LayerX Security

• Akamai could fold the standalone product into its bundled zero-trust suites, ending the independent roadmap that extension customers bought.
• The platform depends on the extension interfaces of Chrome, Edge, and Firefox, so a browser maker narrowing what extensions may inspect would shrink the product's enforcement surface.
• Zscaler, CrowdStrike, and Palo Alto Networks now own competing browser security products and can bundle them into platforms enterprises already buy, which erodes the case for paying separately.
• If agentic AI browsers such as Atlas and Comet ship native enterprise controls, the case for an add-on extension layer weakens as agent activity grows.

Enterprises adopted generative AI tools faster than their security stacks could observe them. Employee prompts, file uploads, and AI agent actions happen inside the browser, and LayerX argued that network-level security misses that last-mile interaction context. The company built its business on that blind spot, selling visibility and policy control at the point of interaction rather than on the network path.

Independent evidence backs the pain. Gartner found 10% of surveyed organizations using secure enterprise browsers and forecast 25% by 2028. Press coverage of the Akamai deal called monitoring and controlling AI tool use one of the most urgent cybersecurity challenges of 2026, and LayerX's chief executive said customers began raising AI governance challenges in 2023 and 2024. [s1, s7, s5, s8]

The LayerX Interaction Security Platform has four components: the LayerX Extension, the LayerX Endpoint Agent, a console, and a cloud layer. The extension covers browser and web interactions, and the endpoint agent covers IDEs, IDE extensions, desktop AI applications, and on-device agents. Between them the platform monitors prompts, file uploads, and data movement, applies data-loss prevention rules to what users share with AI, discovers unsanctioned AI and SaaS applications, and manages risky browser extensions.

Delivery is the part the company emphasized. The extension works inside Chrome, Edge, Firefox, and other browsers employees already run, so a rollout needs no replacement browser and no network architecture changes. The platform is also designed to support AI agent-based browsers such as Atlas and Comet.

Outside validation exists but is thin. Independent press describes the product as a policy-enforced, secure workspace layered on the major browsers, and the reviewed sources include no public documentation portal, benchmark results, or third-party technical evaluation beyond press commentary. Where the press did assess a LayerX product directly, the read was mixed: TechRadar Pro examined ExtensionPedia, the free public database of browser-extension risk scores the company published in 2025, and concluded that publishing those scores increases transparency but that visibility alone does not equate to protection, doubting that readers would understand the scores or look an extension up before installing it. [s1, s2, s5, s7, s14]

The secure browser market split into two delivery camps. Island and Palo Alto Networks sell dedicated replacement browsers, while LayerX, SquareX, and Seraphic Security attached security to the browsers employees already use. LayerX argued the extension route avoids forcing users into a new work environment, a contrast CTech drew directly against Island.

Consolidation then resolved the category's independence question. Palo Alto Networks bought Talon in 2023, CrowdStrike bought Seraphic Security, Zscaler bought SquareX, and Akamai closed on LayerX in July 2026. Every one of those buyers now bundles browser security into a larger platform, which leaves the remaining independents selling against suite economics. Analyst houses had been tracking the company on its own terms before that: KuppingerCole awarded LayerX a Rising Star badge in a research note by Martin Kuppinger dated January 16, 2025, and its vendor record dates the founding to 2021, a year earlier than the 2022 the Israeli press reports. [s6, s7, s4, s13]

The traction record is a disclosed revenue figure and an exit rather than named customers. Akamai said it expects the LayerX business to reach approximately 10 million dollars in annual recurring revenue at year end, and it paid about 205 million dollars in cash. The company's own site shows a customer logo wall with unnamed logos and role-only testimonials from security leaders at organizations above 1,000 employees, so the reviewed sources name no reference customer.

The selling motion was classic enterprise. LayerX published no pricing, sold through demo requests, and raised 45 million dollars from Glilot Capital, Dell Technologies Capital, and Jump Capital to fund the push. After the close, Akamai lists the product as Akamai Workforce Protector within its zero-trust portfolio. Akamai's quarterly report to the Securities and Exchange Commission for the period ended June 30, 2026 books the deal as a purchase of all outstanding equity in LayerX Security Ltd., subject to post-closing adjustments, and states that the purchase price allocation had not been finalized when the filing went out on August 7, 2026, so the split between goodwill and acquired technology remains undisclosed. [s4, s5, s1, s11, s12]

The founding team's background is verifiable and in-domain. Or Eshed, chief executive and a former Check Point analyst, and chief technology officer David Vaisbrud developed web attack and defense systems during their military service. CTech reports that in 2017 Eshed led the exposure of a Chrome attack campaign that involved tens of millions of compromised browsers.

The bench extended beyond the founders. The leadership page lists chief revenue, marketing, and people officers plus product and finance leads, and a board chaired by Rupal Hollenbeck, a former president of Check Point, alongside partners from Glilot Capital and Dell Technologies Capital. After the acquisition closed, the employees, including both founders, joined Akamai's cybersecurity division. [s3, s6, s8, s4]

Public trust collateral was minimal for an enterprise security vendor. A probe on July 3, 2026 found no trust or security subdomain, missing pages at /trust, /security, and /compliance, and no SOC 2 or ISO badge among the homepage image files, which carry only a GDPR icon. No attestation was found by that probe.

Two trust surfaces do exist. The site runs a public vulnerability disclosure program, and the homepage displays a GDPR icon. The reviewed sources show no customer-facing security documentation beyond those, and any future compliance publication now belongs to Akamai as the product's owner. [s11, s1]

Add analyzed competitors to compare them side by side with LayerX Security.

LayerX sold to enterprise security teams that answer for what employees share with AI tools. The published testimonials come from chief information security officers and security directors, tagged to enterprises above 1,000 employees, and the buyer conversation ran through demo requests rather than self-service. The reviewed sources name no specific customer, industry vertical, or region of concentration.

The segment now inherits Akamai's frame. Akamai pitched the combined offering as governing how employees, partners, and supply chain ecosystems interact with AI applications, which points the product at Akamai's existing zero-trust enterprise customers.

The platform's claim is interaction security, securing the prompt, the action, and the exchange instead of the network pipe. In the vendor's words, the platform gives security teams visibility and control over how users and on-device agents interact with AI tools, SaaS applications, identities, and data at the last mile, with the extension covering browser sessions and a separate endpoint agent covering desktop applications.

AI is the subject more than the method. The product governs how people and agents use other systems' AI, discovering shadow AI tools, applying data-loss prevention to prompts and file transfers, and enforcing access policies, and it extends the same controls to AI agent-based browsers such as Atlas and Comet. The reviewed sources claim no proprietary model or detection corpus of LayerX's own.

The go-to-market proof is money rather than names. Akamai paid approximately 205 million dollars in cash for a business it said would reach about 10 million dollars in annual recurring revenue at year end, and independent press carried both figures. The vendor's own wall shows unnamed logos and role-only testimonials, which is weaker evidence than named references.

The leadership page lists chief revenue and marketing officers alongside the founders, a conventional enterprise sales bench, and the company raised an 11 million dollar Series A extension in April 2025 to fund the push. Akamai now distributes the product.

LayerX published no prices. A July 2026 probe found the site's /pricing path returning a missing page, and the sales motion ran through demo requests, the pattern of negotiated enterprise contracts. The reviewed sources do not disclose the pricing unit, so whether the company charged per user, per browser, or per interaction is not public.

After the close, packaging is Akamai's decision. Akamai lists the product as Akamai Workforce Protector inside its zero- trust line, and how the rebranded product is priced is not yet documented in the reviewed record.

Delivery is the product's core argument. The extension installs into the browsers a workforce already runs, Chrome, Edge, Firefox and others, so deployment requires no replacement browser and no network or architecture changes, per the vendor. That framing answers the biggest operational objection to dedicated enterprise browsers, which is migrating users to a new one.

The customer's security team operates the product. The LayerX console provides centralized policy management and operational visibility, and the reviewed sources describe no managed service or accountable operations layer from the vendor.

The public trust posture was thin for a security vendor selling to enterprises. A probe of the company's trust surfaces on July 3, 2026 found no trust or security subdomain resolving, missing pages at /trust, /security, and /compliance, and no SOC 2 or ISO badge among the homepage image files, which carry only a GDPR icon. The probe found no attestation on those surfaces.

What the company did publish is narrower. The site runs a public vulnerability disclosure program, and the homepage displays a GDPR icon. Any future compliance publication belongs to Akamai as the product's owner.

LayerX positioned the extension as browser-neutral and tool-neutral, integrating across browsers, SaaS applications, and IDEs rather than anchoring to one vendor's stack. That neutrality was the pitch against dedicated enterprise browsers: the control layer follows the user into whatever browser the company already standardized on.

The ecosystem story changed at the close. The product is now the browser tier of Akamai's zero-trust portfolio, listed as Akamai Workforce Protector, and Akamai told press the browser telemetry will strengthen how it decides which users get access.

The founders match the product's problem. Or Eshed, a former Check Point analyst, and David Vaisbrud developed web attack and defense systems during military service, and CTech reports Eshed led the 2017 exposure of a Chrome attack campaign involving tens of millions of compromised browsers. Browser-scale abuse is the ground the company later productized.

The leadership page lists a full executive bench, with chief revenue and marketing officers plus product and finance leads, and a board chaired by Rupal Hollenbeck, a former president of Check Point. After the close, the employees, including both founders, joined Akamai's cybersecurity division.