The Sophos Workspace Protection team is pleased to announce the new Sophos Protected Browser Extension, which works with Chromium Browsers on Windows and Macs (such as Chrome and Edge) to make it easier than ever to take advantage of the added security and controls it provides for your apps and data.

Why an extension? Protect the browser you already use

For many of you, the benefits of a protected browser are clear: stronger control over corporate data, visibility into generative AI and shadow AI usage, protection against modern web threats, and just a better, more secure foundation for hybrid and remote work.
But some of you have told us that you’ve invested in deploying and managing Chrome, Edge, or other Chromium-based browsers, and replacing those browsers may not be practical – at least initially.

That's why we're excited to introduce the Sophos Protected Browser Extension.

The new extension allows you to bring much of the policy enforcement, governance, and data protection capabilities of the full Sophos Protected Browser directly into your existing Chromium-based browsers, including Microsoft Edge and Google Chrome, on both Windows and Macs.

Get visibility into shadow IT and GenAI and then block unsanctioned apps, and allow your preferred sanctioned apps

What it does

The Sophos Protected Browser Extension can enforce many of the policy actions that the full Sophos Protected Browser supports.

You can apply web and application policies across both deployment models, providing a consistent management experience and ensuring that users receive the appropriate controls regardless of how they access applications.

Capabilities available through the extension include:

• Application and website policy controls
• Data boundary controls, including copy and paste restrictions
• File upload and download controls
• Identity provider-based browser enforcement

This allows you to begin governing how data moves among corporate applications, AI services, personal applications, and unmanaged destinations without requiring a new browser to be deployed.

As you might expect, a browser extension cannot offer the full capabilities of Sophos Protected Browser. These are some of the added capabilities you get with the full Sophos Protected Browser:

• Hardened browser that is more resilient to browser-based attacks and credential theft
• Built-in browser clients for RDP and SSH with full policy control
• Built-in ad blocker
• Data boundary controls are supported with the extension, except for screen capture and recording controls, which are only available with Protected Browser
• Device Posture can check for Sophos Endpoint protection; however, the Synchronized Security heartbeat status is only available with Protected Browser

Easily set up device posture checks for access policies with just a couple of clicks

Use the extension, the full browser, both, or transition over time

The Sophos Protected Browser Extension provides a super easy and flexible way to begin gaining visibility into activity while protecting users, applications, and data. 

It enables a new deployment model that paves the way towards the full Sophos Protected Browser experience when you’re ready. Instead of deploying the full Sophos Protected Browser to every user initially, you can start by managing and getting visibility from your existing browsers, then gradually expand Sophos Protected Browser usage to business-critical applications as you and your users become familiar with the solution.

You can define policies that determine when a user can remain in their existing browser and when they must use the full Sophos Protected Browser.
For example:

• General web browsing can continue in Chrome or Edge
• Internal business applications can remain accessible through the extension
• Highly sensitive SaaS applications can require the full Protected Browser
• Users attempting to access protected resources can be automatically redirected to the full browser experience

The extension deployment supports a strong hybrid operating model and a clear migration path to Sophos Protected Browser.

Whether you're ready for a full Protected Browser deployment or just taking the first step to protect existing browsers, the extension provides an easy path to protection. The extension can redirect users to the Sophos Protected Browser should you ever need it.

Get started today

The Sophos Protected Browser extension is available to all Sophos Workspace Protection customers at no extra charge.

You can download everything you need to deploy it in your environment by going to My Environment > Installers in Sophos Central, then selecting the Workspace Protection section.

Download the new browser extensions from Sophos Central

Invite users to self-install 

Self-setup emails make it easier to deploy Sophos Protected Browser. Invite users to install it, and they’ll receive an email with the browser installation link. This option is especially useful for BYOD, contractor, and guest access scenarios.

Easily invite users to install the Sophos Protected Browser

Learn more about Sophos Workspace Protection

If you’re new to Sophos Workspace Protection and the Sophos Protected Browser that’s included, be sure to see what it can do to help secure your apps, data, workers, and guests, no matter where they are, with our useful TechVids how-to videos and helpful use case series.