Browser Isolation

Description

Can be remote (cloud), local (VM), or client-side isolation.

Prevents drive-by downloads, exploit kits, and web-based malware from reaching the endpoint.

The user sees a rendered image or safe stream instead of raw web data.

Especially useful for accessing unknown or untrusted websites.

What people often say

• Not a replacement for EDR — only protects the web vector.
• Remote isolation can introduce latency in user experience.

Covers / does not cover

Covers

• Protection from web-based exploits
• Isolation of malicious JavaScript
• Prevention of drive-by downloads

Does not cover

• Email phishing (except web links)
• Malware delivered outside the browser (USB, local files)
• Social engineering not requiring web access