- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Akamai Workforce Protector
Your staff work in Chrome, Edge and Safari, and paste into AI tools all day. Your controls should be in the page too — Workforce Protector, formerly LayerX, is an extension for Chrome, Edge, Firefox and Safari that governs AI prompts, pastes, uploads and risky add-ons inside the page — no new browser and no proxy.
Buy through TechBag
Same software. Better outcome — at a lower cost.
How it’s rated
Full scoreboard ↓Quick answer
The Akamai platform family
This page covers Workforce Protector (formerly LayerX) — Akamai’s browser-security extension. The rest:
Quick facts
30-second orientation- Product
- Browser extension that governs AI, SaaS, web and private-app use inside the browsers staff already run
- Maker
- Akamai Technologies, Cambridge, Massachusetts; NASDAQ: AKAM; CEO Tom Leighton
- Status
- LayerX deal announced 14 May 2026 for about $205M; completed 2 July 2026 and renamed
- Price
- Not published; a demo form, no trial on the product page; LayerX’s old prices do not carry over
- Deployment
- An extension plus a cloud Management Console; no proxy, network redesign or traffic redirection
- Browsers
- Chrome, Edge, Firefox and Safari; Akamai’s deal release adds agentic browsers such as Atlas and Comet
- Controls
- Prompts, responses, agent actions, text input, copy/paste, uploads and downloads
- Integrations
- Identity providers, SIEM, file-labelling tools, ticketing systems and MDM platforms
- India
- No console or data region is documented; Akamai’s Bengaluru site (2018) runs a NOC and SOC
- In India via
- TechBag — shadow-AI baseline, extension rollout plan, quote in INR with GST
Understand browser security before you buy it
Most product pages skip this. We start here — so you buy a capability, not a buzzword.
What is browser security?
Controls that work inside the browser page, where people now paste data into AI tools and SaaS apps.
Proxy logs and blind trust vs control inside the browser — the honest table
What consolidation actually replaces, dimension by dimension.
| Dimension | Proxy logs and trust | Akamai Workforce Protector |
|---|---|---|
| AI tools in use | Guessed from proxy domain logs | Named, with prompts and replies in view |
| Sensitive text into chatbots | Unseen once the page is open | Checked at typing and paste |
| Risky browser add-ons | Whatever staff installed | Inventoried and scored for risk |
| Contractor laptops | A VDI seat or no access | Read-only session with a watermark |
| Rollout | A new browser to train everyone on | An extension in the browser they use |
| What it is NOT | — | A web proxy, DNS filter or endpoint agent |
The cheapest test is a week in monitor-only mode: it shows your real shadow-AI and extension exposure before you write a single block rule.
The five pieces of the platform
Vendors love diagrams; buyers need to know what they’re actually operating. Here’s the whole platform, demystified.
Extension
Installed in Chrome, Edge, Firefox or Safari, it watches prompts, typed text, pastes, uploads and downloads inside the page and applies policy there, with no proxy in the path.
Console
Administrators build adaptive, context-aware policies and review activity in one console; existing customers still sign in at a LayerX-branded address after the rename.
Intelligence
A cloud service rates the risk of applications, identities, browser extensions and AI activity, so policy can treat an unknown AI tool or a risky add-on differently.
Integrations
Identity providers attribute activity to people or AI agents, MDM pushes the extension, file-labelling tools inform data rules, and SIEM and ticketing receive the events.
An extension in four browsers and a cloud console — policy applied in the page, with no proxy and no traffic rerouting.
Nine capabilities. Discover, protect, govern.
Workforce Protector governs AI and data inside the browsers your staff already use, with no proxy in the path.
Find the AI tools in use
Discovers AI use across web applications, browsers and desktop tools, so the list of approved AI services starts from evidence.
Prompts and replies in view
Gives real-time visibility into what staff type into AI tools and what comes back, which network logs cannot show.
Add-ons ranked by risk
Monitors installed browser extensions and scores their risk, so a data-hungry add-on can be flagged or removed.
Stop secrets before they post
Text input and copy/paste rules catch sensitive data on its way into an AI prompt, before it leaves the page.
Upload and download rules
Uploads to unsanctioned sites and downloads of sensitive files are allowed, warned or blocked by policy in the browser.
Read-only for outside devices
Contractor and personal devices can get read-only sessions and watermarking, without changing how the person works.
Rules that read the context
Adaptive policies weigh the user, the app and the data, so one AI tool can be allowed while uploads to it stay blocked.
Human or AI agent, attributed
Each action is tied to an identity, and Akamai says it tells a person apart from an AI agent acting in the browser.
CIS settings checked
Browser configuration can be held to CIS Benchmarks, giving auditors evidence that the browsers themselves are hardened.
Watch Workforce Protector in action
Akamai on why AI risk starts in the browser, and what the LayerX acquisition adds to its zero trust portfolio.
Akamai + LayerX: Stopping AI Risk Where It Starts | Black Hat 2026
Why the browser is where AI risk begins, and how the LayerX technology controls it there.
Akamai Acquires LayerX: Unleashing AI Usage Control & Browser Security | Episode 27
Akamai explains the acquisition and what AI usage control and browser security add to its zero trust portfolio.
Want a live, India-context walkthrough for your environment?
Book a guided demo →AI use happens in the browser tab. Workforce Protector puts the control in the tab.
Here’s what genuinely sets it apart — and exactly where it stops.
Keep the browser people already use
Most enterprise browsers ask staff to move to a new browser. Workforce Protector is an extension for Chrome, Edge, Firefox and Safari, and Akamai’s deal release names agentic browsers such as Atlas and Comet too. Nothing is rerouted through a proxy, so rollout is an MDM push, not a network change.
See what goes into AI tools
Network tools see a connection to an AI service; the extension sees the prompt, the paste and the upload. That is where Workforce Protector decides, so a team can use an approved assistant while customer data or source code is stopped before it is submitted, and shadow AI shows up by name.
Extensions and agents treated as risks
Browser add-ons can read every page they touch, and AI agents now click and type for users. Workforce Protector scores extension risk and attributes each action to a person or an agent, so an investigation can tell who, or what, moved the data and through which add-on.
Where it stops
It is new to Akamai: the deal closed in July 2026, the console still signs in at a LayerX address, and no price, customer or analyst placement is published. No data region, Indian or otherwise, is documented. An extension covers the browser only, so other apps need DNS, endpoint or network controls.
The numbers behind the platform
What your Workforce Protector rollout looks like
Baseline the AI use
Push the extension to one department in monitor-only mode and list every AI tool, risky extension and upload it sees.
Decide what is sanctioned
Agree with legal and data owners which AI tools are approved, what data classes are banned from prompts, and for whom.
Enforce on a pilot group
Turn on paste, typing and upload rules for the pilot, add read-only sessions for contractors, and watch false positives.
Wire it into the stack
Connect the identity provider, send events to the SIEM and ticketing, and use file labels to drive the data rules.
Roll out by MDM
Push the extension to every managed browser, block unmanaged browsers from key apps, and get the quote in INR with GST.
The review scoreboard
Modelled on Gartner Peer Insights structure. *Counts and breakdowns are illustrative pending verified review collection.
Quick poll — what’s driving your evaluation?
Talk to an advisor“The first week’s report named eleven AI tools our staff were using. We had approved two of them.”
“We pushed the extension through Intune to Chrome and Edge in an afternoon. Nobody had to learn a new browser.”
“A developer pasted a config file with keys into a chatbot. The paste rule stopped it and logged who tried.”
“Read-only sessions with a watermark let our audit contractors review files without taking copies home.”
“Extension scoring found a PDF add-on with permission to read every page. We removed it across 3,000 laptops.”
“It works well, but since the acquisition the roadmap and Indian data location took weeks to get in writing.”
Where everyone sits — the grids
Analyst firms bury this view behind paywalls, and G2 retired its Grid. So here’s TechBag’s synthesis of the browser security market — tap any vendor to see why it sits where it does.
TechBag Browser Security Grid
Execution strength vs product vision — the classic market map, minus the paywall.
Quote-only; Akamai-owned since July 2026.
Browser Choice × AI & Data Control
The grid nobody publishes — how many browsers it works in without a switch vs how deeply it governs AI and data in the page.
Four browsers plus agentic ones; prompts, pastes and agents governed.
Positions are TechBag’s illustrative synthesis of public review-platform data and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
Workforce Protector vs the browser security field
Against Palo Alto Prisma Access Browser, Island, Chrome Enterprise Premium, Sophos Workspace Protection and Menlo — on browser choice, AI and data controls, price, India and exit.
| Dimension | Akamai Workforce Protector | Palo Alto Prisma Access Browser | Island Enterprise Browser | Chrome Enterprise Premium | Sophos Workspace Protection | Menlo Secure Cloud Browser |
|---|---|---|---|---|---|---|
| What it is | Extension, AI-first | Chromium work browser | Standalone work browser | Google’s paid Chrome | Bundle with a browser | Remote cloud browser |
| Deployment | Extension + console | Browser, extension, app | Browser or extension | Policy on Chrome | Browser and two agents | Nothing on the device |
| Browsers and OS | 4 browsers + agentic | Own browser first | 8 OSes, 4 extensions | Chrome only | Windows and Mac | Any browser, no install |
| AI usage control | Prompts, replies, agents | Redacts prompt data | Assistant built in | Blocks unsanctioned AI | Approved AI only | Via the DLP module |
| Data controls | Typing, paste, files | 1,000+ classifiers | Print, screenshot, paste | Paste, upload, print | Uploads, downloads, clip | Isolation; DLP extra |
| Unmanaged devices | Read-only, watermark | Agentless BYOD | Work/personal split | BYOD via Chrome | Managed devices first | No install needed |
| Extension risk | Scored and monitored | Blocks bad add-ons | Per-site extension rules | Approvals and scans | Not detailed | Not documented |
| Pricing model | Quote; unit unstated | Per user, quoted | Quote | Per user per month | One per-user count | Products × users |
| Published entry price | Not published | Not published | Not published | $6/user/month | Not published | Estimator only |
| Included vs add-on | Browser layer only | Standalone or in SASE | ZTNA in the browser | Core free, Premium paid | Four tools, one licence | DLP sold apart |
| Integrations | IdP, SIEM, MDM, tickets | SAML, OIDC, SASE | Not itemised | Open Connector Framework | Sophos Central | Self-contained |
| India data location | Not documented | PoP; console unstated | Not published | Not published | India Central option | Mumbai site listed |
| Lock-in and exit | Remove an extension | Own browser to unwind | Browser to replace | Chrome stays Chrome | Bundle ties it | Separate vendor |
| Best fit | AI control, any browser | Palo Alto SASE estates | Browser as the workspace | Chrome-standard firms | Sophos customers | Isolation-first teams |
Which approach fits you?
Honest fit signals — because the fastest way to lose your trust is to pretend one product wins every scenario.
Choose Workforce Protector if…
- ✓You must see and govern what staff type and upload into AI tools, and network logs only show you the domain
- ✓Staff use Chrome, Edge, Firefox and Safari and you will not force everyone onto a new browser
- ✓Risky extensions and AI agents acting in the browser are on your audit list, not only phishing sites
Compare alternatives if…
- ✓You want a published price — Chrome Enterprise Premium lists $6 per user a month
- ✓You want private-app access inside the browser — Island and Prisma Access Browser carry it
- ✓Risky sites should never render on the device — Menlo isolates each session in its cloud
Do not expect…
- ✓A price list, a trial, or LayerX’s old pricing carried over
- ✓A documented Indian data or console region for browser events
- ✓Protection for apps outside the browser — pair DNS, endpoint or network controls
TechBag has no browser security guide yet, so Akamai Workforce Protector sits outside the category guides. Browse all products to compare it with the rest of the catalogue. →
What does unseen AI and browser use cost you?
Drag the sliders (employees working in a browser; security-team hour cost). Estimates model security and IT time spent chasing shadow-AI use, reviewing extensions and triaging data-leak alerts at an assumed 1.5 hours per employee a year, with 70% of it removed by in-browser visibility and policy. Both figures are assumptions. Illustrative.
Loaded cost = salary + overheads per productive hour. Illustrative only — your TechBag quote models your actual environment and modules.
Three ways to consume it
Not published: Akamai prints no price or licence unit for Workforce Protector, and its product page offers a demo rather than a trial. LayerX’s pre-acquisition pricing should not be assumed. TechBag counts your users and browsers first, then gets the quote in INR with GST.
Monitor first
Best for a shadow-AI baseline
- Extension in monitor-only mode
- AI tools, extensions and uploads listed
- Quote on request; no public price
+ Platform add-ons
Best for a broader rollout
- Scoped to your estate
- Add-on modules as needed
- Phased, right-sized deployment
Full enforcement
Best for regulated estates
- Paste, typing and file rules enforced
- Read-only sessions for contractors
- IdP, SIEM and MDM wired in
Buy it for less — TechBag pricing beats list
Whatever the list prices above, TechBag negotiates a significantly better deal — with GST-compliant INR invoicing and local support. Ask us for your discounted quote.
Get an India-ready quote
Tell us your requirements and current tools — we’ll model it against what you spend today.
The 8 questions to ask every vendor
Take this into your next vendor call — including ours.
Which browsers do staff run — Chrome, Edge, Firefox, Safari, or agentic ones — and can MDM force-install the extension?
Which AI tools are approved, which data classes may never enter a prompt, and who signs off on exceptions?
Which uploads, downloads and pastes must be blocked versus warned, and do file labels already mark sensitive data?
Which outside users need read-only, watermarked sessions, and how will an unmanaged device get the extension?
What is the current extension inventory, and what risk score will trigger removal across the estate?
Where are prompts, event logs and the console hosted? Get the region, India or not, written into the contract.
Which desktop apps and non-web traffic still need DNS filtering, endpoint DLP or network controls alongside it?
What is the licence unit, the term, and the post-acquisition roadmap? Ask for the quote in INR with GST.
Questions buyers ask
Ready to evaluate Workforce Protector?
See which AI tools and extensions your staff really use, or let a TechBag advisor scope a monitor-only pilot on one department’s browsers.
Stats, ratings, review counts and pricing are illustrative and sourced from public materials; verify before purchase.