Chrome compatibility, without Google and without loose defaults.
Prismara Browser is a hardened, de-Googled Chromium for Windows, macOS and Linux. Your users keep the web compatibility they know from Edge and Chrome, while you get strict defaults, central policy that cannot be quietly weakened, and security events that go straight to your SOC.
See it working
Shown with sample data.
What Prismara Browser does
Hardened defaults
JavaScript JIT off by default, strict site isolation and DNS over HTTPS, applied as a locked SovSec security baseline.
Google removed
No Google sign-in, sync or background services, and no network connections nobody asked for.
Policy watchdog
The browser checks its own policy while it runs. If anyone weakens a setting, it raises a tamper event instead of carrying on silently.
Dangerous downloads blocked
Risky file types are blocked by type on each platform, including disk images (ISO, VHD), OneNote files, macro-enabled Office documents and AppImages.
Events for your SOC
Policy applied, policy tampered with, browser updated and download blocked: signed, hash-chained events for Prismara SOC or Microsoft Sentinel, pseudonymised with your tenant's key.
Privacy in the telemetry
A blocked download is reported by file type only, never by file name.
Central policy
One policy file produces the Windows registry, macOS profile and Linux settings. Customer overlays can only tighten it.
Company sign-in
Single sign-on with your company account through the operating system on Windows and macOS.
How it's secured
Prismara Browser follows the engineering rules shared across the suite, plus these product-specific measures.
Fast patching
Targets: 24 hours for exploited vulnerabilities, 48 hours for critical and high, 72 hours for routine fixes, 7 days for a new major version.
Zero unexpected egress
Every build is tested against a logging proxy to catch connections nobody asked for.
Signed updates
The browser only accepts updates whose manifests carry a valid signature.
Tamper-evident policy
Weakening the policy, by registry edit, profile change or config file, is detected at runtime and reported to your SOC.
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.