Red Access

• Secure access incumbents already selling into this buyer, or enterprise browser vendors, could add agentless session security as a feature and erase the differentiation Red Access sells on.
• Red Access's named references are testimonials on its own site and its one user-scale figure comes from its lead investor, so its traction could prove thinner than its funding and its analyst mention imply.
• Nothing in the reviewed record shows a customer security practice built on the product, so departure would cost coverage rather than push work back onto the buyer's team, and a bundled alternative could take the account at renewal.
• No proprietary dataset that compounds with use is evidenced in the reviewed record, so a well-funded rival could narrow the lead by matching the agentless approach.
• The company's home page leads on securing the desktop across browsers, AI tools, and desktop apps while its product page still sells a lighter path to security service edge, and a buyer who cannot place the platform against one budget line could defer the purchase.
• Red Access delivers a security engine into each web session before the page renders, so a change in how browsers or AI desktop apps admit third-party code into a session could break the delivery path the product depends on.

Red Access sells to enterprise IT and security teams that have to secure how employees and contractors use the web across managed and unmanaged devices. The company's framing is that browser security tools cover only the browser while full security service edge rollouts are too heavy, which leaves room for a lighter option between the two.

The pain is real and recognized, and the reviewed record documents it at the level of the category rather than of this buyer. A CTech article states that enterprise interest in security service edge is strong while adoption remains slow on operational complexity, cost, and the infrastructure changes involved. A Dark Reading article, citing Omdia, puts roughly 85 percent of the workday inside the browser. Neither measures what a stalled rollout costs the buyer Red Access is selling to. [s1, s3, s5, s10]

Red Access sells one platform: an agentless service that secures web sessions across any browser with no agent, extension, or dedicated browser to install. It is deployed through a configuration push using tools an organization already runs, including Intune, MDM, and GPO, and the vendor lists coverage of Chrome, Edge, Firefox, Safari, the embedded browser inside Outlook, and newer AI browsers.

The platform bundles secure web gateway controls, CASB visibility, session-level data loss prevention, browser extension governance, zero-trust browsing, and controls on what employees put into generative AI tools. Two of the vendor's own pages place the inspection point differently. The product page has traffic routed through the Red Access cloud for real-time inspection, while the enterprise browser comparison page describes a small engine delivered into the session's memory with no cloud inspection and no backhaul. Omdia's 2023 abstract describes a proxy. The reviewed pages do not settle where inspection happens. [s3, s1, s13, s11]

Red Access competes in a crowded secure browsing market. It publishes a comparison page against Island and carries a site section headed enterprise browser alternative, and its product pages position the platform against full security service edge rollouts that the vendor describes as disruptive and heavy.

Its differentiator is that it secures existing browsers with nothing installed, and that lightness is also its exposure. Gartner Peer Insights defines a secure enterprise browser as controls delivered through a centrally managed browser extension and optionally a custom browser, which is neither of the mechanisms Red Access uses, so it competes for that budget from outside the analyst definition of the category. It competes on deployment speed and execution rather than on a capability others cannot match. [s13, s1, s12, s3]

Red Access directed its 2025 Series A toward U.S. expansion and product development, and a SecurityBrief account of a March 2026 launch describes a firewall-native security service edge layer meant to sit on top of an existing firewall. It carries testimonials from three named customers, USA Swimming, Franklin Empire, and RIMEX, on its own site rather than in independent reporting, so proof of enterprise scale stays thin.

Indirect signals are stronger than direct ones. Norwest led the $17 million Series A with SentinelOne's venture arm, Elron, Ten Eleven, and Singtel Innov8 participating, and Norwest general partner Dror Nahumi said the agentless approach was already protecting hundreds of thousands of users, which is the investor's own figure. Red Access emerged from stealth in 2022, and that announcement said the platform was already in deployment and commercially available. [s4, s9, s1, s6, s5]

Dor Zvi is the chief executive and Tal Dery the chief technology officer, and a SiliconANGLE article names Zvi in that role. The company's own 2022 launch announcement is what carries their earlier service in Israel Defense Forces technology units and senior research and development positions afterward.

The about page lists Doug Brockett as executive chairman and names, among its backers, a former CrowdStrike chief revenue officer and two serving chief information security officers. Norwest took a board seat with the 2025 round. The record shows relevant expertise and reputable association rather than a prior founder exit or a sustained publication and recognition record. [s6, s2, s4, s5]

The site's footer markup publishes an AICPA badge image and a GDPR badge image, which point at a compliance posture the company attests to itself. These are credibility markers rather than an inspectable audit trail.

No trust portal and no downloadable audit report appear on the probed surfaces. A buyer would have to ask whether supporting reports exist and request them, and for a vendor that inspects a customer's web sessions the depth of its own attestations is a purchase-time question the public record leaves open. [s14, s8]

Add analyzed competitors to compare them side by side with Red Access.

Red Access sells to enterprise IT and security teams that need to secure how employees and contractors use the web across managed and unmanaged devices. The pitch frames browser security tools as too narrow and full security service edge platforms as too heavy, placing Red Access as the lighter option between them.

Two segments stand out in the public materials. One is organizations with hybrid and bring-your-own-device workforces that want browsing protection without deploying agents or a new browser. The other is third-party and contractor access, where people reach corporate resources from devices the company does not manage. The 2026 site adds a third framing, coverage of AI tools and browser-based desktop apps alongside browsers themselves.

Red Access delivers a single agentless platform that applies secure web gateway controls, CASB visibility, session-level data loss prevention, zero-trust browsing, and protection against phishing and browser-based exploits, deployed through a configuration push using Intune, MDM, or GPO. Its stated coverage spans Chrome, Edge, Firefox, Safari, the embedded browser inside Outlook, and newer AI browsers, with no extension and no dedicated browser to install.

AI enters the product as a threat surface rather than as the engine. The platform aims to stop sensitive data from reaching generative AI tools and to govern shadow SaaS and shadow AI use inside the session. Session telemetry from the traffic it inspects could become an internal detection signal over time. No named non-public dataset or cross-customer learning loop appears in the cited record, so what the record shows today is a possibility rather than an accumulated asset.

Red Access directed its 2025 Series A toward U.S. expansion and product development, and a SecurityBrief article describes a firewall-native security service edge layer launched in March 2026. The company emerged from stealth in 2022, and that announcement said the platform was already in deployment and commercially available.

Red Access carries testimonials from three named customers, USA Swimming, Franklin Empire, and RIMEX, hosted on its own site rather than reported independently, so proof of enterprise scale stays thin. Its lead investor said the agentless approach already protects hundreds of thousands of users, a figure from the funding announcement rather than an independently verified one. The company reports a GigaOm Leader placement for secure enterprise browsing on its own blog.

Red Access does not publish pricing. No price list, per-unit rate, or free tier appears on the pages reviewed, and the public pages carry a demo request in place of a purchase path.

The absence of a published charging unit leaves the buyer without a signal of what the vendor believes it is selling, whether by user, by device, or by session. The public pages carry a demo request rather than a self-serve purchase path, and they disclose no pricing model.

Delivery is the company's central design choice. Red Access is agentless, deployed by a single configuration line pushed through device-management tooling the organization already runs, with nothing installed on the operating system and no network rewrite. The vendor states coverage across Windows, macOS, Linux, servers, and virtual desktops using those same tools.

The vendor's own two descriptions of where inspection happens differ. The product page has traffic routed through the Red Access cloud for real-time inspection, while the enterprise browser comparison page describes an engine running inside the session with no cloud inspection and no backhaul. The lightness is an operational advantage at rollout, and the cited record shows no process a departing buyer would have to take back, which is where stickiness would otherwise come from.

The site's footer markup publishes an AICPA badge image and a GDPR badge image, which point at a compliance posture the company attests to itself without exposing the underlying reports. These are credibility markers a buyer would still have to validate by direct request.

No trust portal and no downloadable audit report appear on the probed surfaces. For a vendor that inspects a customer's web sessions, the depth of its own security attestations is a purchase-time question the public record leaves open.

Red Access is built to slot into an existing security and IT stack rather than replace it. The vendor states integration with any tool in that stack under one policy, including the customer's firewall, and says it sends events, alerts, and context into an existing SIEM and investigation workflow.

Its coverage claim is broad, spanning mainstream browsers, embedded browsers, and newer AI browsers. A SecurityBrief article states that the March 2026 firewall-native layer is vendor-agnostic, listing Palo Alto Networks, Fortinet, Cisco, and Check Point as firewall platforms it can work with. Fitting alongside existing controls rather than displacing them is how an early vendor here earns a place in the stack without a rebuild.

Dor Zvi is the chief executive and Tal Dery the chief technology officer, and a SiliconANGLE article names Zvi in that role. The company's own 2022 launch announcement is what carries their earlier service in Israel Defense Forces technology units and senior research and development positions, and the reviewed pages document no prior founder exit.

The about page lists Doug Brockett as executive chairman and names, among its backers, a former CrowdStrike chief revenue officer and two serving chief information security officers. The Series A gave Norwest a board seat. The investor group, which includes SentinelOne's venture arm, signals security-industry confidence in the team more than any disclosed commercial result does.