- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
SureFox
The fenced browser — approved sites only, sessions that clean themselves — turning any Android, iOS or Windows device into a secure web kiosk.
How it’s rated
Full scoreboard ↓Quick answer
SureFox is 42Gears' secure lockdown browser: it turns any Android, iOS or Windows device into a web kiosk restricted to approved websites only — no address-bar wandering, no downloads, no escape into the OS. Customer-facing web apps, field-force portals and public-access browsing run inside a fenced, brandable browser with session resets, scheduled behaviour and fleet-scale remote configuration via SureMDM. Like SureLock and SureVideo, it sells standalone and is bundled free inside every SureMDM plan.
The 42Gears product family
This page covers SureFox — the secure browser. The rest of the 42Gears lineup:
Quick facts
30-second orientation- Product
- SureFox — the secure lockdown browser of the Sure suite
- Vendor
- 42Gears Mobility Systems (Bengaluru-born, 2009 · founder-run)
- Category
- Secure browser / web kiosk
- Platforms
- Android · iOS · Windows
- The fence
- Approved websites only — allowlists, category rules, no address bar
- Sessions
- Idle-timeout resets — every visitor starts clean
- Branding
- Kiosk-grade UI: your logo, your layout, no browser chrome
- Fleet control
- Deploy and configure remotely via SureMDM
- Buying paths
- Standalone licences OR bundled free in every SureMDM plan
- In India via
- TechBag — quotes, trials, GST invoicing, Tier-1 support
Understand secure browsing before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is a secure browser?
A secure browser (web kiosk) inverts normal browsing: instead of the open internet minus a blocklist, only approved sites exist. No address bar, no downloads, no escape into the OS — just the task.
SureFox adds the operational layer: kiosk-grade branding, idle-session resets, feature policies for legacy web apps, and fleet-scale configuration — across Android, iOS and Windows.
Open browsing vs the allowlist fence — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Open browser + hope | Fenced web kiosk (SureFox) |
|---|---|---|
| Reachable web | Everything, minus a blocklist users route around | Approved sites only — the rest doesn't exist |
| Previous visitor | Their email still logged in | Idle reset — every session starts clean |
| The address bar | An invitation | Absent unless policy grants it |
| Downloads | Malware's front door on public devices | Governed per fleet |
| Branding | A naked browser betraying the OS | Your logo, your layout, kiosk-grade |
| Policy changes | A visit per device | Fleet-wide push from SureMDM |
| Mixed platforms | Three browsers, three configs | Android, iOS, Windows — one policy |
| Cost shape | A separate kiosk-browser bill | Standalone OR free inside SureMDM plans |
Rollout is incremental — fence pilot devices first, map the redirect chains, then push fleet-wide.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Fenced Engine
A full browser engine wrapped in policy — approved URLs render normally, everything else simply doesn't exist.
Allowlist Layer
Approved sites, wildcard rules and category boundaries — the reachable web defined centrally, per fleet or per device group.
Kiosk Shell
Brandable full-screen UI with your logo and layout — no address bar, no tabs users shouldn't have, no browser chrome betraying the platform.
Session Guard
Idle timeouts wipe history, forms and logins — every customer starts from the home page with nobody's data left behind.
Fleet Remote
Allowlists, layouts and policies pushed fleet-wide from the SureMDM console — the browsing estate reconfigures in one evening.
One agent on every machine, one console over all of them — modules attach without a second operational world.
Twelve capabilities. Fence, serve, protect.
SureFox replaces open browsers on task devices — and the incident stream they generate — with a fence that holds.
Approved-Sites-Only Browsing
The fence: allowlisted URLs and wildcard rules define the reachable web — everything else returns nothing, not a warning users click through.
Navigation Control
Address bar, tabs, downloads and context menus exist only if policy says so — the browser's power features become admin decisions.
Download & Upload Policy
File movement governed per fleet — the public kiosk that can't download malware, the field device that can't leak documents.
Multi-Site Web Apps
Several approved portals side by side — the branch device that reaches the CRM, the intranet and the bank portal, and nothing else.
Branded Kiosk UI
Your logo, colours and home layout — the hotel-lobby browser looks like the hotel, not like a naked webview.
Idle-Timeout Session Reset
History, cookies, forms and logins wiped after inactivity — every visitor inherits a clean browser, nobody inherits a stranger's banking tab.
Feature Policies
Printing, JavaScript dialogs, pop-ups and media autoplay allowed or blocked per deployment — web-app quirks tamed centrally.
Scheduled Behaviour
Different allowlists and layouts by time — the training portal during shifts, the survey page after close.
Password-Guarded Settings
The same special-password guard as SureLock — users browse inside the fence and cannot move the fence.
Offline & Error Handling
Custom offline pages and auto-retry — the field device on patchy 4G degrades gracefully instead of showing browser errors.
Fleet-Scale Remote Config
Allowlists and layouts pushed from SureMDM to every device — the browsing policy of a 500-branch network changes in one evening.
Usage Visibility
Which sites, how long, on which devices — browsing behaviour reported for compliance and capacity planning.
Watch SureFox in action
Official demos — the setup, the sibling lockdown product and the console that pushes it all.
How to Set Up a Secure Browser | Kiosk Browser Lockdown
SureFox configured live — from open device to fenced web kiosk.
SureLock — Kiosk Lockdown Solution
The app-lockdown sibling — SureFox fences the web, SureLock fences the apps.
SureMDM — The Enterprise Mobility Solution from 42Gears
The console that pushes SureFox policies fleet-wide.
Want a live, India-context walkthrough on your own fleet?
Book a guided demo →Every browser can be restricted. One was built as a fence.
Here’s what genuinely sets SureFox apart from the alternatives.
The fence, not the filter
Web filters block bad categories and argue about the grey zone. SureFox inverts it: only approved sites exist. For customer-facing and single-purpose devices, allowlisting is the only model that actually holds.
Sessions that clean themselves
Idle-timeout resets wipe the previous visitor completely — the public kiosk where nobody inherits a stranger's logged-in email. This single feature retires a compliance headache.
Three platforms, one policy
Android tablets, iPads and Windows terminals fenced identically from one product — the mixed lobby fleet gets one browsing policy, not three implementations.
Web-app quirks, tamed
Printing, pop-ups, JS dialogs and media autoplay as central policies — the legacy web app that needs a pop-up works, and nothing else gets one.
Bundled with the family
Free inside every SureMDM plan alongside SureLock and SureVideo — the frontline trio arrives together, managed from one console.
Veteran vendor stability
The same bootstrapped, founder-run 42Gears behind it since 2009 — your browsing fence won't be sunset by an acquisition.
The numbers behind the platform
What your SureFox journey looks like
Browsing census
TechBag advisors map which devices need which portals — customer-facing, field, branch — and the approval lists per fleet.
Fence live on a pilot
SureFox on pilot devices with your real allowlists — including the legacy web app with the weird pop-up. Escape-testing encouraged.
Fleet rollout in waves
Branded layouts, session policies and scheduled behaviours pushed from SureMDM, location by location.
Fenced steady state
Allowlist changes are minute-long pushes, sessions clean themselves, and the browsing estate stops generating tickets. TechBag handles renewals.
Trusted across frontline industries in 170+ countries
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“Lobby iPads reach our booking portal and the city guide. Guests have tried everything else; everything else doesn't exist.”
“Branch tablets reach three approved portals. The session reset means no customer ever sees another customer's forms — our compliance team signed off in one meeting.”
“Field engineers get the job portal and the manuals site on patchy 4G. The custom offline page ended the 'is it broken?' calls.”
“Library computers went from daily incident reports to none. Allowlist plus session resets is the whole story.”
“We push allowlist changes from SureMDM to 300 devices at once. Adding an approved site takes a minute, not a maintenance window.”
“One legacy web app needed pop-ups and printing — both became per-fleet policies instead of per-device fiddling.”
“It was already in our SureMDM plan. We almost bought a separate kiosk-browser product before checking.”
“iOS support sealed it for us — the mixed iPad/Android lobby fleet gets one identical policy.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the secure browsing market — tap any vendor to see why it sits where it does.
TechBag Web-Kiosk Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Three platforms, allowlist-native, fleet-managed and bundle-priced — this page's subject.
Fencing Depth × Ease of Configuration
The grid nobody publishes — how tight the fence is vs how hard it is to build.
Deep fencing and session control at genuinely easy configuration — the balanced corner.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
SureFox vs the web-kiosk field
Deliberately cross-shaped: point products, managed Chrome and the enterprise browsers — with honest lanes for each.
| Dimension | SureFox | KioWare | SiteKiosk | Managed Chrome | Fully Kiosk Browser |
|---|---|---|---|---|---|
| Heritage & focus | Sure-suite secure browser | Kiosk software veteran | European kiosk veteran | Chrome + policies | Indie Android favourite |
| Platform coverage | Android + iOS + Windows | Windows + Android | Windows + Android | Everywhere Chrome runs | Android only |
| Allowlist fencing | Core model | Strong | Strong | Via policy sprawl | Good basics |
| Session hygiene | Idle resets built-in | Built-in | Built-in | Assemblable | Basic resets |
| Kiosk-grade branding | Full | Full | Full | It's Chrome | Decent |
| Fleet-scale management | Via SureMDM | Own tooling | Own tooling | Google Admin | Per-device-ish |
| Licensing economics | Free in SureMDM / cheap alone | Per-licence | Per-licence | Free-ish | Famously cheap |
| Best fit | Mixed fleets & SureMDM estates | Windows public kiosks | European public access | Workspace-run orgs | Small Android fleets |
Which browsing approach is right for you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose SureFox if…
- ✓Customer-facing or field devices need approved-sites-only browsing
- ✓Your fleet mixes Android, iOS and Windows — one policy for all
- ✓You're on SureMDM already — it's bundled free
- ✓Session hygiene (public devices) is a compliance requirement
Choose KioWare if…
- ✓Windows PC public kiosks are the whole project
Choose SiteKiosk if…
- ✓European public-access deployments with local support needs
Choose Managed Chrome if…
- ✓You live in Google Workspace with admin capacity
- ✓Kiosk branding doesn't matter
Choose Fully Kiosk if…
- ✓A small Android fleet on an indie budget
What does open browsing cost you?
Drag the sliders. Estimates assume ~2 IT-hours per shared/task device per year on browsing incidents, cleanup and the tickets they raise, with ~60% removed by allowlist fencing and session resets — illustrative and conservative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models actual device counts and modules.
Three ways to consume it
SureFox prices standalone per device — or arrives free inside SureMDM plans. TechBag models both paths in one GST-compliant quote.
Standalone SureFox
Best for point web-kiosk projects
- Per-device licences, no UEM required
- Android, iOS and Windows
- Local or cloud configuration
Inside SureMDM
Best for managed fleets
- Included free in every plan
- Fleet-scale allowlist pushes
- One console for MDM + browsing
With SureLock & SureVideo
Best for full frontline estates
- App lockdown and signage, same family
- All three bundled in SureMDM plans
- TechBag models the combined estate
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your device counts and current tools — we’ll model it against what you spend today.
The 8 questions to ask every secure-browser vendor
Take this into your next vendor call — including ours.
Hand the fenced device to your most creative user. Links inside approved sites, OAuth redirects, PDF viewers — probe every edge.
Test YOUR portals — especially the legacy one with pop-ups/printing. Feature policies must cover its quirks.
Set the idle reset, walk away logged in, and verify the next 'visitor' inherits nothing.
Payment gateways and SSO providers redirect through extra domains — map them into the allowlist before launch day.
Kill the network and look at the screen. A custom offline page beats a browser error in front of customers.
On (or considering) SureMDM? SureFox is included — check before buying any standalone browser product.
If iPads and Android tablets coexist, verify the policy renders identically on both.
Which usage data do you need for compliance reporting? Confirm it's captured.
Questions buyers ask
Ready to evaluate SureFox?
Get a quote, scope a fence-drill trial with your real portals, or bring your device list and let a TechBag advisor pick the standalone-vs-bundle path.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.