Browser Isolation

Secure users and data from browser threats

Insulate users from ransomware and zero-day threats while enforcing data protection controls across any device. Remote browser isolation (RBI) runs all untrusted web code at the edge of our global network for a secure experience that feels native.

Quickly deploy RBI policies

Protect sites, SaaS apps, and self-hosted apps with preset browser isolation policies in the Cloudflare dashboard to easily guard against browser-based threats.

Isolate resources conditionally

Implement RBI by application, by policy, or for suspicious sites only, with granular control over isolated resources and additional data loss controls.

Extend security controls

Natively integrate RBI with Cloudflare's broader SASE platform, including email security, for comprehensive layered security against a wide range of threats.

Fast and secure by default

Cloudflare Browser Isolation runs browser code far away from local devices, helping prevent attacks while delivering a fast, responsive user experience.

Faster
Slower
Background Pattern
Browser Isolation

You can use Cloudflare Browser Isolation to:

See real-world examples of Cloudflare Browser Isolation

View documentation

Protect against ransomware

Isolate high-risk web browsing in a remote browser to block ransomware attacks before malicious code can execute locally or spread across your internal networks. Keep endpoints clean and data safe.

Thwart phishing attacks

Mitigate phishing attempts by automatically opening suspicious email links in an isolated browser session. Even if users click malicious links, threats can't reach their device or steal credentials.

Secure third-party access

Safely grant contractors, vendors, and partners access to internal resources without endpoint risk. Isolated browsing sessions contain and protect sensitive data when users connect from BYOD or unmanaged devices.

Protect sensitive data

Enforce granular data controls within any isolated app or AI tool. Block copy/paste, uploads/downloads, keyboard input, and more to prevent data exfiltration, even from trusted users.

Luana Savings Bank

"

With Cloudflare Browser Isolation, we're blocking threats so much earlier than any other security device that catches or mitigates cyber security issues. Malicious code doesn't hit our computers. Browser Isolation is the quickest and easiest way we can deal with malware issues. "

Grant Langhus Manager of Information Technology

Frequently asked questions

Remote browser isolation (RBI) is a security technology that executes all web code in a remote browser session at the network edge, away from user devices. Cloudflare Browser Isolation renders untrusted websites and applications on Cloudflare's global network, streaming only safe visual content to endpoints, preventing malware, ransomware, and zero-day exploits from reaching devices.
By running all active web content in an isolated cloud environment, malicious payloads and ransomware are physically prevented from reaching or executing on the local endpoint. Additionally, RBI mitigates phishing by automatically opening suspicious email links in an isolated session, neutralizing credential theft even if a user clicks a malicious link.
No. Cloudflare Browser Isolation is built to feel fast and native. By leveraging Cloudflare's massive global edge network and advanced rendering technologies, such as sending lightweight vector draw commands instead of heavy, pixel-pushed video streams, it delivers highly responsive web performance without the latency typical of legacy isolation tools.
Administrators can apply granular Data Loss Prevention (DLP) controls directly within the isolated browser session. This allows security teams to restrict high-risk actions, such as blocking copy/paste, disabling file uploads/downloads, or restricting keyboard input, preventing data exfiltration across web apps, SaaS apps, and GenAI tools.
Yes. Cloudflare offers clientless web isolation, which safely grants contractors, vendors, and partners access to internal resources from unmanaged or BYOD devices. Because the session is isolated in the browser, sensitive company data remains protected and contained without requiring the external user to install device client software.

Powerful primitives, seamlessly integrated

Built on systems powering 20% of the Internet, Browser Isolation runs on the same infrastructure Cloudflare uses to build Cloudflare. Enterprise-grade reliability, security, and performance are standard.

Build without boundaries

Join thousands of developers who've eliminated infrastructure complexity and deployed globally with Cloudflare. Start building for free — no credit card required.