App security
Category: IT & Support
Secure Zendesk browsing
Secure Zendesk browsing means protecting support agents from risky links and attachments while keeping customer data and sessions safe in browser-based ticket workflows.
Quick answer
Legba can isolate browser sessions while your team uses Zendesk.
Support tooling often bridges into sensitive systems. Isolation helps reduce exposure from external links, attachments, and untrusted portals used alongside Zendesk.
This page does not imply an official integration with Zendesk. It is a guide to securing browser workflows around the app.
Last updated
2026-01-29
Common browser risks
- Customer-provided links in tickets leading to phishing pages or malware downloads.
- Attachments uploaded by external users containing malicious files.
- Impersonation attempts that push agents to “verify” accounts or change credentials via links.
- Session hijacking risk because agents often handle high volumes of external content.
- Copy/paste leakage of customer data into untrusted tools or AI prompts.
Typical sensitive data in Zendesk
- Customer PII and account details.
- Ticket conversations and attachments.
- Links to internal tools and customer environments.
- Screenshots and logs shared during troubleshooting.
- Macros and templates that may include sensitive process details.
- Agent and admin settings.
Recommended policies by role
Support
- Open customer-provided links in isolation by default; treat them as untrusted.
- Restrict downloads of attachments from unknown senders; scan and release through a controlled workflow.
- Avoid pasting customer PII into untrusted tools or AI prompts; use approved systems for summaries and analysis.
IT Admins
- Enforce browser extension allowlists and restrict risky permissions for support teams.
- Isolate unknown domains and redirect chains to reduce phishing exposure without blocking support work.
- Use separate profiles for admin access vs daily ticket handling.
Security
- Use isolation for investigation of suspicious links and scam pages encountered by agents.
- Monitor for unusual export patterns and admin actions in support systems.
- Implement controls to reduce data leakage to AI tools from browser-based support workflows.
FAQs.
References
- 01Zendesk Trust CenterZendesk
- 02Cloudflare: Browser IsolationCloudflare
- 03
