Orro launches managed secure browser service in Australia

Orro has launched a managed secure browser service for businesses in Australia using technology from Island.

The move targets a part of corporate cyber security that many organisations have left outside formal controls: the web browser. Staff now use browsers for most daily work, including access to software-as-a-service tools, customer records, collaboration platforms and public artificial intelligence services.

That leaves companies exposed to risks outside more established layers of protection such as firewalls, endpoint software and cloud security systems. Many businesses still lack controls over what users can copy, download, print, upload or share within a browser session, and often do not have a clear audit trail of that activity.

Orro's managed service is designed to place policy controls directly into the browser session rather than rely only on network defences or software installed on a device. It can restrict actions including copy and paste, screen sharing, and the download or upload of sensitive information.

It can also distinguish between a company-managed machine and a contractor's personal laptop, allowing different policies to be applied based on the device and user context. That reflects a broader shift in security operations as companies manage a mix of employees, contractors and third-party users across office and remote environments.

Browser gap

The launch comes as cyber security teams face increasing scrutiny over data handling inside everyday workplace tools. Browsers have become the main interface for work, yet governance of browser activity has often lagged behind investment in networks and devices.

Orro linked the issue to the growing use of public AI tools, where staff may enter sensitive corporate or customer information into browser-based services without direct oversight. The service is intended to help organisations monitor and control those interactions more closely.

Daniel Greengarten, Chief Executive Officer of Orro, said many customers are now asking as much about visibility as breach prevention.

"A question we hear often is not whether an organisation has been breached, but whether they would know. The browser is the single biggest blind spot in most security environments. It is where staff spend the majority of their working day and where the least governance exists. That now includes AI, with employees routinely entering sensitive data into public AI tools through a browser, with no oversight and no controls. This service changes that. It gives our customers genuine visibility and control at the point where their data is actually at risk, without adding complexity their teams can't manage," Greengarten said.

The service is managed by Orro's Australian-based security team. Deployment can be completed in days, in some cases avoiding the need for broader virtual private network projects or full device enrolment programs.

Island partnership

Island provides the underlying browser technology behind the new offering. Orro is positioning it as a managed service layer for Australian businesses that want browser controls without running the system themselves.

The partnership also highlights a maturing market for enterprise browsers, which have emerged as a way to place security and governance rules directly into the application layer where people work. That has become more relevant as companies rely more heavily on browser-based software and as security teams seek alternatives to older perimeter-based models.

Hugh Darvall, Channel Lead APAC at Island, said many organisations have found browser security hard to implement because of trade-offs between control, usability and cost.

"This is not because they lack intent, but because the tools available until now required them to choose between security and usability, or between control and cost. Island was built to remove that trade-off. Partnering with Orro gives Australian organisations access to that capability through a team that already understands their security environment, their compliance obligations, and how to translate technology into operational outcomes. The result for customers is meaningful protection without the friction that has historically made browser governance so difficult to sustain," Darvall said.

The launch underlines how cyber security vendors and service providers are trying to move closer to the point where data is created, viewed and transferred. For many organisations, that point is no longer the network edge but the browser tab open on an employee's screen.

The Australian Signals Directorate recorded a cybercrime report every six minutes in the last financial year.