Report a security issue Download Customer sign in

Stop the attack inside the page.

Enterprise browser security for Chrome, Edge, Brave and Firefox. Local detection, blocked on the spot, reported to a dashboard only your team can decrypt.

Request a pilot See how it works
OverviewExport summary
Protected browsers226/236
Pages blocked48
Policy coverage98.9%
Latest blocked threats
Phishing kitBlocked
Clipboard commandNeutralised
Remote-access installerBlocked
Pop-under adsStopped
Detections per category
Detections, last 14 days

Built for the browser.

Where today's attacks happen: a fake login, a fake CAPTCHA, a "support" download. Enterprise-grade protection without the complexity.

Request access

In the page.

Threats stopped as they happen.

Zero-knowledge.

Alerts only your team can decrypt.

By policy.

Rolled out and updated by your IT tools.

Protection

The attacks that get past email filters and EDR.

They live in a browser tab, on a fresh domain, for a few hours. VigilSpan looks at what each page does, not just where it lives.

Credential phishing & AiTM kits

Fake and look-alike login pages, including kits built to steal sessions protected by MFA.

ClickFix & fake CAPTCHAs

Fake “verify you’re human” and “fix it” pages that trick people into running commands.

Remote-access scams

Fake support sessions and remote-control installers used to take over devices.

Consent & device-code phishing

App-consent and sign-in-code tricks that hijack Microsoft 365 and Google accounts.

Malicious downloads

Fake updates and malware installers, stopped before they reach the device.

Tech-support scams

Scare pages, pop-up floods and pages that won’t let you leave.

Skimmers & form grabbers

Card and password theft on compromised websites.

Risky extensions

See every installed extension and switch off harmful ones by policy.

Password reuse

Alerts when a company password is entered on another site.

How it works

Protection where your people work.

No agents, proxies or network changes: just your browsers and your dashboard.

  1. 1

    Deploy

    Installed and kept up to date through the device management you already use.

  2. 2

    Protect

    Dangerous pages, downloads and actions are stopped as they happen, with a clear message for the user.

  3. 3

    Respond

    Every alert, report and override reaches your dashboard, readable only by your team.

Zero-knowledge by design

We built it so we can't read your data.

Browsing data is some of the most sensitive data a company has. VigilSpan's servers relay and store it, but can't open it.

  • Encrypted in the browser. Alerts are encrypted before they leave the device, with a key only your organisation holds.
  • Your keys, your policy. Only your admins can change what your browsers enforce: not us, and not anyone who breaches us.
  • Collect less. Browsing history is off unless you turn it on.

AI, on your terms

A second opinion for the grey areas.

Bring your own key for Anthropic Claude, OpenAI, Azure OpenAI, Google Gemini or any OpenAI-compatible endpoint, or use ours. Your policy decides what may be sent, and every verdict is logged with its reasons.

Community threat intel

One organisation's catch protects the rest.

Confirmed attacks seen by one customer are blocked for every customer, shared anonymously. One switch turns sharing off.

Deploy

Rolled out in an afternoon, updated forever.

Installed and kept up to date by browser policy. Each device enrolls itself from the policy, with no user action.

Group PolicyWindows domains
Microsoft IntuneWindows & macOS
Google AdminChrome Enterprise
Jamf & MDMmacOS profiles
RMM / scriptsPowerShell kit
LinuxManaged policy

The dashboard's Deploy page generates every kit, for Chrome, Edge, Brave and Firefox, with your enrollment code filled in.

Getting started

From request to protected browsers.

  1. 01

    Request access

    Tell us about your organisation with the form below and we'll get back to you by email.

  2. 02

    We create your organisation

    Your owner gets a one-time setup link to app.vigilspan.com.

  3. 03

    Secure your account

    Set a password, turn on two-factor authentication, and create your organisation's encryption keys.

  4. 04

    Choose your policy

    Block, warn or log per attack type; sign-in domains; allowed and blocked sites; AI and sharing.

  5. 05

    Deploy

    One test machine first, then the kit from the Deploy page to a pilot group and on to everyone.

  6. 06

    Watch and tune

    Alerts, user reports, overrides and AI verdicts arrive as they happen. Tune with allow and block lists.

Download

The VigilSpan extension.

For Google Chrome, Microsoft Edge, Brave, Opera and Vivaldi (Chromium 116 or later), and Mozilla Firefox 140 or later.

Chrome Web StoreChrome · Brave · Vivaldi · Opera Microsoft Edge Add-onsEdge Firefox Add-onsFirefox 140+
Versionlatest
Extension ID—
Download package (.zip) Signed .crx

The extension protects a browser once it is enrolled in an organisation. To enroll, you need an account.

Try it on one computer

  1. Unzip the package into a folder you'll keep.
  2. Open chrome://extensions (or edge://extensions) and turn on Developer mode.
  3. Click Load unpacked and choose the folder.
  4. In your VigilSpan dashboard, open Devices → Enroll this browser now.

Rolling out to a company?

Install by policy so it updates itself and enrolls without user action. Point the browser at:

https://app.vigilspan.com/ext/updates.xml

The dashboard's Deploy page builds the full Group Policy, Intune, Google Admin, macOS and Linux kits for you.

Request access

Start a pilot.

We're onboarding organisations one at a time so every pilot gets hands-on help. Tell us about yours and we'll set up your account.

  • Your own organisation and dashboard
  • Help with policy and a first deployment

Prefer email? [email protected]

We use these details only to reply to you. See our privacy policy.

FAQ

Questions we get asked.

Which browsers are supported?

Google Chrome, Microsoft Edge and Brave can be deployed and kept up to date by company policy. Opera and Vivaldi install from the Chrome Web Store. Mozilla Firefox 140 or later installs from Firefox Add-ons, also by policy. Windows, macOS and Linux, managed or not.

Can VigilSpan see which sites our people visit?

No. Alerts, and browsing history if you turn it on, are encrypted with a key only your admins hold. We store them but can’t read them.

Does it send every page somewhere to be checked?

No. Protection runs in the browser. Optional cloud checks, such as AI analysis, are switched on by your policy.

What happens when a legitimate site is blocked?

For lower-risk blocks your policy can let users continue after giving a reason. You see every override in the dashboard and can allow-list the site for everyone. Conclusive threats can't be overridden.

Do we have to use AI?

No, it's off by default. If you turn it on, you can use your own provider and key, or our managed option.

How do updates reach our browsers?

Automatically. Managed browsers install new versions and threat updates without any action from your people.

How much does it cost?

Ask us and we'll send pricing for your organisation's size.