Check Point launches Enterprise Browser for safer unmanaged access

Check Point has introduced a new Enterprise Browser feature for its Harmony SASE platform, providing Zero Trust security controls on unmanaged devices such as those used by contractors, BYOD users, and third-party partners.

The move comes as organisations increasingly depend on hybrid workforces and extend access to non-managed devices, bringing fresh challenges in securing data and maintaining compliance. Traditionally, granting access through VPNs or distributing company hardware has incurred notable costs and operational complexities, while also running the risk of non-compliance with regulations such as HIPAA, GDPR, and NIS2.

The Enterprise Browser, built on Chromium, establishes an isolated and temporary workspace on any device for the duration of each session. This design applies enterprise security controls without requiring the deployment of persistent agents or ownership of the endpoint.

According to Check Point, one of the most significant security blind spots for companies today is the use of unmanaged devices. These endpoints can lead to increased risks of data leakage, gaps in compliance, and restricted visibility into device health. The new feature is intended to provide solutions to these risks without imposing productivity barriers on users.

Security and compliance controls

The capabilities integrated into the Enterprise Browser address several challenges. A key feature is data isolation and wiping, ensuring that enterprise applications and sensitive data are kept separate from the underlying operating system. When a browser session ends, any sensitive data is erased, preventing remnants from remaining on the device.

For the prevention of data loss, the new browser enforces restrictions on uploads, downloads, copy-paste functions, and printing. It also supports the application of watermarking to both documents and screens, contributing to leak prevention and traceability.

Agentless posture checks are conducted before access is granted, verifying the presence of antivirus software, up-to-date operating systems, and disk encryption without the need for software installation. This approach provides a layer of security compliance for organisations granting access to untrusted endpoints.

The solution further includes options for comprehensive session visibility, including navigation history, screen capture, and full session recording. These capabilities enhance support for compliance auditing and forensic investigations in case of incidents.

Unified integration with Harmony SASE and agentless Zero Trust Network Access (ZTNA) allows organisations to manage single sign-on and policies through a centralised interface.

Addressing workforce flexibility

The deployment of the Enterprise Browser is expected to support a number of enterprise objectives. It enables security for unmanaged devices, turning BYOD and contractor laptops into endpoints capable of complying with Zero Trust frameworks. According to Check Point, this facilitates rapid onboarding of third-party partners and temporary staff without the associated costs of hardware provisioning or management agent installation.

Organisations also benefit from compliance support, as the technology is designed to address requirements around data privacy imposed by regulations such as HIPAA, GDPR, and NIS2, regardless of the device used to access enterprise resources.

The company also highlighted reductions in enterprise risk and IT overhead. By removing the need to provision and ship laptops, and by preventing insider threats and potential compliance gaps, Check Point expects enterprises could avoid operational inefficiencies that often accompany legacy security approaches.

"Enterprises can no longer afford to choose between productivity and security. Check Point Enterprise Browser delivers both. It enables fast, frictionless access for third parties and BYOD users, while giving IT teams stronger control, compliance, and visibility on devices they don't manage. With the Enterprise Browser for BYOD and Harmony Browse for managed devices Check Point delivers robust browser security for our customers," said Amit Bareket, VP of SASE at Check Point. 

The Enterprise Browser is now available as part of the Harmony SASE platform globally.