News: 1712730365

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Chrome Enterprise Premium promises extra security – for a fee

(2024/04/10)


Cloud Next Hoping to upsell freeloading corporate users of its Chrome browser, Google has announced Chrome Enterprise Premium – which comes with a dash of AI security sauce for just $6 per user per month.

It's been a while since anyone charged for a web browser. Netscape initially asked $39 for Netscape Navigator Personal Edition in the summer of 1995, but didn't fare well against Microsoft's free Internet Explorer.

"Netscape dropped the price of its browser to zero only in response to Microsoft's predatory strategy," as was [1]noted [PDF] in US Justice Department documents some years later.

[2]

But as Gartner [3]foretold last year, "by 2030, the browser will become a platform from which enterprises can distribute software, collect intelligence, control access, and securely enable remote work."

[4]

[5]

The analyst firm further predicted: "As the browser increasingly stakes its claim as the center of the knowledge worker's corporate universe, enterprise browser vendors are increasingly developing security controls that live within the browser."

That's more or less an invitation to rethink browser monetization. Small wonder Google [6]cites Gartner on its website.

[7]

Chrome, as [8]explained by Parisa Tabriz, VP of Chrome at Google, is already "a leader in browser security," having built "features and best practices that have disrupted, and then established, industry norms."

Such claims are not new or unique. In 2022, Mozilla [9]claimed Firefox was "the most private and secure major browser available across Windows, Mac, Linux and Android." But based on what criteria? Critical vulnerabilities per year? Successful active exploitation campaigns? Private information not exfiltrated via ad tracking scripts?

[10]Microsoft's playdate in Google's Privacy Sandbox gets messy

[11]Google bakes new cookie strategy that will leave crooks with a bad taste

[12]Google will delete data collected from 'private' browsing

[13]In-app browsers are still a privacy, security, and choice problem

Suffice to say Chrome can be configured to be reasonably secure. And for many, what you get out of the box – at no extra cost – with Chrome Enterprise Core should be enough.

But for six dollars per employee per month, there's even more security to be had with Chrome Enterprise Premium.

There's security from AI providers – we're not naming names – that might snarf local data for training, for example. Chrome Enterprise Premium provides a service called "Context-aware access control," which, Tabriz explains, "can mitigate data exfiltration risks for sanctioned and unsanctioned applications."

[14]

A canned quote on the Chrome Enterprise Premium [15]product page from Nick Reva, head of corporate security engineering at Snap, underscores the need to defend against grabby generative AI applications.

"We set up DLP [data loss prevention] restrictions and warnings for sharing sensitive information in applications like generative AI platforms and noticed a noteworthy 50 percent reduction in content transfers."

But wait – there's more. Purchasers get enterprise controls to help support policies, handle software updates, and support assorted protocols including RDP, SCP, and SSH. There's broader event and device reporting, as well as forensic capabilities that work with other Google and third-party security products. And there's threat and data protection, in the form of malware scanning, dynamic URL filtering, and site categorization.

Thanks, AI. ®

Get our [16]Tech Resources



[1] https://www.justice.gov/atr/file/705246/dl

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZhZjQjWt3L4xvaWttn8d@wAAAFA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://www.prnewswire.com/il/news-releases/perception-point-recognized-in-gartner-report-emerging-tech-security--the-future-of-enterprise-browsers-301856473.html

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZhZjQjWt3L4xvaWttn8d@wAAAFA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZhZjQjWt3L4xvaWttn8d@wAAAFA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[6] https://cloud.google.com/blog/products/identity-security/introducing-chrome-enterprise-premium

[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZhZjQjWt3L4xvaWttn8d@wAAAFA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[8] https://cloud.google.com/blog/products/identity-security/introducing-chrome-enterprise-premium

[9] https://blog.mozilla.org/en/products/firefox/firefox-rolls-out-total-cookie-protection-by-default-to-all-users-worldwide/

[10] https://www.theregister.com/2024/04/04/microsoft_sandbox_google/

[11] https://www.theregister.com/2024/04/03/google_cookie_strategy/

[12] https://www.theregister.com/2024/04/01/google_will_delete_data_incognito/

[13] https://www.theregister.com/2024/03/27/inapp_browsers/

[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZhZjQjWt3L4xvaWttn8d@wAAAFA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[15] https://chromeenterprise.google/products/chrome-enterprise-premium/

[16] https://whitepapers.theregister.com/



$72 per user per year...

Yorick Hunt

... Or you could just use Firefox... Or Brave if you have brain-dead developers who only write for WebKit.

Re: $72 per user per year...

Ken G

Relax, you're not the customer for this. Companies with more money than sense are.

First you need to have someone in internal audit point out it exists and that adoption as your default corporate browser would be an improvement. Google will push out articles saying this in the hope someone takes the bait. Then wait for a breach. Someone must do something and adopting Chrome premium is something therefore it must be done. Ker-ching!

ChoHag

> But as Gartner foretold last year, "by 2030, the browser will become a platform

Wow! They're really on the ball there!

CaroleS

Fortunately, no matter how hard they try to convince everyone they are, Google isn't the only game in town.

There are other browsers.

Some of them, mostly the ones not based on Chromium, are even good ones.

Bowie's Theorem:
If an experiment works, you must be using the wrong equipment.