- BFSIBanking, Financial Services & Insurance
- HealthcareComing soon
- ManufacturingComing soon
- Retail & E-CommerceComing soon
Menlo Security
Browser security that runs risky sessions in a cloud twin browser, not on the laptop— Menlo Security’s secure enterprise browser, zero trust app access, file sanitisation, data masking and AI agent security, and how each one is licensed. This hub covers five Menlo Security products.
Buy through TechBag
Same software. Better outcome — at a lower cost.
The company, at a glance
Quick answer
Five intel pages. Secure browsing, zero trust access, file sanitisation, data masking and AI agent security.
Menlo’s line, product by product — every linked card is a full intel page, from the secure enterprise browser and private-app access to CDR, the AI data-masking add-on and agent runtime security.
Menlo Secure Enterprise Browser
Risky pages open in a cloud twin, not the laptop.
A Secure Extension in Chrome or Edge plus the Menlo Cloud, which sends only sanitised HTML back; HEAT Shield AI checks each page.
Menlo Secure Application Access
Private web, SSH, RDP and legacy apps, no VPN.
Reached from any standard browser, an extension or the optional Menlo Security Client, with sign-in over SAML 2.0 or OpenID Connect.
Menlo File Security
Rebuilds each file from known-safe parts.
Positive Selection CDR, from the Votiro deal, treats every file as hostile and rebuilds it for the browser, email, portals and S3.
Menlo AI Adaptive DLP
Masks PII, PHI and card data rather than blocking.
AI detection finds sensitive fields in uploads, downloads, email, collaboration tools and cloud storage, then masks them in place.
Menlo Agent Runtime Security
A disposable cloud browser for AI agents.
Agent sessions run in remote, disposable containers that strip hidden instructions before the agent reads a page; via proxy or MCP.
Remote Browser Isolation
Platform & engineThe engine inside the Secure Enterprise Browser rather than a separate SKU: a hardened cloud browser whose patented Adaptive Clientless Rendering sends sanitised HTML, not pixels. Gartner Peer Insights still lists it as Menlo Secure Cloud Browser, so TechBag covers it on the Secure Enterprise Browser page
Browsing Forensics
Platform & engineA paid add-on that records sessions like video and captures page resources for investigators. Menlo says it does not retain the captures, which go to storage the customer chooses. Covered on the Secure Enterprise Browser and Secure Application Access pages
Browser Posture Manager
Platform & engineChecks Chrome and Edge settings against CIS-style benchmarks and pushes corrected policy. Menlo sells it as a platform capability rather than a product with its own page, so TechBag explains it on the Secure Enterprise Browser page
Menlo Secure Storage
Platform & engineA module launched in August 2025 alongside Adaptive Web, as part of the Secure Enterprise Browser. Menlo documents no separate licence for it, so TechBag does not page it on its own
Menlo Security sells across 2 of the products TechBag carries in network security & SASE. The Network Security & SASE guide shows how the category splits and which part is yours. →
Also sold in Data Security & Privacy (1 product).
Why “the browser is the endpoint” is the whole story
Most web gateways decide whether a page is safe and then let it run on the device. Menlo runs the risky page in a hardened browser in its own cloud and sends back only sanitised content to the browser staff already use. Files get rebuilt, sensitive fields get masked, and the same cloud now hosts AI agents’ browsing — that is the reason to shortlist it.
Menlo Browser Security Platform
Each customer gets a dedicated tenant run from a web console or API, with the cloud twin browser updated within 72 hours of a release.
Menlo Secure Extension
Adds visibility, DLP controls and app access inside Chrome, Edge or an AI browser; pushed by existing device tools or an extension store.
HEAT Shield AI
Reads the whole page visually along with its URL and DOM, using Google Gemini; Menlo claims over 90% detection of zero-day attacks.
Menlo Security Client and Menlo Connect
The client holds policy in the office, at home or roaming and handles captive portals; PAC files, proxy chaining and firewall forwarding also work.
Start with the job — risky web, private apps, files, personal data or AI agents — then add the modules on top.
Peer & market recognition
Every claim on this hub traces to one of these public signals.
Leader and Fast Mover, Secure Enterprise Browsing
the second consecutive year, among 16 vendors evaluated; Menlo announced it on 3 December 2025
Leader and Outperformer, ZTNA 2025
28 vendors evaluated, announced 9 July 2025; the 2024 edition placed Menlo as a Leader and Fast Mover
Leader, Zero Trust Browser Security 2025
also a Company to Action in the Frost Radar, which puts Menlo’s share second, at about 18.7%
Security Partner of the Year 2026
in Data Protection, after a 2025 award in Application Security; a partner award, not an analyst placement
Acquired Votiro
adding Positive Selection CDR and data masking, now sold as File Security and AI Adaptive DLP
Bill Robbins named CEO
President since 2024 and formerly of Mandiant, FireEye, Sophos and Symantec; co-founder Amir Ben-Efraim became Executive Chairman
No CVEs listed in NVD
a keyword search of NVD for Menlo Security returned none in October 2026; the service is SaaS
The company in six figures
See the platform, hear the pitch
How Alliance Bank Strengthened Browser Security with Menlo
A September 2026 case study from Alliance Bank, a Malaysian bank, on zero-hour phishing and zero-day malware in the browser.
Wellstar Health System: Browser Security Without Friction
A September 2026 conversation with Wellstar, a Georgia health system, on protecting patient data without slowing clinicians.
Turning Commercial Browsers Into Secure Enterprise Products
A September 2024 talk in which Menlo’s John Wrobel argues browsers need the controls operating systems already get.
Where Menlo Security sits — the grids
Two company-level views you won’t find on any vendor site — tap any dot for the rationale. The category-level grid lives on the product page.
Menlo Security Across Its Solution Areas
Each dot is a Menlo Security solution area: competitive position vs category momentum.
The founding business: a cloud twin browser behind a proxy with inline CASB, rated a Leader and Fast Mover by GigaOm in 2025.
Isolation Depth × SSE Breadth
How far each vendor renders risky pages away from the device vs how much of SSE it sells under one contract.
Isolation is the core, with a web proxy, inline CASB, ZTNA and DLP around it; there is no DNS layer and no API-mode CASB.
Positions are TechBag’s illustrative synthesis of public review-platform standings and vendor documentation — not a reproduction of any analyst graphic. Verify before relying on it.
New to this? Learn it properly.
Zero-jargon starting points, in reading order. Each links into the deep education on the product page.
Where should you start with Menlo Security?
Answer three questions; we’ll point you at the right starting product. No email required — this isn’t that kind of quiz.
1. What problem is forcing the decision?
2. Where does the risk arrive?
3. Who will own it?
Five products, one browser platform
The browser, app access, file sanitisation, data masking and agent security share one cloud; each is licensed on its own.
Read →Isolation, extension or both?
The hybrid browser pairs a Secure Extension with cloud isolation; clientless use is one mode, and an optional client adds roaming.
Read →Names that changed
Older quotes may say Isolation Platform, Secure Cloud Browser or Secure Internet; Votiro’s products are now File Security and AI Adaptive DLP.
Read →Packages and add-ons
Menlo prices by Protect, Secure or Manage and user count, then adds modules such as Browsing Forensics, File Security or AI Adaptive DLP.
Read →Mumbai PoP, global logs
Browsing can run through Mumbai, but logging is listed as global; export logs to your SIEM to keep the 180 days CERT-In expects.
Read →Where Menlo fits
The Network Security & SASE category’s Secure Web & DNS guide sets web gateways, DNS filters and isolation proxies side by side, the market Menlo’s browser sells into.
Read →The acronym decoder
Every term on these pages, in one place- RBI
- Remote browser isolation: the page runs in a remote browser and only safe output is sent on.
- Secure enterprise browser
- Work-browser security, by a dedicated browser, an extension, or isolation as Menlo does it.
- ACR
- Adaptive Clientless Rendering: Menlo’s patented method of sending sanitised HTML, not pixels.
- Cloud twin browser
- Menlo’s hardened copy of the user’s browser that runs each risky session in its cloud.
- HEAT
- Menlo’s label for web attacks built to slip past URL categories and reputation checks.
- CDR
- Content disarm and reconstruction: rebuilding a file from safe parts rather than scanning it.
- Positive Selection
- Menlo’s CDR method: assume the file is hostile and copy across only known-safe content.
- ZTNA
- Zero trust network access: access to one application at a time instead of a whole network.
- Data masking
- Hiding sensitive fields inside a file or form so the rest can still be shared.
- Inline CASB
- Controls on SaaS logins, shares, uploads and downloads applied as traffic passes the proxy.
- MCP
- Model Context Protocol: a standard way for AI agents to reach tools; MARS can sit on it.
- PAC file
- Proxy auto-config: a script that tells the browser which proxy to send traffic to.
Buy it like you’ve done this before
The procurement playbook TechBag runs with IT buyers — steps, licensing cheat-sheet, and the pitfalls that cost quarters.
Pick the products, then the add-ons
Start from the browser, app access or agent runtime you need, then decide on Browsing Forensics, File Security and AI Adaptive DLP as separate lines.
Count the users
Menlo prices by the products deployed and the number of user licences, with volume discounts. Run its EchoQuote estimator for a first budget figure.
Choose how traffic reaches the cloud
Decide between the Secure Extension, the Menlo Security Client, PAC files, proxy chaining or firewall forwarding before the pilot, not after it.
Plan log export for CERT-In
Mumbai serves proxy and isolation traffic, but logging is listed as global; stream logs through the Log Export API to a SIEM that holds 180 days.
Settle support and renewals
Basic support is included and Menlo Care360 is the premium tier. Agree which one you are buying, and the renewal terms, in writing.
Get it priced in rupees
Menlo publishes no INR price; its one public figure is a US-only marketplace listing. TechBag scopes products, add-ons and users and quotes INR with GST.
The licensing cheat-sheet
| Product | Licensing model | How you enter | Best for |
|---|---|---|---|
| Secure Enterprise Browser | Per user · priced by products deployed and user count · Browsing Forensics is an add-on | Quote; AWS US listing $130/user/yr | Phishing and risky web |
| Secure Application Access | Per user · licensed apart from the browser · optional client for legacy apps | Quote or EchoQuote estimate | VPN and VDI replacement |
| File Security | Separately sold · covers browser, email, portals and AWS S3 | Quote; no Marketplace price | File-borne malware |
| AI Adaptive DLP | Add-on module to the Menlo platform | Quote with the platform | Masking personal data |
| Agent Runtime Security | New product line · no licence unit published | Quote; no price published | AI agents on the web |
Every Menlo product is quoted per user, by the products deployed (Protect, Secure and/or Manage) plus add-ons such as Browsing Forensics, File Security and AI Adaptive DLP; the EchoQuote tool gives a budget estimate. The one public figure, $130 per user per year on a US-only AWS Marketplace listing for up to 99 users, is not an Indian price. TechBag gets the quote itemised in INR with GST.
Five pitfalls that cost buyers quarters
Treating $130 as the price
The only public figure is a US AWS Marketplace listing for up to 99 users with Premium Support. It is not an Indian or enterprise rate; get a quote.
Expecting a DNS filter
Menlo is an isolation proxy with inline CASB. There is no DNS-layer product and no API-mode CASB, so pair it with a resolver if you need one.
Assuming nothing gets installed
Clientless isolation is one mode. The hybrid browser uses a Secure Extension, and roaming or legacy-app access uses the Menlo Security Client.
Reading Mumbai as data residency
The status page lists Mumbai for proxy and isolation, but logging is global. Ask where logs and captures are stored, and put it in the contract.
Assuming DLP comes with the browser
Browser DLP controls ship with the platform, but AI Adaptive DLP is a separate add-on. Check which one the quote actually includes.
The evaluation kit
Each intel page carries an 8-question vendor checklist and a value calculator:
Skip the homework entirely
Bring your requirements and current tool bills — a TechBag advisor models the whole decision for you.
Book a discovery call →The forces shaping this market
Four trends with momentum scores (TechBag’s read of analyst and market signals) — and what each means for your next decision.
Category momentum — estimated market growth
Illustrative CAGR synthesis**TechBag’s illustrative estimate, not a quoted analyst figure. The takeaway: buyers are moving security into the browser and extending it to AI agents — which is why Menlo added a secure enterprise browser in 2024 and agent runtime security in 2026.
Security moving into the browser
Menlo launched its hybrid Secure Enterprise Browser in February 2024, and GigaOm rated it a Leader for the second year running in 2025.
What it means for you
Decide whether controls sit in the browser, the network or both.
AI agents as browser users
Menlo launched agent runtime security in March 2026 and extended it in August to Copilot, Gemini in Chrome, Claude Code and Claude Cowork.
What it means for you
List which agents browse for your staff before you set policy.
Browser access instead of VDI
Menlo claims Secure Application Access can cut VDI total cost of ownership by up to 80%; that is its own figure.
What it means for you
Price the VDI you would retire before you trust any saving.
Masking rather than blocking
Menlo turned Votiro’s data masking into AI Adaptive DLP, which hides PII, PHI and card fields and leaves the file usable.
What it means for you
Ask whether a DLP tool can redact, or only block.
Questions buyers ask about Menlo Security
Ready to shortlist Menlo Security?
Open any of the five intel pages for the deep dive, or let a TechBag advisor build the case with you — the products and add-ons to license, the user count, quotes, trials, GST invoicing and lifecycle support included.
Stats, positions and figures are illustrative syntheses of public materials; verify before purchase.