[],{},{"nodeType":517,"data":1846,"content":1847},{},[],{"nodeType":1180,"data":1849,"content":1850},{},[1851],{"nodeType":496,"value":1852,"marks":1853,"data":1855},"9. 1Password Device Trust – Device posture checks",[1854],{"type":528},{},{"nodeType":492,"data":1857,"content":1858},{},[1859],{"nodeType":496,"value":1860,"marks":1861,"data":1863},"Best for: keeping unknown devices out of SSO apps and nudging users to fix basic hygiene.",[1862],{"type":528},{},{"nodeType":492,"data":1865,"content":1866},{},[1867,1870,1877,1881,1889],{"nodeType":496,"value":41,"marks":1868,"data":1869},[],{},{"nodeType":655,"data":1871,"content":1873},{"uri":1872},"https:\u002F\u002F1password.com\u002Fproduct\u002Fdevice-trust",[1874],{"nodeType":496,"value":1102,"marks":1875,"data":1876},[],{},{"nodeType":496,"value":1878,"marks":1879,"data":1880},", formerly Kolide, blocks SSO sign-in from devices that don't have its agent or that fail its ",[],{},{"nodeType":655,"data":1882,"content":1884},{"uri":1883},"https:\u002F\u002Fsupport.1password.com\u002Fdevice-trust-checks-overview\u002F",[1885],{"nodeType":496,"value":1886,"marks":1887,"data":1888},"checks",[],{},{"nodeType":496,"value":1890,"marks":1891,"data":1892},", such as missing operating system patches or a firewall that's switched off. That stops attackers signing in with stolen passwords from their own machines, and users are walked through fixing failed checks themselves.",[],{},{"nodeType":492,"data":1894,"content":1895},{},[1896,1900],{"nodeType":496,"value":1282,"marks":1897,"data":1899},[1898],{"type":528},{},{"nodeType":496,"value":1901,"marks":1902,"data":1903}," Users install the Device Trust agent on Windows, macOS or Linux. It's a smaller ask than MDM, but it's still monitoring software on a personal computer, and anyone who won't install it is locked out.",[],{},{"nodeType":492,"data":1905,"content":1906},{},[1907,1911],{"nodeType":496,"value":1294,"marks":1908,"data":1910},[1909],{"type":528},{},{"nodeType":496,"value":1912,"marks":1913,"data":1914}," \"Healthy\" means well configured, not protected from threats. The checks look at settings, not at what's happening in the browser, so a phishing page on a fully patched laptop gets through, and because it isn't EDR, it won't detect malware like an infostealer either. For BYOD, it's mainly a way to control which devices can sign in, and a compliance tool.",[],{},{"nodeType":517,"data":1916,"content":1917},{},[],{"nodeType":1180,"data":1919,"content":1920},{},[1921],{"nodeType":496,"value":1922,"marks":1923,"data":1925},"10. Cisco ISE – Network access control",[1924],{"type":528},{},{"nodeType":492,"data":1927,"content":1928},{},[1929],{"nodeType":496,"value":1930,"marks":1931,"data":1933},"Best for: personal devices on the corporate network.",[1932],{"type":528},{},{"nodeType":492,"data":1935,"content":1936},{},[1937,1940,1947],{"nodeType":496,"value":41,"marks":1938,"data":1939},[],{},{"nodeType":655,"data":1941,"content":1943},{"uri":1942},"https:\u002F\u002Fwww.cisco.com\u002Fc\u002Fen\u002Fus\u002Fsupport\u002Fdocs\u002Fsecurity\u002Fidentity-services-engine\u002F216535-configure-single-ssid-wireless-byod-on-w.html",[1944],{"nodeType":496,"value":1145,"marks":1945,"data":1946},[],{},{"nodeType":496,"value":1948,"marks":1949,"data":1950}," (Identity Services Engine) onboards personal devices to the office network with a certificate and controls what they can reach, which makes it a good fit for protecting on-premises apps and file shares.",[],{},{"nodeType":492,"data":1952,"content":1953},{},[1954,1958],{"nodeType":496,"value":1282,"marks":1955,"data":1957},[1956],{"type":528},{},{"nodeType":496,"value":1959,"marks":1960,"data":1961}," Users run Cisco's setup assistant to install a certificate and network profile.",[],{},{"nodeType":492,"data":1963,"content":1964},{},[1965,1969],{"nodeType":496,"value":1294,"marks":1966,"data":1968},[1967],{"type":528},{},{"nodeType":496,"value":1970,"marks":1971,"data":1972}," Network access control works at the network edge, but cloud apps don't sit behind it: they decide who gets in through the identity provider, not the network. A laptop at home or a contractor's office reaches cloud apps directly and never passes through ISE.",[],{},{"nodeType":517,"data":1974,"content":1975},{},[],{"nodeType":1180,"data":1977,"content":1978},{},[1979],{"nodeType":496,"value":1980,"marks":1981,"data":1983},"Learn more about Push Security",[1982],{"type":528},{},{"nodeType":492,"data":1985,"content":1986},{},[1987],{"nodeType":496,"value":1988,"marks":1989,"data":1990},"Push Security is the most powerful AI-native security tool in the browser. Think EDR, but for the browser — high-fidelity telemetry and real-time control across every session, on every device, with no browser migration required.",[],{},{"nodeType":492,"data":1992,"content":1993},{},[1994],{"nodeType":496,"value":1995,"marks":1996,"data":1997},"Security teams use Push to detect and stop advanced browser-based attacks like AiTM phishing, ClickFix, and session hijacking; gain visibility and control over AI tool usage across their workforce; harden identities by surfacing credential reuse, SSO gaps, and shadow IT; and support data loss and insider investigations with browser-layer telemetry that other tools can't see.",[],{},{"nodeType":492,"data":1999,"content":2000},{},[2001,2004,2012],{"nodeType":496,"value":41,"marks":2002,"data":2003},[],{},{"nodeType":655,"data":2005,"content":2007},{"uri":2006},"https:\u002F\u002Fpushsecurity.com\u002Fdemo",[2008],{"nodeType":496,"value":2009,"marks":2010,"data":2011},"Book a live demo",[],{},{"nodeType":496,"value":2013,"marks":2014,"data":2015}," to learn more.",[],{},{"entries":2017},{"hyperlink":2018,"inline":2019,"block":2020},[],[],[2021],{"sys":2022,"__typename":2023,"content":2024,"name":2059,"title":33},{"id":505},"InsightTextBlockComponent",{"json":2025},{"nodeType":488,"data":2026,"content":2027},{},[2028],{"nodeType":492,"data":2029,"content":2030},{},[2031,2035,2043,2047,2055],{"nodeType":496,"value":2032,"marks":2033,"data":2034},"Unmanaged devices are also where a lot of breaches start. In the 2025 Verizon Data Breach Investigations Report (DBIR), ",[],{},{"nodeType":655,"data":2036,"content":2038},{"uri":2037},"https:\u002F\u002Fspycloud.com\u002Fblog\u002Fverizon-2025-data-breach-report-insights",[2039],{"nodeType":496,"value":2040,"marks":2041,"data":2042},"46% of systems with corporate logins in infostealer logs",[],{},{"nodeType":496,"value":2044,"marks":2045,"data":2046}," were non-managed devices. Browser sync is often how that turns into a corporate compromise: when someone is signed in to the same browser profile on their work and personal devices, their saved work passwords sync to both, and ",[],{},{"nodeType":655,"data":2048,"content":2050},{"uri":2049},"https:\u002F\u002Fpushsecurity.com\u002Fblog\u002Fbrowser-sync-attacks-where-personal-account-hacks-lead-to-corporate-breaches\u002F",[2051],{"nodeType":496,"value":2052,"marks":2053,"data":2054},"an infostealer on either device",[],{},{"nodeType":496,"value":2056,"marks":2057,"data":2058}," hands access to an attacker. (It helps the attacker if they can circumvent EDR by getting in through a personal device not running enterprise security software.)",[],{},"BYOD listicle IB1","json",{"items":2062},[2063,2076,2089,2102,2115,2128,2141],{"answer":2064,"question":2075},{"json":2065},{"nodeType":488,"data":2066,"content":2067},{},[2068],{"nodeType":492,"data":2069,"content":2070},{},[2071],{"nodeType":496,"value":2072,"marks":2073,"data":2074},"BYOD security, also called bring your own device security or BYOD cyber security, protects corporate data and accounts when people work on devices the organization doesn't own or manage. Since most of that work happens in web and cloud apps, browser security is the best way to cover it: it keeps users safe online, where most modern attacks happen, and controls where corporate data goes, without taking over the device.",[],{},"What is BYOD security?",{"answer":2077,"question":2088},{"json":2078},{"nodeType":488,"data":2079,"content":2080},{},[2081],{"nodeType":492,"data":2082,"content":2083},{},[2084],{"nodeType":496,"value":2085,"marks":2086,"data":2087},"The best security tools for unmanaged devices are the ones that don't depend on managing the device, because endpoint tools and MDM need control you usually don't have on a personal or contractor laptop. Push covers the browser people already use on any unmanaged device, keeping them safe online, controlling which browser extensions they run and controlling where corporate data goes.",[],{},"What are the best security tools for unmanaged devices?",{"answer":2090,"question":2101},{"json":2091},{"nodeType":488,"data":2092,"content":2093},{},[2094],{"nodeType":492,"data":2095,"content":2096},{},[2097],{"nodeType":496,"value":2098,"marks":2099,"data":2100},"Secure the browser that users work in instead of the device. An enterprise browser extension like Push protects work in web and cloud apps without enrolling the device, and you can require a Push-protected browser in your identity provider so unprotected browsers can't reach corporate apps. If some users still need installed desktop apps, a local enclave or virtual desktop also avoids MDM.",[],{},"How do I secure BYOD devices without MDM?",{"answer":2103,"question":2114},{"json":2104},{"nodeType":488,"data":2105,"content":2106},{},[2107],{"nodeType":492,"data":2108,"content":2109},{},[2110],{"nodeType":496,"value":2111,"marks":2112,"data":2113},"Usually not. Endpoint detection and response (EDR) and endpoint DLP need to be installed and managed on the device, which employees and contractors rarely allow on hardware they own. That's why BYOD endpoint security has shifted to the browser, where work happens, business apps are accessed, and most of the risk on a personal laptop sits.",[],{},"Can I use endpoint security on BYOD devices?",{"answer":2116,"question":2127},{"json":2117},{"nodeType":488,"data":2118,"content":2119},{},[2120],{"nodeType":492,"data":2121,"content":2122},{},[2123],{"nodeType":496,"value":2124,"marks":2125,"data":2126},"Require a protected browser in your identity provider, then secure the session itself. Push lets contractors self-enroll the browser they already use without MDM, keeps them safe from threats online, blocks personal accounts on work apps and malicious browser extensions, and controls uploads and downloads. When the contract ends, remove the extension, with no device wipe.",[],{},"How do I secure contractor and BYOD devices accessing corporate apps?",{"answer":2129,"question":2140},{"json":2130},{"nodeType":488,"data":2131,"content":2132},{},[2133],{"nodeType":492,"data":2134,"content":2135},{},[2136],{"nodeType":496,"value":2137,"marks":2138,"data":2139},"Island and Prisma Browser install as separate browsers, Chrome Enterprise Premium only covers Chrome, and Intune MAM only covers Edge on Windows. Push deploys in the browser people already use, including Chrome, Edge, Firefox, and Safari, without MDM or a browser switch.",[],{},"What browser security tools work on unmanaged devices?",{"answer":2142,"question":2153},{"json":2143},{"nodeType":488,"data":2144,"content":2145},{},[2146],{"nodeType":492,"data":2147,"content":2148},{},[2149],{"nodeType":496,"value":2150,"marks":2151,"data":2152},"The core risk is that corporate accounts and data are accessed from a device the organization can't see or control, which may be unpatched, shared or already infected. Infostealers harvest saved passwords and session cookies from personal devices, including work passwords that reached the device through a browser profile shared with a work laptop. Users on personal devices are also more likely to use personal accounts and skip SSO.",[],{},"What are the security risks of BYOD?","Frequently asked questions",{},"The 10 best BYOD security solutions in 2026","guide","2026-10-15T00:00:00.000Z",{"items":2160},[2161,2174,2187],{"__typename":2162,"sys":2163,"title":2165,"synopsis":2166,"publishedDate":2158,"slug":2167,"authorsCollection":2168},"BlogPosts",{"id":2164},"3PPFetCkqq5e7TaFGiq2Tq","DLP solution guide: How to choose the tool that meets your use case","Legacy DLP is slow to deploy and noisy to run. Here are the best browser DLP tools in 2026, matched to your use case, from AI data leakage to strict compliance.","best-browser-dlp-tools-guide",{"items":2169},[2170],{"firstName":2171,"profilePicture":2172},"Kelly",{"url":2173},"https:\u002F\u002Fimages.ctfassets.net\u002Fy1cdw1ablpvd\u002F1hi8bEuVfn5sF57LivAq6d\u002F9a3b82426c697d765e2e450e33a18424\u002Fkelly_profile_pic.jpeg",{"__typename":2162,"sys":2175,"title":2177,"synopsis":2178,"publishedDate":2179,"slug":2180,"authorsCollection":2181},{"id":2176},"3B4b71hhvX8XDFpjcmXaGD","The 10 best shadow IT tools in 2026: Push, Microsoft, Zscaler, and more","Ranking the top 10 shadow IT tools in 2026: How each one discovers apps, what it shows you about them, and where it falls short.","2026-10-14T00:00:00.000Z","best-shadow-it-tools",{"items":2182},[2183],{"firstName":2184,"profilePicture":2185},"Peyton",{"url":2186},"https:\u002F\u002Fimages.ctfassets.net\u002Fy1cdw1ablpvd\u002F1GU01HXElmc07nwi89qP3b\u002F3188050420106c62e9df2ed4e4893b7f\u002F1677005177901__1_.jpeg",{"__typename":2162,"sys":2188,"title":2190,"synopsis":2191,"publishedDate":2192,"slug":2193,"authorsCollection":2194},{"id":2189},"ThcZepauVfA5fKossdkbm","The top 10 browser security solutions: Push Security, Island, LayerX and more","Browser security means a lot of different things depending on who's talking. Here's your guide to the browser security market from a vendor perspective in 2026.","2026-07-27T00:00:00.000Z","the-top-10-browser-security-solutions-in-2026",{"items":2195},[2196],{"firstName":480,"profilePicture":2197},{"url":485},"ranking-the-best-byod-security-solutions","blog\u002Franking-the-best-byod-security-solutions",{"json":2201},{"data":2202,"content":2203,"nodeType":488},{},[2204],{"data":2205,"content":2206,"nodeType":492},{},[2207],{"data":2208,"marks":2209,"value":2210,"nodeType":496},{},[],"How to secure personal, contractor and other unmanaged devices in 2026: What each BYOD security solution asks of the device owner, and where it falls short.",{"id":2212,"publishedAt":2213},"4Ay1U5MWX0FdTYkMkR1Q1a","2026-10-15T10:55:04.330Z",{"items":2215},[2216],{"sys":2217,"name":2219},{"id":2218},"3pjES4THCIfSAwhGdNwBcy","Browser security",{"items":2221},[2222,2226,2231,2236,2241,2246,2251,2256,2261,2266,2271,2276,2281,2284,2289],{"sys":2223,"name":2219,"slug":2225,"tier":29},{"id":2224},"topic-browser-security","browser-security",{"sys":2227,"name":2229,"slug":2230,"tier":45},{"id":2228},"topic-browser-extensions","Browser extensions","browser-extensions",{"sys":2232,"name":2234,"slug":2235,"tier":45},{"id":2233},"topic-enterprise-browser","Enterprise browser","enterprise-browser",{"sys":2237,"name":2239,"slug":2240,"tier":45},{"id":2238},"topic-ai-governance","AI governance","ai-governance",{"sys":2242,"name":2244,"slug":2245,"tier":45},{"id":2243},"topic-dlp","DLP","dlp",{"sys":2247,"name":2249,"slug":2250,"tier":29},{"id":2248},"topic-identity-security","Identity security","identity-security",{"sys":2252,"name":2254,"slug":2255,"tier":29},{"id":2253},"topic-detection-and-response","Detection & response","detection-and-response",{"sys":2257,"name":2259,"slug":2260,"tier":45},{"id":2258},"topic-casb","CASB","casb",{"sys":2262,"name":2264,"slug":2265,"tier":45},{"id":2263},"topic-swg","SWG","swg",{"sys":2267,"name":2269,"slug":2270,"tier":45},{"id":2268},"topic-edr","EDR","edr",{"sys":2272,"name":2274,"slug":2275,"tier":45},{"id":2273},"topic-third-party-risk","Third-party risk","third-party-risk",{"sys":2277,"name":2279,"slug":2280,"tier":45},{"id":2278},"topic-mfa","MFA","mfa",{"sys":2282,"name":126,"slug":1259,"tier":29},{"id":2283},"topic-phishing",{"sys":2285,"name":2287,"slug":2288,"tier":29},{"id":2286},"topic-saas-security","SaaS security","saas-security",{"sys":2290,"name":2292,"slug":2293,"tier":29},{"id":2291},"topic-browser-attacks","Browser attacks","browser-attacks","Xa2P2pIf63zBquRTEcxrOydcRMfgBv6CEaV8Xh0pHRo",{"id":2296,"extension":2060,"items":2297,"meta":2669,"stem":2670,"__hash__":2671},"blogTopics\u002Fblogtopics.json",[2298,2307,2315,2321,2330,2339,2345,2351,2357,2363,2372,2381,2389,2395,2404,2412,2418,2424,2429,2437,2446,2452,2461,2470,2479,2487,2493,2502,2511,2520,2529,2538,2547,2553,2561,2569,2575,2584,2593,2601,2609,2617,2625,2634,2642,2647,2652,2661],{"sys":2299,"faqItemsCollection":2301,"name":2303,"slug":2304,"tier":29,"intro":2305,"faqTitle":33,"postCount":2306,"hasPage":60},{"id":2300},"topic-ai",{"items":2302},[],"AI","ai","AI is reshaping both sides of the security equation: employees adopt AI tools faster than security teams can track them, while attackers use AI to scale and automate campaigns. Shadow AI adoption may now outpace wider shadow SaaS, and attackers are already turning AI chatbot platforms into malware delivery channels. Push has researched the offensive potential of computer-using agents and now applies AI agents to its own threat hunting. This hub covers AI as risk, target, and defensive tool.",26,{"sys":2308,"faqItemsCollection":2310,"name":2312,"slug":2313,"tier":45,"intro":2314,"faqTitle":33,"postCount":2306,"hasPage":60},{"id":2309},"topic-ai-attacks",{"items":2311},[],"AI attacks","ai-attacks","AI attacks run in both directions: attackers using AI to scale phishing, malware delivery, and identity attacks, and AI platforms themselves becoming the attack surface. Push has researched how computer-using agents can automate identity attacks, and has seen the poisoned tenant technique it coined used against its own employees in the wild.",{"sys":2316,"faqItemsCollection":2317,"name":2239,"slug":2240,"tier":45,"intro":2319,"faqTitle":33,"postCount":2320,"hasPage":60},{"id":2238},{"items":2318},[],"AI governance is how organizations set and enforce rules for workplace AI use — which tools are allowed, what data can enter them, and how to evidence it to regulators. With US, EU, and UK AI regulations converging on obligations most organizations can’t yet meet, Push’s research makes the case that enforcement starts in the browser, where AI tools are actually used.",14,{"sys":2322,"faqItemsCollection":2324,"name":2326,"slug":2327,"tier":45,"intro":2328,"faqTitle":33,"postCount":2329,"hasPage":60},{"id":2323},"topic-aitm",{"items":2325},[],"AiTM phishing","aitm","Adversary-in-the-middle (AiTM) phishing proxies a real login page through an attacker-controlled site, capturing credentials, MFA codes, and session tokens in real time to bypass multi-factor authentication. Push’s research into kits like Evilginx and Sneaky2FA documents how they evade URL- and signature-based detection — and why analyzing toolkit behavior in the browser catches attacks that blocklists miss.",79,{"sys":2331,"faqItemsCollection":2333,"name":2335,"slug":2336,"tier":45,"intro":2337,"faqTitle":33,"postCount":2338,"hasPage":60},{"id":2332},"topic-bec",{"items":2334},[],"BEC","bec","Business email compromise (BEC) turns a hijacked mailbox into a fraud tool: attackers use mail rules, auto-forwarding, and payment redirection to steal money while staying invisible to the account owner. Alongside a first-hand case study of a BEC attack that nearly cost an engineering firm millions, Push breaks down these mailbox persistence tricks and how to detect them.",6,{"sys":2340,"faqItemsCollection":2341,"name":2292,"slug":2293,"tier":29,"intro":2343,"faqTitle":33,"postCount":2344,"hasPage":60},{"id":2291},{"items":2342},[],"Browser attacks target users through the web pages, sessions, and extensions they rely on every day — bypassing endpoint and network defenses that never see inside the browser. Techniques like AiTM phishing kits, ClickFix-style copy-paste attacks, OAuth consent abuse, malvertising, and browser sync abuse have become a leading path to account takeover. Push researchers analyze these attacks in the wild, from infiltrating criminal phishing panels to dissecting toolkits like ConsentFix and Sneaky2FA. Use this hub to track how the techniques evolve and how to defend against them.",127,{"sys":2346,"faqItemsCollection":2347,"name":2229,"slug":2230,"tier":45,"intro":2349,"faqTitle":33,"postCount":2350,"hasPage":60},{"id":2228},{"items":2348},[],"Browser extensions cut both ways for security teams: malicious or compromised extensions are a growing attack vector, while an extension is also the lightest-weight way to deploy security controls into the browsers employees already use. These posts cover both sides — extension-borne risks like browser sync attacks and the limits of risk scoring, and how Push uses its extension to detect threats and block risky extensions.",38,{"sys":2352,"faqItemsCollection":2353,"name":2219,"slug":2225,"tier":29,"intro":2355,"faqTitle":33,"postCount":2356,"hasPage":60},{"id":2224},{"items":2354},[],"Work now happens in the browser, making browser security — visibility and control at the point where users meet the web — a core layer of enterprise defense. Endpoint, network, and email tools miss attacks that unfold inside the browser session, from AiTM phishing to risky extensions and shadow SaaS. Push has published extensively on choosing between enterprise browsers and browser extensions, using browser telemetry, and making the business case for browser security. Start here for both strategy and hands-on guidance.",134,{"sys":2358,"faqItemsCollection":2359,"name":2259,"slug":2260,"tier":45,"intro":2361,"faqTitle":33,"postCount":2362,"hasPage":60},{"id":2258},{"items":2360},[],"Cloud access security brokers (CASBs) govern cloud app usage through API integrations and network proxies — an approach that works for sanctioned apps but struggles with the long tail of shadow SaaS employees adopt on their own. Because every SaaS signup happens in a browser, Push captures that adoption in real time at the point of login, and these posts cover what proxy-based discovery misses.",17,{"sys":2364,"faqItemsCollection":2366,"name":2368,"slug":2369,"tier":45,"intro":2370,"faqTitle":33,"postCount":2371,"hasPage":60},{"id":2365},"topic-clickfix",{"items":2367},[],"ClickFix","clickfix","ClickFix attacks trick users into copying and running malicious commands themselves — typically through fake CAPTCHA, error, or fix-it prompts — so malware executes without a download for security tools to scan. Push researchers track the technique’s evolution in the wild and identified the ConsentFix and InstallFix variants, which extend it to OAuth consent grants and fake install guides.",43,{"sys":2373,"faqItemsCollection":2375,"name":2377,"slug":2378,"tier":45,"intro":2379,"faqTitle":33,"postCount":2380,"hasPage":60},{"id":2374},"topic-credential-phishing",{"items":2376},[],"Credential phishing","credential-phishing","Credential phishing steals usernames and passwords through fake login pages impersonating the services employees use, handing attackers direct access to corporate accounts. Attackers don’t hack in — they log in. Push’s browser extension analyzes login pages as users actually see them, blocking cloned pages and stopping employees from entering company passwords on lookalike sites.",91,{"sys":2382,"faqItemsCollection":2384,"name":180,"slug":2386,"tier":45,"intro":2387,"faqTitle":33,"postCount":2388,"hasPage":60},{"id":2383},"topic-credential-stuffing",{"items":2385},[],"credential-stuffing","Credential stuffing is an attack where criminals replay username-password pairs stolen from one breach against other services, exploiting password reuse to take over accounts. Major breaches have shown how far a single set of stolen credentials can travel. Push detects verified stolen credentials by comparing employee passwords against breach datasets and dark-web threat intelligence, eliminating false positives.",64,{"sys":2390,"faqItemsCollection":2391,"name":2254,"slug":2255,"tier":29,"intro":2393,"faqTitle":33,"postCount":2394,"hasPage":60},{"id":2253},{"items":2392},[],"Detection and response is being reshaped as attacks move into the browser, where EDR, SIEM, and network tools have limited visibility. Modern phishing kits evade signature-based detection, and most malicious pages have never been seen before — so technique-level, in-browser detection matters more than known-bad indicators. Push’s work here spans high-fidelity browser telemetry, session token theft detection, and agentic threat hunting, plus practical IR guidance for compromised SaaS accounts and malicious OAuth apps. These posts cover both the philosophy and the workflows.",105,{"sys":2396,"faqItemsCollection":2398,"name":2400,"slug":2401,"tier":45,"intro":2402,"faqTitle":33,"postCount":2403,"hasPage":60},{"id":2397},"topic-detection-engineering",{"items":2399},[],"Detection engineering","detection-engineering","Detection engineering turns threat research into reliable, high-fidelity detections — and as AI accelerates the churn of attacker infrastructure, indicator-based detection is collapsing in favor of technique-level approaches. Here you’ll find teardowns of AiTM kits, ClickFix pages, and malvertising campaigns, alongside Push’s own account of building an agentic threat hunting pipeline that turns hunts into shipped detections.",44,{"sys":2405,"faqItemsCollection":2407,"name":141,"slug":2409,"tier":45,"intro":2410,"faqTitle":33,"postCount":2411,"hasPage":60},{"id":2406},"topic-device-code-phishing",{"items":2408},[],"device-code-phishing","Device code phishing abuses the OAuth device authorization flow: attackers generate a legitimate sign-in code, trick the victim into entering it on the vendor’s real login page, and walk away with access tokens — no fake site or password capture required. Push research tracked a sharp spike in adoption during 2026 as attackers use the technique to sidestep standard access controls.",24,{"sys":2413,"faqItemsCollection":2414,"name":2244,"slug":2245,"tier":45,"intro":2416,"faqTitle":33,"postCount":2417,"hasPage":60},{"id":2243},{"items":2415},[],"Data loss prevention (DLP) is the practice of stopping sensitive data from leaving your control — a problem that has shifted from email and endpoints to the browser, where employees move data into SaaS and AI tools. Push applies controls at that point of use, from keeping corporate credentials out of personal password managers to governing what flows into unsanctioned apps.",22,{"sys":2419,"faqItemsCollection":2420,"name":2269,"slug":2270,"tier":45,"intro":2422,"faqTitle":33,"postCount":2423,"hasPage":60},{"id":2268},{"items":2421},[],"Endpoint detection and response (EDR) watches processes, files, and memory on the device — a vantage point that never sees the phishing pages, stolen sessions, and identity attacks playing out inside the browser. That’s not an EDR failure; attackers have simply moved where it can’t follow. These posts map that gap and show how Push pairs browser-level detection and response with endpoint security to close it.",30,{"sys":2425,"faqItemsCollection":2426,"name":2234,"slug":2235,"tier":45,"intro":2428,"faqTitle":33,"postCount":2320,"hasPage":60},{"id":2233},{"items":2427},[],"An enterprise browser is a standalone, security-hardened browser that organizations deploy in place of Chrome, Edge, or other defaults. The real buying question is whether replacing the browser beats securing the browsers employees already use — a trade-off these posts examine directly, alongside analysis of Omdia’s secure enterprise browser market report and Push’s framework for weighing full browsers against extension-based deployment.",{"sys":2430,"faqItemsCollection":2432,"name":170,"slug":2434,"tier":45,"intro":2435,"faqTitle":33,"postCount":2436,"hasPage":60},{"id":2431},"topic-ghost-logins",{"items":2433},[],"ghost-logins","Ghost logins are overlooked authentication routes into an account — like a password login lingering behind SSO, or a forgotten secondary auth method — that attackers exploit for account takeover and persistence. Push coined the term after research showing how these forgotten login paths let attackers sidestep the MFA and SSO controls guarding an account’s primary sign-in method.",49,{"sys":2438,"faqItemsCollection":2440,"name":2442,"slug":2443,"tier":45,"intro":2444,"faqTitle":33,"postCount":2445,"hasPage":60},{"id":2439},"topic-identity-attacks",{"items":2441},[],"Identity attacks","identity-attacks","Identity attacks target user accounts rather than infrastructure — phishing credentials, stealing sessions, abusing OAuth grants — because logging in is easier than hacking in. Identity-based techniques are now the leading cause of breaches. Push’s offensive research maps these techniques continuously, coining attacks like SAMLjacking and the poisoned tenant before they appeared in the wild.",61,{"sys":2447,"faqItemsCollection":2448,"name":2249,"slug":2250,"tier":29,"intro":2450,"faqTitle":33,"postCount":2451,"hasPage":60},{"id":2248},{"items":2449},[],"Identity security is the practice of protecting workforce accounts, credentials, and sessions — the primary route attackers now use to breach organizations. Instead of hacking in, attackers log in: through phished credentials, stolen session tokens, MFA bypass, and forgotten ghost logins. Push’s research team documents these techniques continuously, from cross-IdP impersonation and SAMLjacking to analyses of major identity-driven breaches. This hub collects that research alongside practical guidance on MFA, SSO, and stopping account takeover.",155,{"sys":2453,"faqItemsCollection":2455,"name":2457,"slug":2458,"tier":45,"intro":2459,"faqTitle":33,"postCount":2460,"hasPage":60},{"id":2454},"topic-infostealer",{"items":2456},[],"Infostealer","infostealer","Infostealers are malware built to harvest saved passwords, cookies, and session tokens from infected devices, supplying the stolen credentials behind some of the most consequential breaches of recent years. Push traces the ecosystem trading this data and checks employee passwords against threat intel feeds, flagging verified stolen credentials before attackers can log in with them.",56,{"sys":2462,"faqItemsCollection":2464,"name":2466,"slug":2467,"tier":45,"intro":2468,"faqTitle":33,"postCount":2469,"hasPage":60},{"id":2463},"topic-legitimate-service-abuse",{"items":2465},[],"Legitimate service abuse","legitimate-service-abuse","Legitimate service abuse means staging attacks on trusted platforms — Google Ads, AI chatbot share pages, office.com links, Slack, SaaS tenants — so malicious content inherits the reputation of the service hosting it. Push research has documented the pattern repeatedly, from malvertising run through hijacked Google Ad Manager accounts to phishing links generated by Active Directory Federation Services.",29,{"sys":2471,"faqItemsCollection":2473,"name":2475,"slug":2476,"tier":45,"intro":2477,"faqTitle":33,"postCount":2478,"hasPage":60},{"id":2472},"topic-malvertising",{"items":2474},[],"Malvertising","malvertising","Malvertising uses paid search and display ads to put phishing pages and malware in front of users, often by impersonating trusted brands at the top of Google results. Push tracks these campaigns continuously — intercepting live attacks spoofing well-known brands — and has documented how criminals hijack Google Ads accounts to fund and run them.",34,{"sys":2480,"faqItemsCollection":2482,"name":2484,"slug":2485,"tier":45,"intro":2486,"faqTitle":33,"postCount":2362,"hasPage":60},{"id":2481},"topic-malware-delivery",{"items":2483},[],"Malware delivery","malware-delivery","Malware delivery has moved into the browser: rather than email attachments, attackers now rely on malvertising, fake install guides, and ClickFix-style copy-paste lures to get code running on endpoints. Push research on techniques like InstallFix maps the playbook, and in-browser detection of malicious copy and paste blocks these attacks before commands reach the endpoint.",{"sys":2488,"faqItemsCollection":2489,"name":2279,"slug":2280,"tier":45,"intro":2491,"faqTitle":33,"postCount":2492,"hasPage":60},{"id":2278},{"items":2490},[],"Multi-factor authentication (MFA) requires a second proof of identity beyond a password, and it remains one of the most effective controls against account takeover. Regulators from Cyber Essentials to NYDFS now mandate it across cloud services. Push enforces MFA in the browser on third-party apps — even those with no native enforcement option — and shows security teams where coverage gaps remain.",85,{"sys":2494,"faqItemsCollection":2496,"name":2498,"slug":2499,"tier":45,"intro":2500,"faqTitle":33,"postCount":2501,"hasPage":60},{"id":2495},"topic-mfa-bypass",{"items":2497},[],"MFA bypass","mfa-bypass","MFA bypass covers the techniques attackers use to defeat multi-factor authentication — AiTM phishing kits, consent phishing, device code phishing, and MFA downgrade attacks among them. None of these break the second factor; they route around it. Push researchers regularly get hands-on with phishing kits like Evilginx and Sneaky2FA, analyzing how these attacks work in the wild and how they evolve.",60,{"sys":2503,"faqItemsCollection":2505,"name":2507,"slug":2508,"tier":45,"intro":2509,"faqTitle":33,"postCount":2510,"hasPage":60},{"id":2504},"topic-non-email-phishing",{"items":2506},[],"Non-email phishing","non-email-phishing","Non-email phishing delivers malicious links through channels your secure email gateway never sees — social media messages, IM apps like Slack and Teams, search ads, and SMS. Push has intercepted live campaigns arriving via LinkedIn DMs, malvertising, and messaging platforms, which is why it detects phishing pages in the browser at the point of click, regardless of delivery channel.",54,{"sys":2512,"faqItemsCollection":2514,"name":2516,"slug":2517,"tier":45,"intro":2518,"faqTitle":33,"postCount":2519,"hasPage":60},{"id":2513},"topic-oauth-abuse",{"items":2515},[],"OAuth abuse","oauth-abuse","OAuth abuse is attackers exploiting app-to-app authorization — consent phishing, malicious OAuth apps, stolen tokens, and device code flows — to gain persistent access to cloud tenants without touching a password or MFA prompt. Push tracks these techniques continuously and discovered ConsentFix, a browser-native attack in the wild that pairs OAuth consent phishing with a ClickFix-style prompt.",70,{"sys":2521,"faqItemsCollection":2523,"name":2525,"slug":2526,"tier":45,"intro":2527,"faqTitle":33,"postCount":2528,"hasPage":60},{"id":2522},"topic-passkeys",{"items":2524},[],"Passkeys","passkeys","Passkeys are phishing-resistant credentials that replace passwords with cryptographic key pairs bound to a user’s device. They defeat conventional credential phishing, but attackers adapt: Push research has documented MFA downgrade, app-specific password phishing, and device code phishing being used in the wild to route around passkey-protected accounts. Deploying passkeys is step one; closing those fallback paths is step two.",23,{"sys":2530,"faqItemsCollection":2532,"name":2534,"slug":2535,"tier":45,"intro":2536,"faqTitle":33,"postCount":2537,"hasPage":60},{"id":2531},"topic-password-security",{"items":2533},[],"Password security","password-security","Password security is the practice of keeping workforce credentials strong, unique, and out of attackers’ hands — still a frontline defense while most SaaS logins depend on passwords. Expiration policies don’t fix weak or reused passwords; visibility does. Push observes real logins in the browser to flag weak, reused, and breached passwords and guide employees to reset them on any app.",81,{"sys":2539,"faqItemsCollection":2541,"name":2543,"slug":2544,"tier":45,"intro":2545,"faqTitle":33,"postCount":2546,"hasPage":60},{"id":2540},"topic-phaas",{"items":2542},[],"PhaaS","phaas","Phishing-as-a-service (PhaaS) platforms sell ready-made phishing kits, hosted infrastructure, and management panels on subscription, letting low-skill criminals run MFA-bypassing campaigns at scale. Kits like Evilginx, Tycoon2FA, Sneaky2FA, FlowerStorm, and EvilTokens each add their own evasion and session-theft capabilities, and new entrants appear regularly. Push researchers continuously get hands-on with these tools — investigating attacks in the wild, reverse-engineering kit behavior, and turning that research into detections.",41,{"sys":2548,"faqItemsCollection":2549,"name":126,"slug":1259,"tier":29,"intro":2551,"faqTitle":33,"postCount":2552,"hasPage":60},{"id":2283},{"items":2550},[],"Phishing remains the most common way attackers compromise business accounts — and it has moved far beyond suspicious emails. Modern campaigns use AiTM toolkits that bypass MFA, consent phishing against OAuth, device code phishing, and lures delivered through malvertising, LinkedIn, and Slack. Push detects and blocks these attacks in the browser, and its researchers publish teardowns of live campaigns and kits like Evilginx and Sneaky2FA. Read on for how phishing actually works today and what stops it.",96,{"sys":2554,"faqItemsCollection":2556,"name":2558,"slug":2559,"tier":45,"intro":2560,"faqTitle":33,"postCount":2423,"hasPage":60},{"id":2555},"topic-public-breach",{"items":2557},[],"Public breach","public-breach","Public breaches are the disclosed incidents that show how attacks actually unfold once the headlines fade. Push’s breach analyses keep finding identity at the entry point: stolen credentials, OAuth abuse, and missing MFA recur across the incidents analyzed here.",{"sys":2562,"faqItemsCollection":2564,"name":2566,"slug":2567,"tier":45,"intro":2568,"faqTitle":33,"postCount":2320,"hasPage":60},{"id":2563},"topic-ransomware",{"items":2565},[],"Ransomware","ransomware","Ransomware attacks increasingly begin with an identity, not an exploit: stolen credentials, MFA bypass, and help desk scams give operators their initial foothold. The analysis here follows that front end of the kill chain — how identity compromise leads to ransomware deployment, and the breaches driving regulators toward tighter MFA requirements.",{"sys":2570,"faqItemsCollection":2571,"name":2287,"slug":2288,"tier":29,"intro":2573,"faqTitle":33,"postCount":2574,"hasPage":60},{"id":2286},{"items":2572},[],"SaaS security means protecting the sprawl of cloud apps, accounts, and integrations your employees adopt — often without IT ever knowing. Shadow SaaS, risky OAuth grants, ghost logins, and unmanaged third-party access create attack paths traditional controls can’t see, as recent high-profile breaches have demonstrated. Building on the original SaaS attack matrix, Push continues to map SaaS-native attack techniques alongside practical guides for discovering and securing unsanctioned apps, and this hub gathers all of it.",99,{"sys":2576,"faqItemsCollection":2578,"name":2580,"slug":2581,"tier":45,"intro":2582,"faqTitle":33,"postCount":2583,"hasPage":60},{"id":2577},"topic-security-training",{"items":2579},[],"Security training","security-training","Security training aims to teach employees to recognize and avoid attacks — yet modern phishing routinely fools even seasoned security professionals. Push argues that training budgets work harder as real-time, in-browser intervention: guardrails and warnings at the moment of risk, rather than lessons employees must recall under pressure.",5,{"sys":2585,"faqItemsCollection":2587,"name":2589,"slug":2590,"tier":45,"intro":2591,"faqTitle":33,"postCount":2592,"hasPage":60},{"id":2586},"topic-seo-poisoning",{"items":2588},[],"SEO poisoning","seo-poisoning","SEO poisoning manipulates search engine results so malicious pages rank prominently for the software, tools, or services users are actively searching for, turning a routine search into an infection vector. It often pairs with malvertising and ClickFix-style payloads — Push has documented attackers abusing shared pages on legitimate AI chatbot domains to deliver malware from trusted infrastructure.",8,{"sys":2594,"faqItemsCollection":2596,"name":185,"slug":2598,"tier":45,"intro":2599,"faqTitle":33,"postCount":2600,"hasPage":60},{"id":2595},"topic-session-hijacking",{"items":2597},[],"session-hijacking","Session hijacking is the theft of an authenticated session — usually via stolen session cookies or tokens — letting attackers walk past passwords and MFA into a live account. AiTM phishing kits and infostealers have made it a mainstream attack technique across both criminal and targeted intrusions. Push’s browser agent detects session token theft by adding telemetry to the user agent string, creating a high-fidelity signal for security teams.",78,{"sys":2602,"faqItemsCollection":2604,"name":2606,"slug":2607,"tier":45,"intro":2608,"faqTitle":33,"postCount":2528,"hasPage":60},{"id":2603},"topic-shadow-ai",{"items":2605},[],"Shadow AI","shadow-ai","Shadow AI is employees’ unsanctioned use of AI tools at work, putting corporate data into chatbots and assistants that security teams never approved and can’t see. Push’s own browser telemetry shows AI adoption acting as a force multiplier for shadow IT — potentially now outscaling shadow SaaS — and this hub tracks that research, real-world breach examples, and practical controls.",{"sys":2610,"faqItemsCollection":2612,"name":2614,"slug":2615,"tier":45,"intro":2616,"faqTitle":33,"postCount":2600,"hasPage":60},{"id":2611},"topic-shadow-saas",{"items":2613},[],"Shadow SaaS","shadow-saas","Shadow SaaS is the cloud applications employees adopt for work without IT approval, each one creating unmanaged accounts, identities, and data outside your security controls. Push covers the problem end to end — from browser-based SaaS discovery to in-browser app banners and MFA enforcement — alongside breach analyses that show where unmanaged accounts lead.",{"sys":2618,"faqItemsCollection":2620,"name":2622,"slug":2623,"tier":45,"intro":2624,"faqTitle":33,"postCount":2417,"hasPage":60},{"id":2619},"topic-siem",{"items":2621},[],"SIEM","siem","A SIEM is only as good as the telemetry feeding it, and most log sources never see what happens inside the browser — where phishing, session token theft, and account takeover actually play out. Push streams browser-level detections and identity telemetry into SIEMs, and these posts show how that data improves detection fidelity and cuts alert fatigue.",{"sys":2626,"faqItemsCollection":2628,"name":2630,"slug":2631,"tier":45,"intro":2632,"faqTitle":33,"postCount":2633,"hasPage":60},{"id":2627},"topic-social-engineering",{"items":2629},[],"Social engineering","social-engineering","Social engineering is the manipulation of people — through phishing pages, help desk impersonation, vishing calls, and poisoned tenant invites — into handing over access that no exploit could take. Coverage here tracks how threat actors run these plays — drawing on Push’s ongoing investigation of live phishing infrastructure and criminal tooling.",65,{"sys":2635,"faqItemsCollection":2637,"name":2639,"slug":2640,"tier":29,"intro":2641,"faqTitle":33,"postCount":2583,"hasPage":60},{"id":2636},"topic-supply-chain-security",{"items":2638},[],"Supply chain security","supply-chain-security","Supply chain security extends beyond your own perimeter to the vendors, platforms, and browser extensions your organization depends on. A compromised third party can hand attackers legitimate access — as recent campaigns against SaaS providers have shown. Push’s research examines the browser-extension supply chain in particular: why extension risk scores fail to predict compromise, and how developers can harden extensions against takeover. These posts frame supply chain risk through a browser and identity lens.",{"sys":2643,"faqItemsCollection":2644,"name":2264,"slug":2265,"tier":45,"intro":2646,"faqTitle":33,"postCount":2528,"hasPage":60},{"id":2263},{"items":2645},[],"A secure web gateway (SWG) filters and inspects web traffic in transit, sitting in the network path between users and the internet. That position shows you the packet but not the session: Push’s research on AitM phishing kits documents how attackers break the signatures proxies rely on, and these posts explain why phishing detection is moving from the network path into the browser itself.",{"sys":2648,"faqItemsCollection":2649,"name":2274,"slug":2275,"tier":45,"intro":2651,"faqTitle":33,"postCount":2436,"hasPage":60},{"id":2273},{"items":2650},[],"Third-party risk is the exposure your organization inherits from vendors, SaaS providers, and integrations that hold your data or access your tenants — a chain now extended one employee sign-up at a time. This hub collects Push’s breach analyses and guides for assessing OAuth integrations, managing browser extensions, and responding when a supplier is compromised.",{"sys":2653,"faqItemsCollection":2655,"name":2657,"slug":2658,"tier":29,"intro":2659,"faqTitle":33,"postCount":2660,"hasPage":60},{"id":2654},"topic-threat-landscape",{"items":2656},[],"Threat landscape","threat-landscape","The enterprise threat landscape is now defined by identity attacks: criminals log in with phished, stolen, or stuffed credentials rather than breaking infrastructure. Threat actors keep proving how effective help desk scams, MFA bypass, and session theft are against well-defended organizations. Drawing on breach analyses, annual phishing trend reviews, and in-the-wild campaign tracking, Push documents how attacker TTPs are shifting. This hub is where to follow those changes.",52,{"sys":2662,"faqItemsCollection":2664,"name":2666,"slug":2667,"tier":45,"intro":2668,"faqTitle":33,"postCount":2362,"hasPage":60},{"id":2663},"topic-vishing",{"items":2665},[],"Vishing","vishing","Vishing — voice phishing — uses phone calls to impersonate IT support, help desks, or employees, talking targets into password resets, MFA approvals, or opening attacker-controlled pages. Threat actors now routinely pair calls with AiTM phishing to hijack SSO accounts, a chain Push has analyzed across campaigns targeting hundreds of organizations.",{},"blogtopics","FlZgYeXEa0xDXMebY7iy6sqnrugRE7y8RCkyV5idtRg",1792065723686]