Push Security

Push Security is a browser extension built to detect and stop identity-based attacks at the point where they actually happen: inside the browser. The company describes it as "EDR for your browser," combining telemetry from user sessions with real-time controls and automated detection agents. It watches for adversary-in-the-middle phishing proxies, ClickFix-style exploits, malicious OAuth grants, rogue browser extensions, credential stuffing, session hijacking, and zero-day phishing sites — attack techniques that are hard to catch with traditional network or endpoint tools because they unfold entirely in the browser tab. Beyond attack detection, Push also covers identity hardening (finding unmanaged "ghost" logins and reused credentials across SaaS apps), AI visibility (tracking which AI tools employees use and what data they paste into prompts), and browser-based data-loss prevention, such as monitoring file uploads and clipboard activity for sensitive data. The extension works across a wide range of browsers, including Chrome, Edge, Firefox, Brave, Arc, and Safari, plus several newer AI-enabled browsers. It is aimed at enterprise security teams, and its customer list includes companies such as Sophos, GitLab, Cribl, GreyNoise, Ramp, and Thinkst. Push Security was founded in 2021 by Adam Bateman, Tyrone Erasmus, and Jacques Louw.