Seraphic built browser runtime security that protects users, applications and data inside the browsers people already use, on company laptops as well as personal and contractor devices. CrowdStrike now sells the technology as Falcon Seraphic Enterprise Browser, part of the CrowdStrike Falcon platform.
It is aimed at security teams that need zero trust controls, data loss prevention and protection against session attacks in the browser, without forcing staff onto a dedicated browser or rolling out new infrastructure.
At A Glance
| Vendor | Seraphic Security, part of CrowdStrike |
|---|---|
| Category | Browser runtime security, enterprise browser security |
| Deployment | Browser-agnostic, across Chrome, Edge, Safari, Firefox and agentic browsers |
| Agentic AI | Controls on how GenAI applications and agents are accessed |
| Customers | TaxSlayer |
| Market classification | Network Security; also Data Security |
What Seraphic Does
Work now happens mostly in the browser, yet most security controls sit on the network or the endpoint rather than inside the live browser session. Seraphic closes that gap by enforcing security within the browser runtime itself, decoupling security from any one browser so that whichever browser a person uses becomes a secure enterprise browser. Staff keep their browser of choice, and IT avoids infrastructure changes, dedicated browsers and user training.
Inside the Falcon platform, browser telemetry from Seraphic joins CrowdStrike’s endpoint signals and SGNL’s continuous authorisation as part of CrowdStrike’s identity security strategy.
Products
Falcon Seraphic Enterprise Browser
Falcon Seraphic Enterprise Browser gives organisations secure access to applications and data from any device, with security built into the browser rather than bolted on. It suits companies with a mix of managed laptops, BYOD and third-party contractors, where installing a full endpoint agent everywhere is not realistic. Its capabilities include:
- In-session zero trust enforcement.
- Web data loss prevention and protection of data in motion.
- Protection against session hijacking, phishing and man-in-the-browser attacks.
- Coverage of unmanaged and BYOD devices without a full endpoint agent.
- AI governance over how GenAI applications and AI agents are accessed, stopping shadow AI tools from scraping or exfiltrating corporate data, on contractor and BYOD devices as well as corporate ones.
How It Works
| Component | What it does |
|---|---|
| Browser runtime enforcement | Controls run inside any browser runtime, and attacks are stopped at the moment of execution by randomising the browser’s JavaScript engine, which breaks exploits that depend on predictable behaviour. |
| Browser coverage | Deployment is browser-agnostic across Chrome, Edge, Safari, Firefox and any Chromium-based browser. Agentic browsers are covered too, so the same in-session controls apply when an AI-driven browser acts on a user’s behalf. |
| Unmanaged devices | An agentless-style approach protects contractors and third parties who work from devices the organisation does not manage. |
| Falcon correlation | Falcon correlates trillions of endpoint signals with in-session browser telemetry to understand user intent, application context and data flow in real time. |
| Continuous authorisation | With SGNL technology, permissions are granted per session and per risk signal, and revoked when the risk changes. |
Company Background
| Leadership | Ilan Yeshua, CEO and co-founder. |
|---|---|
| Legal entity | Seraphic Algorithms Ltd. |
| Acquisition | Acquired by CrowdStrike, announced on 13 January 2026 and completed by 30 April 2026, mostly for cash with some stock subject to vesting. |
Note: This overview is compiled from Seraphic’s publicly available information as of 3 November 2026. It is provided for information only. NHI Mgmt Group does not endorse any vendor, and nothing on this page represents the opinions of NHI Mgmt Group.