AI Governance & Security Vendor Wiki

5 min read

Island

Primary category: enterprise-browser.

One-liner — A purpose-built, Chromium-based “enterprise browser” that bakes security, DLP, and access controls directly into the browser itself, so the place where work actually happens becomes the control point.

What it does

Island ships a full enterprise browser (built on Chromium, so it looks and feels like Chrome) with governance, security, and IT controls embedded in the browser runtime rather than bolted on via a proxy or endpoint agent. Because the browser sees the last-mile rendered session, it can enforce policy on what users do inside web and SaaS apps: copy/paste, downloads/uploads, screenshot, printing, watermarking, and data redaction — plus device posture checks, conditional access, and full session logging. Common buyer use cases: securing BYOD and contractor/third-party access without VDI, replacing virtual desktops, and giving regulated firms an auditable, locked-down path into sensitive SaaS.

Where it sits in the stack

Lives at the UX layer in enterprise-browser. For the lethal trifecta, an enterprise browser is primarily an egress control (it can stop data leaving via copy/paste, upload, download, or unsanctioned destinations) and secondarily an untrusted-input control (it isolates/inspects web content and risky sites at the point of use); with DLP-style inspection it also touches sensitive-data handling. It sits at the boundary between the user’s endpoint (potentially untrusted/yellow zone) and corporate SaaS (green zone). For an AI-governance use case, the browser is a natural chokepoint for catching paste-into-chatbot and file-upload-to-AI-tool behavior.

Deployment & architecture

SaaS-managed; the unit deployed is the Island browser application installed on user endpoints (Windows, macOS, Linux, ChromeOS, plus mobile), centrally policy-managed from Island’s cloud console. No inline network proxy is required because enforcement happens in the browser. Integrations: IdP/SSO (SAML/OIDC) for conditional access, SIEM/SOC for session and event logs, and existing EDR/MDM for device posture. Island positions the browser as able to reduce reliance on VDI and some SASE/VPN paths.

Positioning & differentiators

Island is the best-funded pure-play in the category and is generally seen as the market-defining “enterprise browser as a product” vendor, alongside prisma-access-browser (Palo Alto, via the Talon acquisition). Its pitch is a complete, polished Chromium browser that replaces the consumer browser for work, versus:

  • Browser security extensions/overlays like layerx that add controls to the browser the user already runs (lighter touch, less control) — see browser-security-extension.
  • Remote browser isolation vendors like menlo-security that render risky content in the cloud rather than shipping a managed local browser.
  • Platform browsers like chrome-enterprise and microsoft-edge-business that offer management and some DLP natively at lower/zero incremental cost but less depth.
  • Other independents/neighbors: seraphic (now CrowdStrike), red-access (agentless/any-browser).

Island’s differentiation is depth of in-browser control and breadth of use cases (VDI replacement, third-party access) rather than being an add-on.

Ownership, funding & M&A

Independent and private. Founded 2020 by Mike Fey (CEO, ex-Symantec/McAfee/Blue Coat president) and Dan Amiga (CTO). HQ Dallas, TX with R&D in Tel Aviv. Funding history: Series C $100M at $1.5B (Oct 2023) → Series D $175M at $2.9B (Apr 2024, co-led by Sequoia and Coatue) → Series E $250M at ~$4.85B (Mar 2025, led by Coatue; with Insight Partners, Sequoia, Canapi Ventures). ~$730M raised total. No acquisitions by/of Island found as of 2026-06-28. (No seed M&A flag; none found.)

CTO / hedge-fund lens

Enterprise browser is priority: optional — a strong control point but not a Day-1 must-have for every shop. Island fits a fund that wants a single, auditable, heavily-controlled path into sensitive SaaS, or that is trying to retire VDI/VPN complexity for contractors, offshore teams, and BYOD. The data-egress controls (copy/paste/upload blocking, watermarking, session logging) map directly onto two governance concerns a hedge-fund CTO cares about: leakage of MNPI/positions, and unsanctioned use of public AI tools (the browser can block or log paste/upload into chatbots). Costs and the friction of standardizing users on a new browser are the main objections; many funds will first try native controls in chrome-enterprise/microsoft-edge-business or a lighter extension like layerx. No direct SR 11-7 / model-risk role — this is a data-control and access tool, not a model governance tool.

Competitors / alternatives

prisma-access-browser, menlo-security, seraphic, red-access, layerx, chrome-enterprise, microsoft-edge-business.

Open questions / to verify

  • Exact pricing and per-seat economics (not public).
  • Depth/quality of native AI-tool controls (e.g., prompt/paste inspection) vs. a dedicated AI-security layer.
  • Real-world performance/compatibility for trading and other latency-sensitive web apps.

Sources

History

  • [2026-06-28] Stub created from seed registry.
  • [2026-06-28] Researched; established Island is an independent, private enterprise-browser pure-play (founded 2020, Dallas + Tel Aviv R&D), ~$730M raised, Series E $250M at ~$4.8B (Mar 2025, Coatue). Ownership independent, confidence high. No M&A involving Island found. hedge_fund_fit medium.

Graph View

Backlinks