Push vs. Island

The short version: different products, different problems. Island is a full-stack enterprise browser built for IT teams — VDI replacement, contractor access governance, BYOD controls, device posture enforcement, and application access management. Push is a browser-native security platform built for security teams, focused on detecting the attacks that play out inside the browser: AiTM phishing, ClickFix, session hijacking, credential theft, and extension supply chain compromises. The two are complementary and deployed together in several customer environments.

Not at the technique level. Island can flag some phishing activity — typically after a redirect has already occurred — using policy-based and reputation-driven detection. Push detects AiTM phishing behaviorally, based on how the page is constructed: the toolkit fingerprint, DOM structure, and credential-harvesting mechanics. The distinction matters because phishing domains are active for fewer than two days on average, so detection built on domain reputation can't keep pace with infrastructure that rotates faster than any blocklist updates.

No. Push deploys as a browser extension and works across any Chromium-based browser — Chrome, Edge, Brave, Arc — as well as Firefox and Safari. No migration, no parallel browser ecosystem, no IT lift. Push can also be deployed into Island for organizations running both.

Yes — for Chrome, Edge, Safari, Firefox, and other Chromium-based browsers. Island states the extension supports "most of the capabilities" of the full browser, with gaps where parity isn't possible due to browser extension restrictions. The full Island browser remains the primary product for the deepest workspace controls — and every Island product (SSE, AI governance, endpoint agent) requires the Island browser for full functionality.

The difference is allowlisting versus monitoring. Island controls which extensions are permitted via an allowlist, but once an extension clears that list, there's no further visibility into what it does. Push monitors for the events that actually precede extension-based breaches: ownership transfers, permission escalations in updates, developer account changes, and store delistings. The extensions behind Cyberhaven, DarkSpectre, and Trust Wallet were all on approved allowlists when they were compromised. Allowlisting describes an extension's status today. Push detects when that status changes.

At $40–65 per user per month, Island's pricing means most organizations deploy it to a subset of users rather than the full workforce. Push's pricing is lower, which is what makes full-workforce deployment practical from day one. View Push pricing here.