Push Security today announced new capabilities to advance browser-native security across enterprise networks. The company designed this update to eliminate legacy secure web gateways (SWGs). Furthermore, it replaces outdated cloud access security brokers (CASBs). This release disrupts a massive market projected to reach $42 billion by 2030.
However, traditional network tools currently face growing industry doubts regarding their core architecture. Recent research reveals that next-generation firewalls miss approximately 60% of malicious web pages. This failure stems from a fundamental structural limitation. Network tools see traffic destinations clearly. Yet, they cannot see what the user actually does on the screen.
“SWGs were designed for a world where the threat was malware crossing the wire, however that world is gone,” said Adam Bateman, CEO of Push Security. “Today’s attacks, like AitM phishing kits, ClickFix lures, session hijacking and OAuth abuse, play out entirely inside the browser session, long after the network proxy has decided to allow the traffic. We built Push to detect and stop attacks at the layer where they actually happen.”
Eliminating the Flaws of Proxy-Based Architecture
Legacy tools intercept and inspect traffic between users and the internet. Therefore, this older method forces all traffic through a slow cloud proxy. This architecture creates network latency and generates constant user complaints. Furthermore, the process leaves the active browser session entirely unmonitored.
Modern credential-harvesting attacks easily defeat these outdated network layers. For instance, adversary-in-the-middle (AitM) phishing kits use infrastructure rotation to bypass blocklists. Many threats even detect gateway sandbox environments. As a result, they hide their malicious behavior during inspection.
Shockingly, 89% of phishing domains remain active for fewer than two days. Attackers also abuse trusted services to deliver malicious payloads. Meanwhile, 82% of modern attacks now run completely malware-free. Attackers operate inside legitimate sessions through credential theft. This strategy generates no signal for a network proxy.
Recently, Push discovered and blocked ConsentFix. This novel attack technique takes over Microsoft accounts without passwords or MFA prompts. The attack remained completely invisible to every proxy-based control. Only robust browser-native security tools can detect this threat.
Driving Innovation and Security Consolidation
Push operates as a lightweight extension within existing browsers. Consequently, the tool requires no proxy infrastructure or complex traffic rerouting. The system observes live sessions directly through the rendered DOM. Thus, it captures credential entries, script behaviors, and file uploads seamlessly.
This approach delivers powerful behavioral phishing protection. It successfully blocks ClickFix attacks and custom domain categories. In fact, ClickFix variants accounted for 47% of initial access attacks last year. Additionally, the platform governs risky browser extensions and inventories shadow SaaS applications. The system also controls enterprise AI tool usage at the session level.
Furthermore, the agent protects unmanaged and BYOD devices easily. Non-managed machines without EDR software trigger roughly 46% of infostealer corporate breaches. This deployment model ensures total browser-native security without requiring intrusive MDM software. Organizations can now achieve full consolidation without disrupting their existing network investments.
Therefore, this platform offers a cost-effective alternative to expensive SSE tiers. It layers on top of existing tools to add critical behavioral detection. Modern security teams can now implement robust browser-native security to stop modern web threats.
“We’re not asking security teams to do a feature comparison,” said Bateman. “We’re asking them to look at the outcomes they’re actually paying for, and whether a proxy that can’t see inside the session is the right tool to deliver them.”
To explore how Security Operations Centers (SOC) play a crucial role in defending against modern cyber threats, read our latest SOC News.
Source: Businesswire
