Nov 9, 2026 · 36 min
Security teams move controls into the browser
Soap Box: Security must be more browser-centric
Browser-level visibility could make phishing, AI data leakage, and web activity easier to control while reducing dependence on legacy network architectures.
- 1Browser telemetry can reveal phishing, ClickFix activity, SaaS use, AI interactions, and sensitive data movement with greater precision.
- 2Push plans to add DLP, web filtering, and secure web gateway functions while running alongside existing SASE and CASB tools.
- 3An endpoint sensor could extend browser controls to local inspection, non-browser traffic, and autonomous software agents.
Don't miss
Adam Bateman outlines an endpoint sensor that could pair with Push’s browser extension to inspect uploads, filter non-browser traffic, and constrain autonomous agents.
The brief
Patrick Gray and Push Security CEO Adam Bateman argue that the browser sees modern work more clearly than network infrastructure, from phishing and SaaS use to AI prompts and sensitive uploads.
The central case for browser-level DLP is fidelity: controls can inspect actions such as ClickFix commands, clipboard use, and uploads without relying on break-and-inspect network systems.
Push’s proposed path is incremental rather than revolutionary: deploy an extension alongside existing SASE or CASB tools, then add web filtering and broader data controls over time.
The most consequential extension is an endpoint sensor that could inspect uploads locally, filter non-browser traffic, run local models, and constrain autonomous agents’ external communications.
The conversation frames the browser as a possible enterprise-security layer without requiring an enterprise browser, preserving users’ preferred browsers while adding native controls.
Weekly email
State of the Pod, every Monday
The week's most-discussed names and stories from podcasts, with the moments behind them. Free, five minutes, unsubscribe in one click.