Layer 6 · Session / Browser

CyLens

Remote Browser Isolation. Pixels only. Zero days, malicious sites, and infected USBs never reach the endpoint.

CyLens

CyLens runs Chromium in an isolated server-side container. Users get only an AES-256 pixel stream — WebRTC, H.264 hardware-accelerated, or CDP screencast. Includes built-in DLP (380+ patterns), CDR file sanitization, per-user forensic watermarking, PKCS#11 smart-card redirection, and USB/IP device forwarding.

Gallery

See Cylens in action.

Use Cases

Where CyLens wins.

1

High-risk web access for analysts

Threat intel teams, OSINT analysts, customer-support links — browse the unknown in CyLens. Zero endpoint exposure to drive-by malware, zero-days, or phishing kits.

2

Sensitive SaaS app isolation

Salesforce, internal portals, customer data tools opened only in CyLens. DLP + clipboard controls + screenshot blocking enforced at the pixel layer — not best-effort at the OS.

3

Defence contractor browsing

Engineering staff on classified networks browse via CyLens. Zero data ever lands on the workstation; export-control compliance enforced architecturally.

4

Citrix Secure Browser replacement

Citrix charges premium add-on rates/user for the equivalent capability. CyLens ships at the platform's bundled rate as part of the Enterprise tier.

5

CDR sanitization for downloads

Every file downloaded through CyLens is sanitized — macros stripped from Office docs, exploits removed from PDFs, archives reconstructed clean.

6

M&A due diligence rooms

Auditors browse target-company data through CyLens. Forensic watermarking attributes every screen capture. CDR sanitizes every download.

Key Capabilities

What's inside.

📺

5 streaming modes

WebRTC (<200ms), H.264 hardware-accelerated, CDP screencast. Works on any endpoint, any network.

🪪

PKCS#11 remote signing

Smart cards stay at HQ while sessions run in the cloud. WebAuthn / FIDO2 passkeys via redirection.

🧼

CDR pipeline

Content Disarm & Reconstruct on every download. Macros, scripts, embedded objects stripped — supports PDF, Office, images, HTML, archives.

🏷️

Forensic watermarking

Per-tenant DCT watermark on every pixel stream. Screen captures stay attributable to the session.

📊

380+ DLP patterns

Real validators (IBAN MOD-97, Aadhaar Verhoeff, Luhn) — not regex approximations like Citrix's ~50.

🔒

Screenshot suppression

OS-level screenshot blocking on the streaming pod — better than endpoint best-effort.

vs competition: Replaces Island Browser (50K-FTE pricing), Talon (Palo Alto acquisition), Citrix Secure Browser (1.5-2× more + Citrix Cloud).
Full battle card →

Ready to see CyLens in action?

30-day proof of concept on two idle servers. We bring the SE. You bring the use case.