Menlo Security announced the Menlo IRIS Browser Extension, which gives security teams visibility into and control over what happens inside the browsers employees already use, from shadow AI use to risky third-party extensions. With no browser to replace, no hardware to add, and a simple extension form factor to install, Menlo IRIS can go from proof of value to deployment fast.
Many organizations assume their firewalls, secure web gateways, and endpoint tools already cover the browser. Most of that protection was built for the network and the endpoint, though, and misses what happens inside the browser session, where work now happens. Everyday actions like copying, pasting, uploading, and taking screenshots often go unseen, which shows up clearly in the case of employees’ GenAI use. According to the Verizon 2026 Data Breach Investigations Report, regular use of AI on corporate devices tripled from 15% to 45% of employees in one year, and 67% of users are using non-corporate accounts on their corporate devices to access AI services.
Browser extensions added by users create another blind spot. Most security teams know extensions can carry risk, but few know how many are installed across their users’ devices, and an extension’s risk profile can change at any time without notice. Complicating Shadow AI issues still further, Verizon’s 2026 DBIR also found that the average company has more than 15% of users running unauthorized AI browser extensions.
“Security teams know the browser is a blind spot. Many have put off fixing it because they didn’t want to replace their existing security stack or take on a big migration project. Menlo IRIS removes those obstacles. Menlo IRIS slots seamlessly into tools the security team is already running, and even a small team can get essential security running quickly on the browsers employees already use. This delivers immediate visibility into where company data is going, including into AI tools,” said Bill Robbins, CEO of Menlo Security.
Menlo IRIS closes the Browser Security gap with secure enterprise browser controls, delivered as a centrally managed extension that security teams can deploy and run. Key capabilities include:
- Data-loss controls: Clipboard, print, upload, and download controls, watermarking, read-only pages, developer tools restrictions, and screenshot deterrence help keep sensitive data from leaving the session.
- Guardrails for GenAI and the wider web: Web filtering steers users toward sanctioned tools, including GenAI, and controls what data goes into them without banning the tools people rely on.
- File security: Inline inspection for DLP violations, viruses, and malware, with optional Content Disarm and Reconstruction (CDR) to deliver clean, usable files instead of simply blocking them.
- Extension audit, risk profiling, and control: An enterprise-wide inventory of third-party browser extensions with real-time risk scores and management controls, giving teams visibility most have never had.
- Threat Prevention via optional HEAT Shield AI to defend against zero-day phishing, social engineering, and malvertising exploits at click time.
- Identity and oversight: Forced authentication to the extension and centralized web logging provide teams the audit trail they need for SOC 2, HIPAA, and GDPR reviews and cyber insurance questionnaires.
Menlo IRIS deploys through the Chrome Web Store, Microsoft Intune, JAMF, or other MDM and UEM tools, and works on Chrome, Edge, Safari, Firefox, and Chromium-based AI browsers. Because users keep their own browser, its vendor’s security patches continue to reach them as released. Most controls are enforced directly in the browser session, with no proxy routing traffic and no inline decryption slowing users down, so Menlo IRIS works alongside existing network and endpoint tools instead of replacing them.
The Menlo IRIS Browser Extension is available now.
