Browser Isolation Tools in 2026

A user has to open something you do not trust. The page still has to render. It cannot execute on their laptop. Isolation moves the browser off the device so the site never gets a local engine, a corporate IP, or the cookie jar.

Delivery splits four ways on this page: isolation-as-a-service in the cloud, a hardware appliance, a self-hosted container farm, and an SSE add-on on an edge you already pay for. Authentic8 Silo, Everfox ULTRA, Kasm, and Cloudflare Browser Isolation match those four.

Cloudflare for Government hit FedRAMP High on 10 Aug 2026. Isolation is still an add-on on that stack. If the RFP is High, ask whether isolation sits in the authorized boundary before you default to an appliance.

Half the names that used to sit here were browser-safety plugins, dead sites, or the same SSE products already covered next door. The four below are living isolation products with different sensors: a research workspace, a hardsec appliance, a container you host, and an edge add-on.

Authentic8 Silo

Authentic8 sells Silo Workspace as isolation-as-a-service for people who have to visit sites they do not trust (OSINT, threat intel, fraud, journalism) without handing the site a corporate IP or a local browser. The page runs in Authentic8's cloud. The analyst gets a managed browser plus a library of desktop and messaging apps (Telegram, Signal, Maltego, LibreOffice among the ones they name).

The product that used to be “Silo Web Isolation Platform” is now Silo Workspace. Attribution is the paid axis. The pricing page prices one region, two regions, or all regions on the Silo Managed Attribution Network (North America, Europe, Central and South America, Asia-Pacific, Africa and Middle East, dark web, and rapid-response nodes). Every paid tier includes the full workspace, admin controls, and Silo Nexus AI at up to 10 prompts per day.

Best for: Intel, investigations, and fraud teams that need in-region attribution, disposable or persistent profiles, and an audit trail, and that will pay per named analyst rather than per employee.

Key Features:

• Remote Silo for Research browser with configurable profiles and persistent or single-use browsing data.
• Managed attribution network with regional and dark-web egress. Local is one region; Global is all of them.
• Workspace apps, encrypted personal and shared storage, case management, Silo Collector, Silo Gofer multi-site search, and Silo Translate.
• Silo Nexus AI: source-grounded answers, identity-shielded queries, no prompt retention for model training, encrypted conversation logs.

Why we like it: It is the only isolation product here with a public, mechanical per-user price that matches the actual job: research workspaces for named analysts. If the RFP is OSINT, start here instead of an SSE add-on.

Notable Limitations:

• Wrong buy for fleet-wide employee browsing. You do not buy Silo to isolate YouTube.
• Nexus AI is capped at 10 prompts per day on the public tiers. Unlimited is an enterprise conversation.
• No AWS Marketplace listing. Procurement goes through Authentic8.

Pricing: Public, per user per year. 30-day trial, free. Local $1,450 (one region). Multi-Region $2,450 (two regions). Global $3,450 (all regions, including dark web and rapid-response nodes). Same workspace on every paid tier. Enterprise Nexus options are quote.

Everfox ULTRA (Garrison)

Everfox is the hardware isolation buy. Garrison Technology built ULTRA and the Garrison Isolation Appliance on hardsec. FPGA silicon that turns the remote page into an interactive video stream so web code never lands on the endpoint. Everfox, formerly Forcepoint Federal, closed the Garrison acquisition in August 2024. The garrison.com homepage now redirects buyers to Everfox. The product names that matter are Garrison Isolation Appliance (on-prem, 3U Enterprise or 1U Reduced) and Everfox ULTRA in the cloud.

On 6 May 2025 Everfox launched ULTRA Plus: the same hardsec RBI plus their content disarm and reconstruction path, which rebuilds a downloaded file from the format spec instead of scanning it. ULTRA entered FedRAMP “In Process” on 3 April 2025. A UK G-Cloud listing for Garrison ULTRA still prints £42.35 a unit; treat that as a marketplace listing.

Best for: Public sector, defense, and regulated shops that want isolation enforced in hardware (on-prem appliance or Everfox-hosted) and that already speak cross-domain and air-gap.

Key Features:

• Hardsec RBI: one system fetches the page, FPGA logic streams video and rate-limits keystrokes and mouse back. No browser engine on the trusted side.
• Isolation Appliance with three physically separate NICs for on-prem or air-gapped networks; cloud ULTRA if you do not want a rack.
• ULTRA Plus (6 May 2025) adds CDR on downloads.
• DLP, copy/paste and password friction, persistent profiles, SIEM/CDR APIs, SAML/AD. NCSC-assessed hardsec heritage.

Why we like it: If the buying reason is “software isolation is still a browser we have to patch,” this is the remaining hardware answer. The appliance is the differentiator versus every cloud RBI on the platforms page.

Notable Limitations:

• Everfox is a high-assurance vendor. Expect a sales cycle.
• garrison.com is a redirect. Write the PO to Everfox and name ULTRA or the Isolation Appliance, not “Garrison SaaS.”
• No current first-party dollar figure. The G-Cloud £42.35 figure is a UK marketplace unit.

Pricing: Quote. Contact Everfox. Do not budget from the old Garrison marketing site.

Kasm Workspaces

Kasm Workspaces is the self-hosted isolation farm: disposable Docker containers stream a browser, a desktop, or an app into the user's existing browser. No agent. The threat of the page sits in the container. When the session dies, so does the container. That is why it shows up in RBI RFPs and in VDI replacements at the same time.

Community Edition is free for testing, personal, and non-profit use, capped at five concurrent sessions. Starter and Enterprise are paid, per named user or per concurrent session. You can run it on your own metal or in a VPC; Kasm also sells a hosted cloud. The AWS Marketplace Community Edition listing is free software. You pay the EC2 instance. Production commercial use needs a paid key.

Best for: Teams that will operate the isolation layer themselves (security labs, developer workspaces, contractor access) and that want a free five-session proof before a license conversation.

Key Features:

• Containerized browser isolation, plus full desktop and app streaming, from the same control plane.
• SaaS, single-server, or multi-node on-prem / AWS / GCP / Azure / GovCloud.
• Community Edition: 5 concurrent sessions, community support. Paid tiers add named-user or concurrent-session licenses and commercial support.
• AWS Marketplace image so a first lab does not start with a local installer.

Why we like it: It is the only isolation product here with a public Community license you can read without a quote. The 1.17 license page still caps that tier at five concurrent sessions. If the question is “do we even want isolation, or do we want disposable browsers for a lab,” Kasm is the experiment.

Notable Limitations:

• You own uptime, image patching, and capacity. Isolation-as-a-service vendors own that for you.
• Community is not a commercial license. Five concurrent sessions is a lab. Session queue, in the autoscale docs since 1.14, waits for compute. It does not lift the five-session Community cap.
• First-party dollar figures for Starter and Enterprise are a sales form.

Pricing: Community Edition free (5 concurrent sessions). AWS Marketplace Community Edition is $0 software plus the EC2 hourly rate for the instance you pick. Starter and Enterprise: request a license at kasmweb.com / kasm.com. Hosted cloud is a separate subscription.

Cloudflare Browser Isolation

Cloudflare Browser Isolation is not a peer isolation workspace on this list. It is an SSE add-on on the Cloudflare edge. The user keeps their own browser. Every tab runs remotely; closing the tab deletes the session. It sits next to Gateway (SWG) and Access (ZTNA) as a Zero Trust add-on.

Cloudflare's own docs, last updated 22 April 2026, say isolation is an add-on on Zero Trust Pay-as-you-go and Enterprise (Contract) plans. Pay-as-you-go Zero Trust is the public seat. Isolation is a second line. The docs still do not print a public isolation dollar amount. Third-party writeups quote extra per-user figures; those stay off this page.

Best for: Organizations already steering traffic through Cloudflare One that want to isolate risky or uncategorized sites (or every tab) without standing up a second isolation vendor.

Key Features:

• Remote execution of active web content; the local browser gets a safe rendering. Session dies when the tab closes.
• Works with the user's existing browser. No new client for isolation itself.
• Policy through Gateway HTTP and DNS. Can block input on risky sites and control data into sensitive apps.
• Decrypts traffic with the Cloudflare root CA. Isolation is a security product.

Why we like it: If Cloudflare is already the SWG, adding isolation is a SKU. That is the opposite of Authentic8 (new workspace) and Kasm (new farm).

Notable Limitations:

• The published Zero Trust seat is not the isolation bill. Isolation is an add-on. Ask for that line in the quote.
• Enterprise isolation, DLP, and CASB extras stack. The starter seat and the real seat are different numbers.
• It will not give you attribution, dark-web egress, or a hardware air-gap. Wrong product for those RFPs.

Pricing: Zero Trust Pay-as-you-go is $7 per user per month on Cloudflare's public plan page. Browser Isolation is an add-on on Pay-as-you-go and Contract; Cloudflare does not publish a first-party isolation unit price. Contract / Enterprise is quote.

Does FedRAMP High on 10 Aug include isolation?

The press is Cloudflare for Government. Isolation is an add-on on Zero Trust. The docs do not print that unit, and they do not say whether the add-on sits in the High boundary. Ask before you drop Everfox from the RFP.

Four ways to isolate the page

The feature lists all say “remote browser.” They do not agree on where the browser lives or who operates it.

What it actually costs

Authentic8 sells named-analyst seats by attribution region. Everfox is a quote; the UK G-Cloud unit is a marketplace listing. Kasm Community is a free five-session lab; paid tiers are a license form. Cloudflare publishes the Zero Trust seat; isolation is an unpublished add-on.

If the RFP is “isolate risky categories for the whole company inside the SSE we already bought,” stop and open the remote browser isolation platforms page. That shortlist is Proofpoint Isolation, Netskope RBI, FortiIsolator, Palo Alto Prisma RBI, and Menlo. Cloud or appliance RBI inside an SSE/SASE policy engine. Zscaler Isolation and iboss belong in that conversation too. They are not repeated here on purpose.

Questions before a POC

Do we need isolation, or do we need a secure enterprise browser?

Isolation keeps web code off the device. An enterprise browser (Island, Chrome Enterprise Premium, Prisma Access Browser) hardens the local browser. They can pair. They are not substitutes. If the threat is a drive-by on an unmanaged laptop, isolation wins. If the threat is copy-paste out of Salesforce, a hardened local browser may be the cheaper control.

Why isn't Menlo / Netskope / Zscaler on this page?

Because they are the subject of the platforms piece. Isolation-as-a-service for analysts, hardware appliances, self-hosted containers, and Cloudflare's edge add-on are the remaining distinct buys.

Can we start with Kasm Community and switch later?

Yes for a lab. No as a silent production plan. Community is five concurrent sessions and a non-commercial license. A production move is a Starter or Enterprise key, or a hop to Cloudflare / Authentic8 / Everfox.

Bottom line

Pick the delivery model that matches the hole. Analysts who must visit hostile sites: Authentic8, and budget the region tier. Hardware or air-gap: Everfox ULTRA or the Isolation Appliance. A farm you will run: Kasm, starting with the free five-session Community tier. An edge you already pay for: Cloudflare isolation as an add-on on the Zero Trust seat.

If the hole is “risky categories for everyone, inside SSE,” use the platforms page. Two pages, two jobs.