Secure app browsing guides.
SaaS security in the browser starts with the session. Attackers target signed-in sessions, admin consoles, and shared links. Each guide covers one app's browser risks and sensitive data. It also lists the controls worth checking first. Isolation changes where a page runs. It does not replace identity controls.
Cloud Consoles.
The Azure Portal is a high-privilege browser surface. Phishing and token theft target admin sessions. Treat links from alerts and tickets as untrusted.
Cloud ConsolesGoogle Cloud Console sessions carry admin power. Phishing pages and token theft target them. Google recommends security keys for super admin accounts.
Cloud ConsolesSecure Cloudflare Dashboard browsing means protecting admin sessions and configuration changes from phishing and session theft in a browser-based control plane.
Cloud ConsolesCollaboration.
Miro's trust center lists SOC 2 Type II. It also lists ISO 27001 and ISO 42001. Board risk comes from sharing and fake invites.
CollaborationFigma has a SOC 2 Type 2 report. It is certified to ISO/IEC 27001:2022. Exposure comes from how files are shared and opened.
CollaborationCRM & Sales.
Secure Salesforce browsing means protecting CRM logins, sessions, and customer data from phishing and session theft while sales teams work in the browser.
CRM & SalesSales Navigator risk comes from outside links. Messages, profiles, and ads send reps to other sites. Some fake a LinkedIn sign-in page.
CRM & SalesGong's trust center lists SOC 2 and ISO 27001. Browser risk centers on the session. A stolen session reaches call recordings and deal notes.
CRM & SalesDeveloper Platforms.
Secure Jira browsing means reducing risk from links, attachments, and ticket content that routes engineers and support teams into risky browser destinations.
Developer PlatformsGitHub accounts hold code, tokens, and CI/CD secrets. Attackers use fake sign-ins, OAuth apps, and stolen sessions.
Developer PlatformsSecure GitLab browsing means protecting source code, CI/CD pipelines, and tokens from phishing, session theft, and risky browsing behaviors.
Developer PlatformsDatadog logs and dashboards can hold tokens and internal URLs. Application keys grant API access to that data. On-call alerts add urgency that phishing exploits.
Developer PlatformsSecure Sentry browsing means protecting error and performance data (and the links inside it) from phishing, session compromise, and unsafe browsing during incidents.
Developer PlatformsE-commerce.
Secure WordPress admin browsing means reducing risk from phishing, plugin supply chain issues, and session compromise in browser-based site administration.
E-commerceSecure Amazon Seller Central browsing means protecting seller accounts from phishing, session theft, and fraud, because account takeovers can disrupt inventory, ads, and payouts.
E-commerceHR.
Secure Workday browsing means protecting HR and payroll workflows from phishing, session theft, and data leakage, because HR portals contain high-impact personal data.
HRBambooHR publishes its audits at trust.bamboohr.com. Browser risk sits in the HR session. That session holds employee records and pay data.
HRIdentity & Access.
Okta's 2023 security reports show two attack paths. Attackers replayed stolen session tokens. Others talked help desks into resetting admin MFA.
Identity & AccessCisco Duo can skip MFA on networks you list. Remembered browser sessions can last up to 365 days. Both settings trade friction for exposure.
Identity & AccessLookalike pages try to capture the logins 1Password stores. Autofill matches each login to its saved website. If autofill stays silent, check the address bar.
Identity & AccessIT & Support.
Secure ServiceNow browsing means protecting IT and security workflows from malicious links, unsafe attachments, and session compromise in browser-based ticketing.
IT & SupportZendesk's trust center lists SOC 2 Type II. It also lists ISO 27001:2022. Agents still open customer links and files all day.
IT & SupportSecure Intercom browsing means protecting support and success teams from risky links and file shares while they handle customer conversations in a browser.
IT & SupportMarketing & Analytics.
Productivity.
Microsoft 365 sign-in runs on Microsoft Entra ID. Attackers relay MFA, abuse consent, and steal tokens. Entra token protection only partly covers browsers.
ProductivityNotion encrypts workspace data in transit and at rest. Browser risk comes from sharing and sign-in. Attackers have abused genuine Notion share emails.
ProductivityAirtable has a SOC 2 Type 2 audit. It is also ISO 27001 certified. Your own risk sits in share links and browser sessions.
ProductivityStart with these pages.
- Resources hubBrowser isolation research, guide hubs, and explainers.
- Browser isolation Chrome extensionWhat teams should evaluate before choosing a Chrome-based isolation product.
- Browser threat playbooksThreat context for the SaaS workflows covered on these pages.
- Browser isolation for finance teamsA verification workflow for invoices, payment links, and vendor portals.
- AI security guidesPrompt injection, data leakage, governance, and browser-enforceable AI controls.
Try it on the next page you do not trust
Legba is a Chrome extension with two modes. Ghost gives you a private browser route. Shield opens a page in an isolated browser off your device.
Free for 30 days. No card required.
Ghost. A private route for your browser. Shield. An isolated browser, off your device. Choose the mode. Close when finished.