ASAI Security ResearchIndependent public-source research
Public reviewread only

Solution approach

Browser and extension controls

Control AI use, uploads, downloads, copy and paste, and data movement in managed browsers or extensions.

Use-case context

How this approach relates to the selected use case

Employee AI and data: Additional if: Employees use a managed browser or extension — Employees use AI through a managed browser or browser extension where data and session controls can operate.

Back to use case →
Research scopeVendorsPublicly documented vendor profiles
Evaluation guideRequirementsRequirements connected to the selected use case
Evidence basisSourcesPublic claims linked to their original sources
Unresolved itemsQuestionsMissing support is labeled instead of assumed
View research coverageThese counts describe available public research, not product quality or suitability.Expand
Vendor profiles
15 shown in this view
Security requirements
2 to review
Strong public support
26 requirement records
Limited public support
4 requirement records
Open research
0 with no supporting claim · 0 incomplete

Evaluation guide

What to verify for this use case

Additional security requirement

Browser and business-application controls

Apply session-level controls in browser and software as a service (SaaS) workflows, including uploads, downloads, copy/paste, sharing, and identity-aware access decisions.

Questions to test
  1. A session-level policy controls upload, download, copy, paste, sharing, or form submission in a browser or software as a service (SaaS) workflow.
  2. The policy decision includes user, app, session, or identity-aware context.
  3. The event record shows affected action, user, app, and timestamp.
Related frameworks

NIST AI RMF Playbook · NIST Cybersecurity Framework 2.0 · CIS Critical Security Controls · ISO/IEC 42001 · OWASP GenAI Security Solutions Landscape

Foundational security requirement

Sensitive-data protection for generative AI

Detect, classify, redact, or block sensitive data in prompts, responses, files, retrieval, memory, and AI-connected workflows.

Questions to test
  1. Sensitive prompt, response, or file test data is detected and classified during an AI interaction.
  2. A policy redacts, blocks, coaches, or records the sensitive data event before it leaves the approved path.
  3. The evidence record shows data class, user, app or model, action, and timestamp.
Related frameworks

NIST AI RMF Playbook · NIST Cybersecurity Framework 2.0 · CIS Critical Security Controls · ISO/IEC 42001 · OWASP GenAI Security Solutions Landscape

Vendor research

Vendors with public research for this approach

Choose vendors to compare →

Only requirements explicitly connected to the selected use case are shown. Vendors are grouped by whether this approach is a core product focus or related coverage, then ordered by documented support across the requirements shown. This organizes public research coverage; it is not a product ranking or recommendation.

Evidence labelsStrong public supportLimited public supportNo supporting claim foundResearch incomplete
VendorBrowser and app controlsPrompt and data protectionSourcesAction
Core product focusThis approach is central to how these vendors present the product · 4 vendors
AurascapeGrowth stageSupport found for 2 of 2 requirementsStrong public supportStrong public support1Profile →
Island Enterprise BrowserScaledSupport found for 2 of 2 requirementsStrong public supportStrong public support2Profile →
LayerX SecurityGrowth stageSupport found for 2 of 2 requirementsStrong public supportStrong public support2Profile →
Obsidian AI SecurityGrowth stageSupport found for 2 of 2 requirementsStrong public supportStrong public support1Profile →
Related coverageThese vendors address the requirements through another core product focus · 11 vendors
CyberhavenScaledSupport found for 2 of 2 requirementsStrong public supportStrong public support1Profile →
Lakera / Check PointEstablishedSupport found for 2 of 2 requirementsStrong public supportStrong public support1Profile →
Netskope AI SecurityEstablishedSupport found for 2 of 2 requirementsStrong public supportStrong public support1Profile →
Palo Alto Networks Prisma AIRSEstablishedSupport found for 2 of 2 requirementsStrong public supportStrong public support1Profile →
Prompt Security / SentinelOneEstablishedSupport found for 2 of 2 requirementsStrong public supportStrong public support2Profile →
Proofpoint AI Security / AcuvityEstablishedSupport found for 2 of 2 requirementsStrong public supportStrong public support2Profile →
Zscaler AI SecurityEstablishedSupport found for 2 of 2 requirementsStrong public supportStrong public support2Profile →
AIM Security / Cato NetworksScaledSupport found for 2 of 2 requirementsLimited public supportStrong public support1Profile →
Cloudflare AI Security SuiteEstablishedSupport found for 2 of 2 requirementsLimited public supportStrong public support1Profile →
Harmonic SecurityEmergingSupport found for 2 of 2 requirementsStrong public supportLimited public support1Profile →
Varonis AI SecurityEstablishedSupport found for 2 of 2 requirementsLimited public supportStrong public support2Profile →

Company maturity remains a filter and profile attribute; it does not affect the research-coverage order.