Safe Browsing
Enterprise safe browsing helps mitigate two classes of threat:
- Compromise of organizations’ endpoints via browser exploitation and web-based attacks
- Compromise of organizations’ users and their identities thru the browser from phishing or session cookie and token theft
A safe browser for enterprise requires protection that goes beyond the consumer-grade anti-malware and anti-phishing features, which rely on signatures and categorization lists that only provide protection against well-known malicious files and URLs.
Enterprise safe browsing capabilities
Seraphic Security provides advanced protection for users and endpoints that most organizations lack.
Bridging the patch gap
The period between the discovery of a vulnerability and the time when affected systems are fully patched is known as the patch gap. During this period, browsers are at risk of exploitation.
Unlike consumer safe browsing features, Seraphic’s enterprise solution stops zero day and unpatched N-day exploits with a unique Prevention Engine that:
- Is injected directly into the browser runtime, providing protection that other web security tools cannot
- Implements a form of Moving Target Defense (MTD) similar to Address Space Layout Randomization (ASLR) that disrupts exploits without the use of any detection techniques
- Immunizes the browser against memory corruption vulnerabilities that are targeted by the first exploit in the exploit chain
Protecting credentials
Phishing is one of the primary techniques adversaries use to gain unauthorized access to enterprise resources. Browsers play a pivotal role in phishing attacks since their success depends on users supplying their credentials to malicious sites. Browsers also store important authentication material such as session cookies and tokens that may be stolen if an adversary successfully compromises a browser.
Seraphic is the only solution that protects against 0-hour/ “golden hour” phishing attacks with a unique Detection Engine that:
- Measures and evaluates 200+ runtime parameters to identify malicious sites in real time, without site classification or threat feeds
- Detects and blocks UI redressing attacks such as Browser-in-the-Browser (BitB) and clickjacking that are commonly used on phishing sites
- Is not susceptible to evasion techniques (such as Captcha) that circumvent automated phishing protection tools
Seraphic also guards authentication material used or stored in the browser by:
- Encrypting session cookies and tokens to prevent theft and user impersonation
- Blocking password re-use between different sites or accounts
- Alerting organizations if their users’ credentials have been exposed in a data breach
Stopping web-based attacks
Web-based attacks are popular because it can be very difficult for conventional security tools to distinguish between benign and malicious behavior.
Seraphic Security performs real-time, local analysis within the browser on code being rendered or executed, as well as session information. These capabilities create robust defenses against:
- Adversary-in-the-Middle (AitM) attacks that can compromise sensitive data
- Attacks used for malware delivery, such as Cross-Site Scripting (XSS), drive-by downloads, and HTML smuggling
- Network scanning (via the browser) that aids attackers in identification of additional targets
- Cryptojacking that consumes compute resources and provides financial resources to threat actors
Enforcing Acceptable Use Policies (AUPs)
Another characteristic of an enterprise safe browser is the ability to enforce an AUP and block content that the organization deems unacceptable, rather than just sites that a browser vendor has identified as malicious.
Seraphic Security provides content filtering directly in the browser without the need for proxies or client-side traffic steering.
Logging
Seraphic Security can send its unique telemetry to any log aggregation system such as Security Information and Event Management (SIEM) or Extended Detection and Response (XDR) platforms.
Using Seraphic Security for enterprise safe browsing
Seraphic Security is an ideal choice for those who:
- Need safe browsers for the enterprise to protect its hybrid workforce
- Want to avoid major infrastructure and software deployments or modifications
- Are seeking an alternative to browser isolation solutions
Seraphic Security and protects employees and managed devices regardless of whether they are on-premises or remote. Because it works directly in the browser, there is no need for the costly and complex infrastructure that is required by traditional web security solutions. Because it transforms any browser into an enterprise browser, there is no need to force employees to migrate to a new and unfamiliar dedicated browser.
