SURF Security Zero Trust Enterprise Browser

What it does

SURF Security Zero Trust Enterprise Browser is a Secure Enterprise Browser (SEB) delivered as a full Chromium-based desktop browser plus a companion extension that brings the same controls to Chrome, Edge, and other consumer browsers. It moves enforcement into the browser itself, applying zero trust access policies, data loss prevention, and generative AI usage controls directly on the endpoint, with no proxy, virtual desktop infrastructure, or traffic backhaul, to secure work on managed, unmanaged, and bring-your-own-device (BYOD) hardware.

How it works

An on-device policy engine enforces per-application rules for copy, paste, and printing, masks personally identifiable information, and encrypts, watermarks, and malware-scans downloaded files. Device posture checks covering antivirus, disk encryption, OS version, and certificates gate access, and transactional multifactor authentication can be required on any webpage. Okta users and groups sync automatically for identity-based policy assignment, deployment is pushed through mobile device management (MDM), and events feed SIEM platforms. The Shadow AI module discovers generative AI tools in use, risk-scores each by logins, file actions, and usage volume, and masks or blocks sensitive data in prompts with exportable audit logs.

Credentials and traction

SOC 2 Type II attested since January 2023, audited by Prescient Assurance with an unqualified opinion. Security teams at Ericsson, Vodafone, Tanium, and PIB Group use the platform, and the company has participated in the Tech Nation and Grow.London growth programmes. The product targets enterprises securing browser-based work for employees, third-party contractors, and unmanaged devices, serving security, IT, compliance, and data protection teams.