Ericom Software

Ericom Software developed and deployed a comprehensive suite of browser isolation and zero trust network access solutions designed to eliminate web-borne threat vectors at the network perimeter. The platform's core innovation was Remote Browser Isolation (RBI), which executed all web content execution—HTML, JavaScript, plugins, and multimedia—in isolated cloud containers rather than on client endpoints. This architecture fundamentally prevented malware, ransomware, phishing, and zero-day exploits from reaching user devices, since dangerous code executed only within disposable containerized environments that never stored sensitive data. The solution was delivered clientlessly, requiring no agent installation on endpoints, which substantially reduced deployment friction in regulated environments (financial services, government agencies, healthcare) where endpoint configuration changes require extensive approval processes.

Ericom's platform integrated three core technology pillars: Remote Browser Isolation for general web browsing and email link rendering, Web Application Isolation (WAI) for protecting access to internal and SaaS applications, and Zero Trust Network Access (ZTNA) for replacing traditional VPN with identity-driven, attribute-based network segmentation. The clientless architecture was particularly valuable for organizations protecting classified or air-gapped networks, since browser isolation could be deployed as a gateway service without modifying endpoint security postures. The company also incorporated Content Disarm and Reconstruction (CDR) capabilities to sanitize downloaded files, providing layered protection against malware delivery through document-based exploits.

Founded in 1993 in Tel Aviv, Ericom was one of Israel's longest-standing cybersecurity enterprises, with three decades of expertise in secure remote access and network isolation. The company evolved through multiple market cycles—initially focused on secure remote access, then transitioning into browser isolation and zero trust as web-borne threats became primary attack vectors. Ericom served a sophisticated customer base including Fortune 500 enterprises, U.S. federal agencies (particularly DoD and intelligence community branches), NATO partners, and financial institutions requiring highest-assurance security. The company competed directly against Menlo Security, Cloudflare Browser Isolation, Zscaler's own isolation offerings, Palo Alto Networks' Prisma Access, and emerging competitors like Island. In 2023, Zscaler acquired Ericom for an undisclosed sum, specifically to integrate its mature browser isolation and ZTNA technology into Zscaler's Zero Trust Exchange platform. This acquisition validated that browser isolation had moved from niche defense technology to strategic enterprise architecture component in zero trust frameworks.

From a defense and national-security perspective, browser isolation addresses critical vulnerabilities in military and intelligence networks exposed to web-based threats. Intelligence analysts conducting open-source intelligence (OSINT) gathering routinely visit untrusted foreign websites, paste suspicious URLs from intelligence traffic, and handle web content from adversarial sources—activities that create substantial malware ingestion risk. Browser isolation eliminates this risk by sandboxing all web execution, enabling analysts to safely harvest intelligence without exposing classified networks to compromise. Similarly, military personnel conducting content review, monitoring foreign media, or following intelligence leads across the public internet face constant threat of drive-by-download and watering-hole attacks targeting military networks. ZTNA capabilities directly support DoD zero trust mandates requiring continuous identity verification and least-privilege access rather than perimeter-based network trust. Ericom's technology also supports air-gapped and segmented defense networks by providing secure gateway-based access without requiring endpoint modification, critical for environments with legacy systems or high-security certification requirements that prohibit agent installation.