App security
Category: HR
Secure Workday browsing
Secure Workday browsing means protecting HR and payroll workflows from phishing, session theft, and data leakage—because HR portals contain high-impact personal data.
Quick answer
Legba can isolate browser sessions while your team uses Workday.
HR systems contain sensitive employee data. Isolation helps reduce exposure when HR teams follow links and open external portals during Workday workflows.
This page does not imply an official integration with Workday. It is a guide to securing browser workflows around the app.
Last updated
2026-01-29
Common browser risks
- Phishing that imitates HR portals and “benefits update” prompts to steal credentials.
- Session hijacking enabling access to employee records and payroll settings.
- Impersonation attempts to request direct deposit changes or W-2 access.
- Copy/paste leakage of sensitive HR data into untrusted tools or AI prompts.
- Malicious links and attachments related to hiring and onboarding workflows.
Typical sensitive data in Workday
- Employee PII and HR records.
- Payroll and compensation information.
- Benefits enrollment and tax documents.
- Org structure and manager relationships.
- Hiring and candidate data (depending on usage).
- Admin settings and audit logs.
Recommended policies by role
HR
- Use bookmarks for official HR portals; avoid logging in via links from email.
- Open unexpected “benefits” and “payroll update” links in isolation and verify the sender.
- Avoid pasting sensitive employee data into untrusted tools or AI prompts.
IT Admins
- Enforce strong auth and short sessions for HR admins.
- Isolate unknown domains and redirect chains common in HR phishing campaigns.
- Restrict downloads of HR documents from untrusted sources; scan before opening.
Security
- Monitor for unusual login activity and changes to payroll and direct deposit settings.
- Use isolation for investigating suspicious HR-themed phishing landing pages.
- Deploy controls to reduce leakage of HR data into untrusted browser tabs and AI tools.
FAQs.
References
- 01Workday TrustWorkday
- 02Cloudflare: Browser IsolationCloudflare
- 03
