Menlo Security
About
Menlo Security provides a cloud-based browser security platform that protects enterprise users and AI agents from web-based threats including phishing, ransomware, and data exfiltration. The platform uses a hybrid architecture combining local browser controls with cloud-based rendering and threat elimination to secure browser sessions for both human workers and autonomous AI agents. Over 1,000 enterprises use Menlo Security, including 8 of the 10 largest global financial institutions.
Details
Website
menlosecurity.comOfferings
22 active
VenSearch Intelligence
Ideal Customer
- Menlo Security is best suited for enterprises with 500 to 5,000 employees in financial services, healthcare, oil and gas, professional services, retail, engineering, and manufacturing.
- Their platform scales to serve organizations of any size without requiring endpoint software, making them particularly valuable to large, security-conscious enterprises with distributed or hybrid workforces, BYOD environments, and heavy browser-based SaaS usage.
Key Differentiators
- Menlo Security's core differentiator is its patented Isolation Core™ architecture, a cloud-native approach that executes all web content in the cloud rather than on the endpoint, eliminating threats before they ever reach users rather than relying on detect-and-respond methods.
- Unlike competitors that require proprietary browser replacements, Menlo delivers enterprise-grade security within any existing browser via a lightweight Secure Extension, preserving familiar user experiences.
Industries Served
- Menlo Security serves a broad range of enterprise verticals with particular depth in financial services, government, and healthcare.
- They are trusted by eight of the ten largest global financial institutions, 24 Global Fortune 500 companies, and large government institutions including the U.S. Department of Defense.
Service Coverage
- Menlo Security operates as a global company with offices across North America, Europe, Asia-Pacific, and the Middle East.
- Their physical offices span Mountain View, CA (HQ), San Francisco, Bracknell (UK), Tel Aviv (Israel), Tokyo (Japan), Singapore, Seoul (South Korea), Sydney (Australia), Vancouver (Canada), and Bengaluru (India), with team presence in 17 countries across 5 continents.
Partnerships
- Menlo Security maintains a deep strategic partnership with Google Cloud, winning Google Cloud Security Partner of the Year in both 2025 (Application Security) and 2026 (Data Protection), with integrations spanning Google Gemini, Vertex AI, Chrome Enterprise APIs, Google Threat Intelligence/Mandiant, Google Cloud WAN, and Google Security Operations.
- They are a member of the CrowdStrike CrowdXDR Alliance, integrating with CrowdStrike Falcon XDR for unified XDR threat detection.
Company Size & Ownership
- Menlo Security was founded in 2012–2013 in the Mountain View, California area and currently employs approximately 430–500 people across its global locations.
- The company has raised approximately $250–260 million in total funding across seven rounds, including a $100 million Series E in November 2020 led by Vista Equity Partners at an $800 million valuation.
Compliance & Certifications
- Menlo Security holds FedRAMP Moderate Authorization (ATO) for its Cloud Security Platform, covering Remote Browser Isolation and Cloud-Based Internet Isolation technologies, and is also a member of the StateRAMP program for state and local government.
- The company achieved CMMC Level 2 certification for handling Controlled Unclassified Information (CUI) in its dedicated federal enclave.
Compiled from public sources by VenSearch · Last researched October 14, 2026
Offerings
22 offeringsAI Adaptive DLP
An AI-powered data loss prevention capability that detects and prevents unauthorized exposure and exfiltration of sensitive data and corporate IP by both humans and AI agents. It masks data in source files while leaving the file ready for sharing or consumption. Listed as a distinct product under the platform.
AI Agent Security
A guardian runtime for enterprise AI agent deployments that secures autonomous agent workflows within the browser. It applies security controls and prefilters what browser agent sidebars can see and access, protecting against prompt injection, credential theft, goal hijacking, and data exfiltration to external LLMs. It also bridges AI agents to API-deficient legacy applications and data sources.
Browser DLP
A data loss prevention capability delivered through the Menlo Secure Extension that enforces data protection policies for user interactions with trusted sites and web applications directly in the browser. It provides local controls for preventing unauthorized data exposure during standard browsing sessions.
Browser SSE (Browser Security Service Edge)
A Security Service Edge solution that incorporates browser security capabilities alongside standard SSE functions, offered at lower cost and complexity than traditional SSE. It provides the network security controls expected from SSE combined with Menlo's browser-level protection in a single cloud-delivered solution.
Browsing Forensics
A browser session visibility and forensics capability that provides detailed insight into browsing activity. It is used for fast incident resolution, threat hunting, audit and compliance purposes, and general security operations. Listed as a distinct product in the platform product menu.
Browsing Visibility
A solution that provides deep visibility into browser sessions for security operations use cases including incident resolution, threat hunting, audit, and compliance. It gives security teams unprecedented insight into what users and agents are doing inside browser sessions.
BYOD Security
An agentless secure access solution for unmanaged and personally-owned devices that enables access to SaaS and private applications while ensuring compromised endpoints never reach enterprise apps, files, or data. It requires no endpoint agent installation, making it suitable for contractor and employee personal devices.
Compliance Solutions
A set of browser security capabilities tailored to help enterprises meet compliance requirements. It is listed as a distinct solution category in the Menlo platform navigation, addressing regulatory and audit needs through browser session controls and visibility.
Data Security
A solution category focused on stopping unauthorized exposure and exfiltration of sensitive data and corporate IP by both human users and AI agents. It masks data in source files while preserving the file's usability, and is listed as a distinct solution in the platform navigation.
Evasive Ransomware Protection
A cloud-based solution that stops polymorphic and highly evasive ransomware in the cloud before it ever reaches endpoint devices or penetrates the network perimeter. It intercepts ransomware payloads during web browsing activity as part of the cloud rendering process.
File Security
A security capability that stops file-borne threats across web downloads, portal uploads, and email attachments. It protects against malicious files that go beyond browser-based threats and applies file security controls regardless of whether the actor is a human or an AI agent.
Generative AI Governance
A solution that enables safe enterprise access to generative AI platforms such as ChatGPT while protecting enterprise data and intellectual property from being submitted to external AI systems. It applies data protection policies specifically to generative AI interactions in the browser.
Menlo Browser Security Platform
The core platform that secures browser sessions for both human users and AI agents through a single control plane. It combines local security controls via the Menlo Secure Extension with cloud-based protection that routes high-risk browsing activity to the Menlo Cloud for rendering and threat elimination. The platform delivers zero-day threat prevention, file security, data protection, and unified observability across all sessions.
Remote Access
A remote access security solution listed as a distinct product within the Menlo Browser Security Platform. It is referenced in the platform product navigation alongside other core capabilities such as Remote Browser Isolation and Secure Enterprise Browser.
Remote Browser Isolation
A cloud-based isolation technology that renders high-risk web content in the Menlo Cloud rather than on the user's local device or network, eliminating threats before they reach endpoints. It is a core component of the Menlo Browser Security Platform that handles high-risk browsing activity automatically.
Secure Enterprise Browser
An enterprise browser security product listed as a distinct offering within the Menlo platform product menu. It is positioned as a solution that delivers secure browsing capabilities for enterprise workforces without requiring a separate proprietary browser deployment.
Securing Federal Agencies
A zero trust browser security solution tailored specifically for federal and government agencies. It isolates government users and data from web-based threats while providing fast, secure access to applications, and is listed as a distinct solution in the Menlo platform.
Threat Prevention
A threat prevention capability within the Menlo Browser Security Platform that uses real-time, AI-powered detection to protect against zero-day threats, highly evasive adaptive threats (HEAT), and polymorphic attacks targeting the browser. It goes beyond signature-based detection to block unknown and evolving threats.
VDI Reduction
A cloud-delivered solution that eliminates the cost, complexity, and performance issues associated with Virtual Desktop Infrastructure by securing access for all users and devices without requiring a VDI infrastructure overhaul. It provides the same access control and security as VDI through the browser.
VPN Replacement
A clientless, cloud-native solution designed to replace vulnerable legacy VPNs for secure remote access. It provides secure connectivity without requiring a client agent to be installed, eliminating VPN infrastructure and its associated attack surface.
Zero Day Phishing Protection
An AI-powered phishing protection solution that goes beyond traditional signature-based detection to protect against unknown and zero-hour phishing attacks targeting the browser in real time. It is designed to block highly evasive adaptive threats that bypass conventional security tools.
Zero Trust Access
A zero trust network access solution delivered through standard browsers with no infrastructure changes required. It removes the high cost and complexity of legacy ZTNA implementations by enforcing zero-trust policies at the browser session level.
Considering Menlo Security?
Our team will work with you to determine if Menlo Security is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.