Security

Security starts with a smaller trust boundary

Review Isoline’s account permissions, local browser isolation, synchronized profile contents and signed-update requirements.

Security

Separate local browser sessions

Each profile has its own browser state. Websites run in Chromium, outside the privileged Isoline manager.

Account-authorized sharing

Browser sessions run locally. The service controls workspace membership and access to synchronized profile contents, and is trusted with those contents. Sharing uses TLS and account permissions, not end-to-end encryption.

Updates and product contracts stay inside narrow permissions

Application and browser updates must be signed, verified, and recoverable. Manager and cloud operations use scoped authorization, while normal logs and output exclude raw cookies, passwords, proxy secrets, two-factor secrets, and encryption keys.