Menlo Security

Menlo Security is a cloud-based security vendor focused on isolating web and email traffic to prevent threats from reaching enterprise endpoints and networks.

• Cloud-delivered isolation-based web and email security for enterprises
• Browser isolation technology to separate active content from endpoints (secure browsing)
• Protection against malware, phishing, and malicious URLs across web and email channels (threat protection)
• Secure access controls for Software-as-a-Service (SaaS), web applications, and internet resources (secure access)
• Integration with enterprise security stacks and policies through cloud-native architecture

More About Menlo Security

Menlo Security provides cloud-delivered security services that use isolation to separate enterprise users from active web and email content, with the goal of preventing malware, phishing, and other web-borne threats from executing on endpoints or inside corporate networks. Its platform is positioned for organizations that route user web browsing and email traffic through Menlo Security’s cloud, where active content is executed in a remote environment instead of on end-user devices.

The company’s core approach is browser isolation (web security), in which web pages are rendered in a remote cloud service and a safe representation, such as a sanitized visual stream or transformed content, is delivered to the user. This model contrasts with traditional secure web gateways that rely primarily on URL filtering, signatures, and inline inspection. By executing active content away from endpoints, the isolation layer reduces exposure to exploits embedded in websites, documents, or scripts accessed over the internet.

Menlo Security also applies its isolation model to email security (email security), focusing on threats delivered through links and attachments. Email-borne URLs can be opened in an isolated browser session, and attachments can be sanitized or transformed before users access them. This is intended to address phishing, credential harvesting, and malware distribution that leverage web pages or document formats as delivery vectors.

From an enterprise architecture perspective, Menlo Security operates as a cloud security service that can function alongside or in place of Secure Web Gateway (SWG), Cloud Access Security Broker (CASB), or email security solutions. Traffic is typically routed to Menlo’s cloud via proxy configurations, agents, or network-level integrations, enabling policy-based control over which traffic is isolated, logged, and inspected. The service aligns with zero trust (zero trust security) concepts by assuming that external web and email content may be hostile and enforcing remote execution rather than trusting endpoint defenses alone.

Menlo Security’s offerings are used by enterprises, government agencies, and other institutions that require control over user access to SaaS applications, corporate web applications, and general internet destinations. The platform fits into security portfolios focused on web security, email security, secure access to SaaS and private apps, and threat protection for users who work on unmanaged networks or devices. It is relevant to security architects evaluating approaches such as remote browser isolation, SWG augmentation, and cloud-native secure access in support of distributed workforces.

In directory and marketplace contexts, Menlo Security can be categorized under web security, browser isolation, email security, secure access, and zero trust security solutions. Its technology domains include cloud-based security proxies, remote browser execution, content sanitization, URL and threat analysis, and policy enforcement for user access to web and SaaS resources.