Seraphic Security

• Buyers who chose Seraphic for a browser-agnostic control could find it available only through the Falcon platform, which is where CrowdStrike now offers it for purchase.
• Microsoft already sits in this category as GigaOm's most mature entry, so it could fold equivalent controls into Edge and remove the reason to buy a separate browser-security product.
• Adoption of secure enterprise browser technology sat under 10% of organizations by Gartner's estimate, so the addressable base CrowdStrike bought may grow slower than the 25%-by-2028 projection implies.
• Seraphic's mechanism depends on injecting an agent into browser engines it does not control, so a browser vendor tightening third-party runtime access would reach the product directly.

Enterprise work runs inside the browser, and the controls enterprises already own stop at its edge. Seraphic's pages argue that endpoint detection tools watch the operating system rather than the browser, which leaves SaaS use, web-based data exfiltration and identity-driven threats unobserved. Dark Reading reports Omdia's estimate that roughly 85% of the workday is spent in the web browser.

Buyers have started on this problem rather than finished with it. Gartner estimates that by 2028, 25% of organizations will augment existing secure remote access and endpoint security tools with at least one secure enterprise browser technology, and that under 10% had adopted one at the time of that estimate. Futurum's survey data put widespread browser-security deployment at 19.7% of respondents, which the firm reads as an early adoption phase.

Two analyst firms treat the problem as its own market. GigaOm's Radar for Secure Enterprise Browsing evaluates named vendors including Microsoft, Palo Alto Networks, Citrix, Island and Seraphic, and Frost & Sullivan published a Frost Radar for the Global Zero Trust Browser Security Market in 2025 in which Seraphic announced a leading position. [s1, s2, s11, s12, s13, s14]

The Seraphic Browser Security Platform enforces policy from inside the browser's JavaScript engine. The vendor describes an abstraction layer built on top of that engine which spans network and DOM down through rendering, execution, memory and the underlying operating system, and states that the layer intercepts and controls all browser operations in every session.

Delivery follows the device rather than the browser. Seraphic describes a lightweight extension across browsers on corporate devices, an agent embedded in the user's preferred browser for third-party devices, and a native mobile browser app or extension for iOS and Android, so the same control reaches unmanaged endpoints without a full endpoint agent.

The vendor positions the product against zero-days, data leaks, malicious extensions and credential theft, and says it connects to SSO and identity providers, CDR, SIEM and EDR or sandbox tools. CrowdStrike describes the same mechanism as randomizing the browser's JavaScript engine to stop session hijacking, phishing and man-in-the-browser attacks at the point of execution. [s1, s5, s7]

Seraphic competed in a field analysts enumerate. GigaOm's radar plots Microsoft, Fortinet, Mammoth Cyber, SquareX, Citrix, Palo Alto Networks, Menlo Security, Seraphic Security, SURF Security, Island, Red Access, LayerX Security and Acium, with Microsoft positioned as the most mature entry and Island charted as an innovation outperformer. SecurityWeek names Surf, SlashNext, Menlo Security, LayerX and Red Access as other firms competing in enterprise browser security.

What separates Seraphic from dedicated-browser rivals is where the control sits. It secures the browsers a workforce already runs instead of shipping a replacement, and Futurum reads that choice as addressing a real market friction point, because forcing a switch to a proprietary enterprise browser trades user experience for control.

Platform vendors have taken the category in-house. CrowdStrike completed its purchase of Seraphic and now sells the technology as Falcon Secure Access through the Falcon platform, and Futurum wrote that the move pressures standalone browser security vendors by commoditizing their core offering into a platform feature. [s4, s7, s8, s11, s14]

Seraphic's traction shows up as named enterprise references. Its site publishes three dated customer case studies, for P&S Transportation, Nobia and Clal Insurance, and quotes Yaron Slutzki, CISO of Agoda, saying the company chose Seraphic. Jerich Beason, CISO of Waste Management, is quoted on that company adopting a bring-your-own-browser approach.

Analyst placement carried much of the rest of the motion. Seraphic announced a leading position in the 2025 Frost Radar for the Global Zero Trust Browser Security Market and a Leader and Fast Mover placement in the 2025 GigaOm Radar for Secure Enterprise Browsing, and the Falcon Funds held 9.4% of the company before CrowdStrike bought the rest.

Scale is where the record stops. CrowdStrike's filing states that the acquisition of Seraphic did not have a material impact on its condensed consolidated financial statements and that historical and pro forma disclosures were therefore not presented, so a buyer comparing vendors weighs named references without a revenue or customer figure behind them. [s1, s2, s4, s13, s14, s15]

Seraphic was founded in 2020 by Ilan Yeshua, who came to it from running the Israeli news site Walla, and its company page lists Avihay Cohen as CTO and co-founder and Suresh Batchu as COO and co-founder. Calcalist reported the company employs over 50 people.

Avihay Cohen has led the product as CTO and co-founder since 2020, which is the in-domain build the record documents. Seraphic's company page also names an advisory board including Joe Sullivan, former CSO of Cloudflare, Facebook and Uber, Udi Yavo, former CTO of Fortinet, and Tal Laufer, former head of product of Check Point. The reviewed sources record no security product the founders built or sold before Seraphic, so a buyer weighing the team is weighing one completed build and the advisors around it.

The acquisition accounting names the workforce. CrowdStrike's filing records goodwill primarily attributable to the assembled workforce of Seraphic, planned growth in new markets, and synergies expected from integration. [s3, s4, s9]

Seraphic's buyer-facing assurance rests on analyst assessment and named references. The 2025 Frost Radar placement and the GigaOm Leader and Fast Mover placement are among the third-party evaluations the vendor puts forward, and its case studies name three organizations that adopted the product.

The acquisition changes whose assurances a buyer weighs. CrowdStrike sells the capability as Falcon Secure Access through the Falcon platform, so an enterprise evaluating it is evaluating the acquirer's programme and support rather than a standalone vendor's. [s2, s7, s13, s15]

Add analyzed competitors to compare them side by side with Seraphic Security.

Seraphic sells to enterprises whose staff and contractors reach corporate resources, cloud apps and GenAI platforms through a browser that carries no enterprise controls. Dark Reading reports Omdia's estimate that roughly 85% of the workday is spent in the web browser, and Seraphic's own pages argue that endpoint detection tools watch the operating system rather than the browser.

The segment is defined by devices as much as by companies. Seraphic reaches corporate devices through a lightweight extension, third-party devices through an agent embedded in the user's own browser, and phones through a native mobile browser, which is the population CrowdStrike described as contractors and third parties secured without a full endpoint agent.

That segment is early. Gartner estimated that fewer than 10% of organizations had adopted a secure enterprise browser and projected 25% by 2028, and Futurum's survey put widespread browser-security deployment at 19.7% of respondents.

The product works from inside the browser's JavaScript engine. Seraphic describes an abstraction layer on top of that engine which spans network and DOM down through rendering, execution, memory and the underlying operating system, and states that the layer intercepts and controls all browser operations in every session.

Two analyst firms bear on that mechanism. Frost & Sullivan called it a JavaScript runtime security module injected at the engine level rather than a traditional browser extension, and Futurum wrote that the abstraction layer lets CrowdStrike inspect the encrypted session rendering engine itself. Futurum also placed the approach against dedicated enterprise browsers, noting that forcing a switch to a proprietary browser trades user experience for control.

The AI surface follows from where the code sits. CrowdStrike frames the capability as securing how GenAI applications and agents are accessed through the browser, and it describes stopping session hijacking and man-in-the-browser attacks by randomizing the browser's JavaScript engine.

Seraphic's public go-to-market evidence is named references and analyst placement. Its site publishes three dated customer case studies, for P&S Transportation, Nobia and Clal Insurance, and quotes Yaron Slutzki, CISO of Agoda, saying the company chose Seraphic, alongside Jerich Beason, CISO of Waste Management, on that company adopting a bring-your-own-browser approach.

Analyst coverage carries much of that record. Seraphic announced a leading position in the 2025 Frost Radar for the Global Zero Trust Browser Security Market, GigaOm plotted it alongside Microsoft, Palo Alto Networks, Citrix and other named vendors in its secure enterprise browsing radar, and Frost & Sullivan cited strong enterprise adoption and consistent year-over-year revenue growth in the report Seraphic announced. The CISO of Agoda states on Seraphic's site that the company chose it.

Distribution now runs through CrowdStrike, whose Falcon Funds held 9.4% of the company before it bought the rest. The technology ships as Falcon Secure Access, available to purchase through the Falcon platform, while Seraphic's own pages still route interest to a demo with a Seraphic expert.

Seraphic publishes no price. Its pages carry a booking prompt and no plan table, offering a personalized 30 minute demo with a Seraphic expert, and the reviewed sources do not name the unit the company charged by, so a buyer cannot compare its cost against a rival's without entering a sales process.

CrowdStrike's filing records total consideration of $327.5 million in cash, net of $1.1 million of cash acquired, plus $13.7 million of replacement equity awards, for the remaining 90.6% of the equity it did not already hold, against the roughly $37 million Seraphic had raised. That figure prices the business, not the product, and under CrowdStrike it is purchased through the Falcon platform, and the reviewed sources do not set out its terms.

Delivery avoids a replacement browser. Seraphic deploys its agent through lightweight extensions across browsers on corporate devices, where it states that no end-user action or separate endpoint agent is required, embeds the agent in the user's preferred browser on third-party devices, and ships a native mobile browser app or extension for iOS and Android. CrowdStrike describes the contractor and third-party case as securing the browser session without requiring a full endpoint agent.

Operations lean on the customer's existing stack. Seraphic lists SSO and identity providers, CDR, SIEM and EDR or sandbox scanners among the tools it integrates with, so the browser layer connects to the stack the security team already runs. Under CrowdStrike that path leads into the Falcon platform, where the browser session becomes another source the same team already monitors.

Seraphic's buyer-facing assurance rested on third-party assessment and named references. The 2025 Frost Radar placement and the GigaOm Leader and Fast Mover placement are the evaluations the vendor puts forward, and its case studies name three organizations that adopted the product.

Ownership changes whose assurances a buyer weighs. CrowdStrike sells the capability as Falcon Secure Access through the Falcon platform, so an enterprise evaluating it today is evaluating the acquirer's programme and support rather than a standalone vendor's.

Seraphic built toward the security ecosystem before it joined one. It positioned the product as a layer that connects to identity, detection and response tooling, and the CrowdStrike Falcon Funds held 9.4% of the company before the acquisition.

The ecosystem path ended in absorption. CrowdStrike now sells the technology as Falcon Secure Access and pairs it with the identity technology from its SGNL purchase, describing a fabric that runs from the endpoint through the browser session into the cloud. Futurum wrote that the move pressures standalone browser security vendors by commoditizing their core offering into a platform feature, which is the ecosystem outcome an independent in this category now has to plan around.

Seraphic was founded in 2020 by Ilan Yeshua, who came to it from running the Israeli news site Walla, and its company page lists Avihay Cohen as CTO and co-founder and Suresh Batchu as COO and co-founder. Calcalist reported the company employs over 50 people.

Standing shows up around the founders rather than in their own prior work. The company page names an advisory board including Joe Sullivan, former CSO of Cloudflare, Facebook and Uber, Udi Yavo, former CTO of Fortinet, and Tal Laufer, former head of product of Check Point, and the reviewed sources record no prior security product built or sold by the founders themselves.

The acquisition accounting names the workforce. CrowdStrike's filing records goodwill primarily attributable to the assembled workforce of Seraphic, planned growth in new markets, and synergies expected from integration, and Ilan Yeshua said the company was joining CrowdStrike.