Legba is multi-tenant browser isolation for MSPs. Deploy it to every client from one dashboard, bill it per client, and put your own name on it. A new recurring line, no new stack to run.
The Problem
Your clients work from home networks, coffee shops, and airports. Every tab is a way in. Every phishing link and drive-by download lands on an endpoint you have to clean up. You already know this. You are fielding the tickets. The fix has to be one you can deploy across every tenant, run quietly, and bill for. Browser isolation is that fix. Until now it priced out the clients who need it most.
Legba runs browsers, applications, and full desktops in isolated remote sessions. Nothing touches the client's device. When the session ends, it is destroyed. No session residue. No artifacts. No attack surface left behind.
Every tab opens in its own isolated session. Phishing pages, malicious scripts, and drive-by downloads never reach the endpoint. The browser feels normal to your client. The threats stay off their device.
Run risky applications in sealed containers on Legba's infrastructure. The client uses the app. The app never touches their machine.
Full desktops on demand. Spawn one for a contractor, a short project, or a high-risk task. Destroy it when the job is done. Nothing persists.
Run client AI coding and automation agents in a disposable sandbox you manage and destroy on demand.
Your clients want AI coding and automation agents. You do not want those agents on a real endpoint. OpenClaw runs them in a disposable sandbox on Legba's infrastructure. You provision it, you watch it, you destroy any session on demand. The client gets the tool. You keep the perimeter and add another managed line.
Multi-tenant browser isolation, run the way MSPs already work. No toggling between client accounts. No fragmented views. One pane of glass for every client, alongside the RMM and PSA you already run.
Every client is a tenant. Provision, isolate, and bill each one on its own.
Swap keys and rotate credentials per tenant. No downtime.
See sessions and usage by client. The numbers your invoice runs on.
Set what each tenant can reach. Tune it per client.
Cap usage by user or tenant when you need to.
Push policy across every client at once, or one at a time.
Legba fits the way you already operate. It deploys fast, runs quietly, and ships white-label so your clients see your brand. You buy at one rate and set your own. Bill it per client and keep the difference. It sits next to the RMM and PSA you already run, so there is nothing new to learn.
Legba ships with production defaults. The isolation engine is patent pending and the extension is Chrome verified. Your clients get real protection from day one, not a configuration project.
0
Config needed
1
Patent pending
✓
Chrome verified
Legba works the moment you deploy it. No tuning. No policy templates to build from scratch. It ships with defaults that protect your clients on day one.
The isolation engine behind Legba is patent pending. It is our own stack, not a wrapper on someone else's infrastructure.
The extension is verified and listed on the Chrome Web Store. Your clients can trust the install.
Build the offer
Resell browser isolation, offer managed AI sandboxes, and add external attack surface mapping for your clients. Each line is its own recurring-revenue item.
Run client AI agents in a disposable sandbox. Package it as a managed offering for the clients who want AI without the exposure.
ExploreYour white-label rollout runs the same real-browser isolation described on the core product page. Spawn a session, do the work, burn it on close.
ExploreMap each client's external attack surface and report validated findings. Another recurring line that fits the dashboard you already run.
ExploreLegba is a disposable real browser: it spawns a clean session, does the work, and destroys itself on close.
chromium / real fingerprint · residential ip · burn on close
Real browser. Real IP. Real page. Spawn a session. Do the work. Destroy it. Off your device. Off your stack. Gone on close.
