How Legba browser isolation works
Shield runs the page in an isolated browser. That browser is off your device. See what happens when you open the tab. See what ends when you close it.
How Shield isolates a page
Shield opens the page in an isolated browser off your device. You still use the page inside Chrome. The page code runs in that separate browser. Close the tab, and the isolated session is destroyed.
That changes the execution boundary. The page does not run inside your everyday browser environment. Your other tabs and local browser state stay outside the isolated session.
Ghost changes the route
Ghost does a different job. It gives your browser a private route. Only the browser uses that route. Other apps on your device keep their normal connection.
Use Ghost when location or browser-only routing is the job. Use Shield when the page should run away from your device. One mode changes the route. The other changes where the page runs.
| Question | Ghost | Shield |
|---|---|---|
| What changes? | The browser route | The page execution location |
| What stays local? | The browser and page execution | Your Chrome controls and interaction |
| Best fit | Private browser routing | Pages you do not trust |
What isolation does not promise
Isolation is a boundary, not a verdict. It does not make a phishing page honest. If you type a secret into a malicious form, the site can still receive it. Verify login URLs and keep phishing-resistant authentication in place.
Legba also does not route every app on your device. Ghost is browser only. Shield isolates the page you open. Neither mode replaces a VPN for private-network access or whole-device routing.
A fresh isolated session also does not guarantee anonymity. A site can identify you when you sign in or provide identifying information. Isolation changes where code runs. It does not erase every signal.
The same boundary for agents
Agent builders reach the same routing and isolation through a ready skill. The skill is the current public path for agent use. The API documentation remains a preview until a production host and tested contract are public.
The next suspicious page belongs nowhere near your computer. Open it with Shield. Use Ghost when a private route is enough.
Continue the isolation guide
Compare browser isolation, disposable sessions, and the limits of local browsing.
What is browser isolation? The complete 2026 guide
Browser isolation separates web execution from a local device. This guide covers architectures, risk reduction, tradeoffs, and verification.
What is remote browser isolation (RBI)?
Remote browser isolation runs websites away from your device. Your browser receives rendered output. See RBI delivery models, benefits, and limits.
Browser isolation vs VPN: which tool fits in 2026?
VPNs protect a network path. Browser isolation changes where web content runs. Compare their scope, limits, and best uses.
Free for 30 days. No card required.
Pick a mode. Open the page.
Legba is a Chrome extension with two modes. Ghost gives you a private browser route. Shield opens a page in an isolated browser off your device.
