What Threats Does Menlo Security Protect Against?

Menlo Security's Browser Security Platform is positioned to stop threats that legacy endpoint (EDR/EPP), network (SASE/SSE), and data-loss-prevention (DLP) tools were not built to see — specifically threats that live inside the browser session. Based on Menlo's own product and solution pages, the platform targets four main categories: zero-day and phishing attacks, token theft, evasive ransomware, and sensitive data leakage (including PHI in healthcare). It also extends this coverage to AI agents, which Menlo describes as sharing the browser as their operating environment.

Zero-day threats and phishing

Menlo lists "Zero Day Phishing" as a named capability and says the platform delivers "zero-day threat prevention." The core claim is architectural: rather than trying to detect every new exploit signature, Menlo isolates or contains the browsing session so malicious content never reaches the user's device. This matters because phishing pages and zero-day exploits are typically brand-new and unclassified at the moment of delivery, which is exactly when signature-based tools are weakest.

Token theft

Token theft is called out explicitly in Menlo's healthcare messaging: "Stop the token theft, phishing and PHI leaks your EDR, SWG, and DLP were never built to see." Session tokens are what let an attacker reuse a legitimate login without needing the password again, so a stolen token can bypass MFA. Because the theft happens inside the browser session, Menlo argues that endpoint and network tools lack the session context to catch it — this is the "session visibility gap" the site describes.

Evasive ransomware

Menlo lists "Evasive Ransomware" under its Data Security solutions. The framing is that ransomware that evades traditional defenses often enters through browser-based vectors (malicious downloads, drive-by content, or credential abuse). By controlling the browser session, Menlo aims to block the delivery path rather than only reacting after execution.

Sensitive data leakage (including PHI)

Menlo offers "AI Adaptive DLP" and a Data Security solution set. In the healthcare example on its site, the specific concern is PHI (protected health information) leaks — data leaving through browser activity such as uploads, pastes, or generative-AI prompts. The stated goal is to stop these leaks "without slowing clinicians," i.e., without blocking legitimate clinical workflows.

Threats targeting AI agents

Menlo's current homepage headline is "Secure the New Enterprise Workforce: Humans and AI Agents," and it argues "The Browser Is the OS for Agentic AI." The platform claims to secure both human and AI-agent activity through a single control plane, addressing the same categories (phishing, token theft, data leakage) as agents increasingly perform tasks in the browser.

How to decide if this matches your need

Menlo's own differentiation claim is that SASE/SSE and EPP tools lack browser session context, so if your existing stack is network- and endpoint-centric and you have a browser-session blind spot, that is the gap Menlo targets. If your priority is purely endpoint malware or network perimeter control, the fit is less direct.

For specifics on packaging and cost, Menlo publishes a pricing page at menlosecurity.com/pricing; the site does not state prices directly, so you would need to request a demo or quote to get terms.