The browser has effectively become the new workspace. A significant portion of the workday now happens inside a web browser, including access to SaaS apps and corporate data, alongside about 11% of time spent on personal browsing. At the same time, organizations are relying more heavily on web-based SaaS applications over the next 24 months.

This shift creates a few challenges:

• More employees and contractors are accessing corporate apps from personal, unmanaged devices.
• Browsers are inherently exposed to threats like account takeovers, malicious extensions, and phishing.
• Security teams often lack visibility into what’s happening in the browser on these unmanaged endpoints.

Because of this, the browser is no longer just a productivity tool; it’s a primary control point for protecting sensitive data. Organizations are reimagining their cybersecurity approach by adding browser-level protections that improve visibility, enforce policy, and reduce risk across both corporate and personal devices.

The research highlights that a large share of organizations allow employees and contractors to access corporate apps from personal devices. These endpoints are often outside traditional IT control, which introduces several risks:

• Browser-based attacks are common: A notable percentage of respondents reported browser-based attacks in the last 12 months, including account takeovers and malicious extensions.
• Limited confidence in security controls: Many organizations are not confident in their ability to address security issues on unmanaged or poorly managed devices; only about 6% felt very confident.
• Higher business impact: Respondents reported that threats on unmanaged or poorly managed devices led to higher financial cost and business impact compared with other types of security incidents.
• Frequent phishing exposure: A significant portion of organizations experienced phishing attacks over the last 12 months, which are often delivered and executed via the browser.

These findings point to a clear need to rethink device and browser security. Organizations are looking for ways to strengthen policies and tools that can protect data directly in the browser, even when the underlying device is not fully managed by IT.

Prisma Access Browser is designed to extend the protection of a Secure Access Service Edge (SASE) platform directly to the browser and to personal devices. It helps organizations reshape how they secure modern, browser-driven work by providing:

• Browser-based data loss prevention (DLP): Protects sensitive data as users work in SaaS apps and web resources, even on personal devices.
• Zero Trust access controls: Applies least-privilege access policies at the browser level, reducing the risk of account takeover and unauthorized access.
• SaaS visibility: Gives security teams deeper insight into which SaaS apps are being used, how they’re used, and where data is going.
• AI-powered threat protection in real time: Detects and helps block threats such as phishing and malicious browser activity as they occur.

By focusing on the browser as the primary workspace, Prisma Access Browser helps organizations reduce risk from cloud migration and hybrid work, while giving security teams the visibility and control they’ve been missing on unmanaged and poorly managed devices.