About Menlo Security
Menlo Security sells an enterprise browser security solution that protects users where they work and secures applications from internet-borne attacks. The Menlo Browser Security Platform secures humans and AI agents, who get their jobs done in the browser. Menlo Security focuses on securing the browser, because most enterprise work takes place there. Menlo Security states that traditional browsers operate without necessary protections from cyberthreats, exposing users to attacks.[3][12][13]
The Menlo Secure Extension delivers Browser DLP and visibility for user interactions with trusted sites and web applications. High-risk browsing activity is automatically routed to the Menlo Cloud for cloud rendering and threat elimination. Menlo executes all web traffic and content in a hardened digital twin of the user's local browser in the cloud. The Menlo Browser Security Platform treats humans and AI agents as equal participants and applies tailored policies to the needs of each. Menlo is client-free and requires no software installation, so any browser or device, managed or unmanaged, can be used.[2][3][14]
Menlo AI Agent Security is part of the Menlo Browser Security Platform. Menlo acts as a secure bridge for applications with no or deficient APIs, connecting agents and AI workflows to the applications and data they need. Menlo extends AI Agent Security to the browser agent, applying security controls and prefiltering what the sidebar can see and access. Menlo Security states that sidebars have shifted from passive assistants to active agents that can read and transmit data across open tabs.[3]
Menlo SAA provides a unified launchpad for web, SaaS, remote desktops and servers, and legacy thick-client applications. The Menlo Cloud creates a protective barrier, ensuring no endpoint can directly access application servers. Menlo SAA provides secure access through a standard browser or extension, with no need to install, configure, or manage an endpoint agent or a thick client. Menlo SAA provides secure access to any application, including legacy apps delivered as secure browser tabs. Menlo SAA extends zero trust to the browser itself, turning it into the secure enforcement point. Menlo SAA enforces DLP controls such as copy/paste, watermarking, and data redaction.[15][16]
Menlo HEAT Shield AI uses machine learning and computer vision to detect and block highly evasive threats and zero-day phishing attacks. By executing web requests in the Menlo Cloud, Menlo performs AI-based runtime analysis of the entire page, including JavaScript, DOM elements, and URLs, at the point of click. Menlo File Security assumes all files are hostile, strips out active, executable content, and reconstructs the file.[14]
Browsing Forensics provides details of user behavior and can be triggered by criteria that the customer chooses. Menlo dashboards show overall web traffic, Highly Evasive Adaptive Threat (HEAT) attacks, bandwidth use, DLP, CASB-based activities, and Secure Application Access health and user behavior. Menlo Insights produces reports on the activities that a customer wants to report. Menlo Browser DLP prevents users from sharing sensitive data with GenAI tools by blocking risky uploads and text entries in real time. Menlo lets organizations define which GenAI tools are approved for business use and automatically block or isolate all others.[17][18]
Menlo Browser SSE covers the SWG, CASB, and ZTNA security services found in SASE and SSE. Menlo Browser SSE is designed from the ground up to secure internal web apps, SaaS usage, and the web activities of users. Synapxe, Singapore's National Healthtech Agency, onboarded users to the Menlo environment. Menlo can assist organizations with implementing cybersecurity guided by the NIST CSF. The Menlo Secure Cloud Browser isolates web traffic, protecting users and agencies from web-borne threats.[3][11][12][13][15][18][19]
Menlo Security on the record