What is remote browser isolation?

When a user opens a page, the isolation platform loads it inside a remote, air-gapped browser. Only a safe visual stream (or a sanitized DOM) is sent to the user’s real browser; keystrokes and clicks travel back to the container. Nothing from the live web executes locally, so protection does not depend on recognizing the threat first — which is the decision evasive attacks are designed to defeat.

Detection-based web security (secure web gateways, URL filters, antivirus) fails precisely on the newest threats: zero-hour phishing pages and attacks assembled in the browser at runtime. Isolation removes the failure mode architecturally. It is typically deployed for high-value users first — executives, finance, administrators — or for all browsing in regulated environments, and increasingly for AI agents that browse autonomously.