9 of 12 UEMs lock a device to one app; 2 of 14 access tools control only the browser
Device lockdown against browser lockdown, counted across TechBag's UEM and zero-trust access guides, with list prices and the India rules, as of September 2026.
The 2024 version of this piece described device lockdown and browser lockdown as two rival strategies and asked readers to weigh them. An Indian IT team does not weigh them in the abstract. It has a fleet of company laptops, a set of shared tablets, and a growing number of contractors on their own machines, and it needs to know which control fits which.
01The question is who owns the device
Device lockdown means enrolling the device in a UEM and restricting what runs on it, down to a single app in kiosk or dedicated mode. It needs the device to be yours. Browser lockdown means policy inside the browsing session: allowed sites, blocked downloads, no copy and paste. It works on a device you do not control, because the browser is the only thing you install.
Device lockdown is in almost every UEM; browser-only control is a niche of two
Share of products in two TechBag decision guides, %, as of September 2026
75%
UEM and MDM products that lock a device into kiosk or dedicated mode
9 of 12
14.3%
Zero-trust access products delivered only through the browser
2 of 14
Source: TechBag UEM & MDM and zero-trust access guides; TechBag count · as of 30 September 2026
The two are not rivals on a managed device. A kiosk browser is browser lockdown delivered by the UEM: 42Gears bundles its SureLock kiosk and SureFox browser into SureMDM Standard at US$3.99 a device a month, and Hexnode’s kiosk tiers include a secure browser mode.1
02What each one cannot see
A browser-only product reaches web applications. Desktop applications, SSH, RDP and server-initiated protocols are outside a browser’s reach, and device posture is limited to what the browser can observe.2 Device lockdown sees the whole machine but costs the user flexibility, and every exception becomes a ticket.
03Cost and rules in India
Hexnode Pro lists at US$2.20 a device a month, Microsoft Intune Plan 1 at US$8 a user a month and often at nothing inside Microsoft 365 E3 or Business Premium.1 Chrome Enterprise Premium launched at US$6 a user a month.5 All are USD lists, invoiced by TechBag in INR with 18% GST. Either control generates logs, and CERT-In’s Directions of 28 April 2022 require ICT logs to be kept for 180 days within Indian jurisdiction.6 Locking a personal phone also touches personal data: the DPDP Rules, notified on 13 November 2025, bring their security-safeguard duties into force on 13 May 2027.7
Sources
- TechBag, UEM & MDM decision guide (12 products; kiosk support; Hexnode, 42Gears and Intune list prices) — prices read 22 August 2026
- TechBag, Zero-trust access guide (14 products; access mode, reach and posture per product) — version of 30 September 2026
- Verizon, 2023 Data Breach Investigations Report (74% human element) — June 2023 As quoted in the 2024 piece; not re-read.
- Help Net Security, Lessons for organizations from the Verizon 2026 DBIR (62% human element) — 25 May 2026
- Computerworld, Google adds a premium option for Chrome Enterprise (from US$6 per user per month) — 10 April 2024
- CERT-In, Directions under section 70B(6) of the IT Act, 2000 (180 days of logs within Indian jurisdiction) — 28 April 2022
- Digital Personal Data Protection Rules, 2025: phased commencement — notified 13 November 2025
Related on TechBag: the UEM & MDM guide filters for kiosk and dedicated devices; the zero-trust access guide covers the browser-delivered options for contractors.
Disclosure. TechBag is a software reseller: it earns a margin when a reader buys through it, including from vendors named here. The analysis is TechBag’s own; no vendor paid for or saw this piece before publication. Facts are labelled reported, TechBag count or our view.
Keep reading
