Most security tools bolt onto the browser from the outside - agents watching it, proxies filtering it, extensions patching it. Island asked a different question: what if the browser itself were built for the enterprise? Founded in 2020 by former Symantec president Mike Fey and Fireglass founder Dan Amiga, Island created the "enterprise browser" category: a Chromium-based browser with data loss prevention, conditional access, web filtering, and audit logging built into the software employees stare at all day. The market has validated the idea emphatically - $730 million raised, a valuation near $5 billion as of 2025, and more than 450 enterprise customers including Pfizer, Mattress Firm, and Swiss Life. Organizations use it to secure BYOD and contractor workforces, retire VDI estates, and govern generative AI use. Its trade-off is structural: Island works by replacing the browser your workforce uses, a migration with real change-management weight, at quote-only pricing that starts in six figures.
Island is a Chromium-based enterprise browser - a full replacement for Chrome or Edge that embeds security controls directly into the browsing surface. Delivered as a standalone browser, a companion extension, and mobile apps, it gives IT granular control over what happens in a web session: clipboard use, uploads, downloads, printing, and screen capture can each be allowed, blocked, or logged based on the user, device, and destination. Policies are identity- and device-aware, so a contractor on a personal laptop gets a locked-down experience while a full-time employee on managed hardware works freely. Recent releases extend DLP into generative AI, inspecting typed prompts, pasted content, and file uploads before data reaches AI services. Because the browser doubles as a secure access point, Island also serves as a lighter-weight alternative to VDI and VPN for delivering internal and SaaS applications - the economic argument behind many of its largest deployments.
Island was founded in 2020 by Mike Fey - previously president and COO of Symantec and GM/CTO of McAfee - and Dan Amiga, founder and CTO of browser-isolation pioneer Fireglass, which Symantec acquired in 2017. Headquartered in Dallas with R&D in Tel Aviv, the company emerged from stealth in February 2022 and set off one of the fastest funding trajectories in security: a $100 million Series C at a $1.5 billion valuation in late 2023, a $175 million Series D at $3 billion in 2024, and a $250 million round in March 2025 at roughly $4.8 billion - about $730 million raised in total from investors including Sequoia, Insight Partners, and Cyberstarts. The company reports more than 450 enterprise customers with annual recurring revenue that has more than doubled year over year, and its rise pulled an entire "secure enterprise browser" category into existence behind it - including the competitive attention of Palo Alto Networks, Google, and Microsoft.
Island positions itself as the browser designed for the enterprise - not a security layer on top of browsing, but the browsing surface itself rebuilt around corporate control. It effectively created the category Gartner now tracks as secure enterprise browsers, and reviews on Gartner Peer Insights and G2 consistently credit it with the deepest built-in control set in the space. Its competitive lanes have sharpened as the category crowded: against Palo Alto's Prisma Access Browser (built from the Talon acquisition) it competes on depth and browser-first focus versus platform bundling; against Chrome Enterprise Premium and Edge for Business it argues that incumbent browsers retrofitted with management can't match purpose-built controls; against extension-based players like LayerX it offers far more control in exchange for a far heavier deployment. The strongest wedge remains economic: where Island displaces VDI seats and VPN infrastructure, it sells as a cost reduction rather than a new line item.
Island's customer stories lean on two recurring outcomes: infrastructure displacement and deployment speed. Mattress Firm rolled Island out to 2,400 retail stores in two weeks; Hendrick Motorsports reports saving over $100,000 by eliminating separate cloud security, firewall, URL filtering, and VPN spend; Brightline Trains describes the move off VDI as having "essentially paid for itself"; Landis+Gyr cut VPN usage 80 percent after replacing VDI. Island itself claims enterprise browser deployments can reduce VDI needs by 80 to 90 percent, and Live Oak Bank's security team called Island "the most successful deployment of a security technology I've ever been a part of." The pattern across accounts: the security value is real, but the business case that closes deals is usually the retired infrastructure underneath it.
Granular allow/block/log control over clipboard, uploads, downloads, printing, and screen capture - policy-aware down to specific apps and destinations, like permitting Salesforce-to-Office 365 copies while blocking personal tools.
Access policies keyed to user identity, device posture, and location enforced in the browser itself - no proxies or gateways in the path.
Unmanaged and third-party devices get a governed workspace without full device management - the browser is the security boundary.
Delivers SaaS and internal applications, including a built-in RDP client, at a fraction of virtual desktop cost and complexity.
Inspects prompts, pasted content, and file uploads to generative AI services, blocking sensitive data like PII before it leaves.
Session-level logging and real-time visibility across browsing activity, exportable to SIEM for investigation and compliance evidence.
Contractors, BPO agents, and bring-your-own-device employees work inside a governed browser instead of a managed laptop or virtual desktop.
Organizations retire virtual desktop infrastructure for browser-based work, cutting licensing and back-end costs while improving user experience.
Customer data stays inside the browser in retail and contact-center environments - no copies out, no screenshots, full session accountability.
Companies enable AI tools while inspecting and blocking sensitive data in prompts and uploads.
Banks, insurers, and healthcare organizations enforce data handling and produce audit evidence in the layer where SaaS work actually happens.
Island's integration story centers on the identity and security stack: identity providers like Okta and Microsoft Entra drive its conditional access policies, device management platforms inform posture checks, and session logs export to SIEM platforms for central investigation. A notable partnership integrates Microsoft Purview DLP directly into the browser, letting organizations enforce existing Purview sensitivity labels and policies in Island sessions - a bridge for Microsoft-standardized shops. Because it is Chromium-based, Island supports standard Chrome extensions under IT control, easing migration for teams with extension dependencies. The philosophy is the inverse of API-integration platforms: rather than connecting to hundreds of SaaS tools individually, Island sits beneath all of them at the browser layer and governs whatever renders in a tab.
Technically, deployment is straightforward - the browser installs through standard software distribution, and case studies show rollouts at remarkable speed (2,400 Mattress Firm stores in two weeks). The harder work is human: Island succeeds only if employees actually switch daily browsers, so deployments live or die on change management, and organizations typically phase by population - contractors and BYOD first, where the alternative was VDI, then broader groups. Day-to-day use is familiar Chromium, which reviewers credit for adoption. The admin side draws more mixed reviews: the policy engine is powerful, but Gartner Peer Insights reviewers note that policy configuration is not streamlined, similar-looking rules are easy to confuse, and there is no clean path to promote policies from test to production. Some users also report occasional performance sluggishness relative to consumer Chrome. Plan for a real pilot phase and dedicated policy ownership.
The national retailer deployed Island to 2,400 stores in two weeks, streamlining store login and securing customer data on shared retail devices while speeding up transactions.
The racing organization saved over $100,000 by consolidating cloud security, firewall, URL filtering, and VPN functions into the browser.
The digital bank's security leadership called Island "the most successful deployment of a security technology I've ever been a part of" - browser-level control fitted to a regulated, cloud-first workforce.
Island does not publish pricing - quotes are negotiated per organization based on seat count, deployment model, and features. Third-party procurement data gives directional anchors: an AWS Marketplace listing has priced a 12-month contract including the management console at $250,000, UK G-Cloud listings have shown a flat management-console fee plus roughly $200 per user per year, and competitor analyses report enterprise agreements commonly starting around $500,000 annually (treat that source with appropriate skepticism - it is published by a rival). The consistent theme: this is six-figure enterprise procurement, not a per-seat credit card purchase. Island's counter-argument is displacement economics - when the browser retires VDI licensing, VPN infrastructure, and standalone filtering tools, several customers report it paying for itself. Model the business case against what it removes, and confirm current packaging with the vendor.
Island's compliance appeal is architectural: when work happens inside a governed browser, controls and audit evidence exist in one enforceable layer - which is why regulated adopters like Swiss Life (BYOD in insurance) and healthcare customers anchor its customer list. Policy enforcement happens in the browser rather than by routing traffic through inspection infrastructure, and session logging produces the activity records auditors and investigators ask for. The same capability carries governance weight in the other direction: browser-level session capture is employee monitoring, and organizations owe the standard obligations - notification, proportionality, and counsel review of what is logged for which populations, particularly for BYOD deployments where personal and work browsing share a device. Island provides controls to scope logging to work contexts; deciding where those lines sit remains the customer's responsibility.
Island's premise is its biggest cost: it works by replacing the browser, and browser migrations are change-management projects that meet real user resistance - the reason many deployments stay scoped to contractors and BYOD rather than the whole workforce. Pricing is quote-only and starts in six figures, hard to justify where there is no VDI or VPN estate to retire. Admin-side friction shows up consistently in reviews: policy management complexity, no test-to-production promotion path, and management-console role limitations, alongside user reports of occasional sluggishness and a built-in RDP client thinner than Microsoft's native one. And the competitive ground is shifting - Palo Alto, Google, and Microsoft now bundle enterprise-browser capabilities into platforms enterprises already pay for, while extension-based rivals cover lighter use cases without a migration. Finally, Island governs the browser boundary, not the work inside the page: it controls whether data can leave a tab, not whether an agent should see it, paste it, or change it mid-workflow.
Palo Alto's enterprise browser (built from the Talon acquisition) - the natural pick for organizations already on the Prisma SASE stack.
Google's managed-Chrome tier adds DLP and access controls to the browser employees already use - less depth, no migration.
Microsoft's enterprise browser posture bundled with M365 - compelling economics inside the Microsoft estate.
Agentless browser security delivered as an extension on existing browsers - AI governance and DLP without replacing anything.
Zero-trust enterprise browser emphasizing simpler setup and stack consolidation for unmanaged devices.
A secure-enclave approach to BYOD that isolates work on personal computers without a full browser swap.
| Category | Island: The Enterprise Browser | PixieBrix: Browser-Native Guardrails & Workflow Control |
|---|---|---|
| Deployment | Replaces the daily browser - fast to install, but adoption is a change-management project across the workforce. | PixieBrix deploys instantly as an extension in the Chrome or Edge employees already use. No browser migration. |
| Protection Model | Governs the browser boundary: whether data can be copied, uploaded, downloaded, printed, or captured out of a session. | Governs actions inside web workflows - the copies, pastes, form entries, and data views where exposure happens within the page. |
| Insider Threat Response | Blocks policy-violating data movement at the browser level with session logging for investigation. | Prevents risky actions at the point of work: blocking sensitive clipboard copies, redacting PII on screen, and requiring justification before high-risk changes. |
| Employee Experience | Familiar Chromium once adopted, but users must switch browsers - and some report sluggishness versus consumer Chrome. | Transparent guardrails coach users in real time inside their existing browser - and the same platform automates their repetitive work. |
| Analytics | Session-level browsing visibility and audit logs, exportable to SIEM. | PixieBrix Insights tracks workflow execution, guardrail interventions, and automation usage across governed apps. |
| Integrations | Identity providers, device management, SIEM export, and Microsoft Purview DLP enforcement in-browser. | Integrates with any web app directly in the browser - no APIs needed - and pushes events to tools like Slack, Jira, and Zendesk. |
| Ease of Maintenance | Powerful policy engine, but reviewers cite configuration complexity and no test-to-production promotion path. | Ops teams maintain guardrails and automations through a no-code editor, updating and deploying to every user instantly. |
| Governance and Security | Browser-level session logging is powerful evidence - and employee monitoring that needs scoping, notice, and counsel review. | Minimizes collected data by design: enforcement happens locally in the browser, and no monitoring archives accumulate. |
| Total Cost of Ownership | Quote-only, commonly six figures annually - strongest where it retires VDI, VPN, and filtering infrastructure. | Low-cost, fast-to-deploy browser layer whose payback spans prevented incidents and automated work alike. |
Island's bet is that controlling work means controlling the browser - and for BYOD, contractors, and VDI replacement, that bet pays. But two gaps remain. First, the boundary problem: Island governs whether data can leave a tab, not what happens inside the page - the agent who can still read the full card number on screen, the well-meaning employee about to paste the wrong record into the right field. Second, the migration problem: most organizations aren't ready to swap every employee's daily browser. PixieBrix addresses both: browser-native guardrails that work inside the web apps themselves, in whatever browser is already deployed. PII is redacted before it renders, risky clipboard copies are blocked with an explanation, high-risk changes require justification with a built-in audit trail - and the same platform automates the repetitive steps that cause careless mistakes. Run it alongside an enterprise browser as the in-page enforcement layer, or use it to get browser-level protection benefits without the browser swap. PixieBrix installs in minutes as an extension, managed with a no-code editor.
