Push Security

Who uses Push Security and what it's for

Push Security is built for security teams that want to catch phishing and risky sign-ins inside the browser without moving employees to a new browser.¹ Its best uses are stopping account takeover, finding shadow SaaS and shadow AI, enforcing data loss prevention at upload and paste, and covering BYOD devices and Chromebooks.¹ On price, Push publishes $5 per employee per month on an annual contract and $6 monthly for up to 500 employees and quotes custom pricing for larger companies, while Island directs buyers to request a quote.¹¹⁴ Its main competitors are Island, a full enterprise browser, and LayerX and Keep Aware, two browser security vendors now owned by Akamai and Jamf.¹¹⁹¹⁰

Push says its customers span technology, finance, and healthcare, and its April 2025 announcement reports a customer base up 380 percent year over year in January 2025 and a platform deployed on more than 1.5 million endpoints.³ Push's pricing page also carries testimonials from security leaders at Inductive Automation, Cribl, GreyNoise, Centrica, and Flex.¹

It fits security teams that want browser-level telemetry and control without moving employees to a new browser. Push lists use cases for stopping account takeover, finding shadow SaaS and shadow AI, enforcing data loss prevention at upload and paste, hardening unmanaged identities, covering BYOD devices without MDM, protecting Chromebooks, and investigating browser incidents.¹

Push publishes $5 per employee per month on an annual contract and $6 monthly for up to 500 employees, billed in advance, and over 500 employees it quotes enterprise and volume pricing.¹ Nudge Security lists $5 per user per month for 150 to 1,500 users.¹²

The nearest competitors are browser security and enterprise browser vendors, and several have been bought by larger companies. Akamai completed its acquisition of LayerX on July 2, 2026 for approximately $205 million, and Keep Aware announced on September 23, 2026 that Jamf had acquired it.⁹¹⁰ Push's fact sheet adds that CrowdStrike acquired Seraphic and Zscaler acquired SquareX, and it describes Push as independent.² Island, the enterprise browser maker, announced a $400 million Series F on September 24, 2026.¹¹

A browser extension that watches sign-ins and attacks

We read Push's feature list and its list of supported browsers. The extension is what a security team installs for every employee, so its detection and blocking features are the core of what a customer pays for. Push runs as an extension in Chrome, Edge, Firefox, Safari, Brave, Opera, and Arc, and it also works with Island, Prisma Access Browser, and agentic browsers such as Comet, Atlas, and Dia.¹ Its detection list includes adversary-in-the-middle phishing, cloned login pages, browser-in-the-browser attacks, ClickFix, and session hijacking, with response modes to monitor, warn, or block.¹

On the identity side, Push shows which apps use SSO and which use passwords, flags missing MFA and weak or reused passwords, and tracks OAuth consents and browser extensions.¹ Push says routine browsing activity stays in the browser and only activity that matches detection rules is sent to Push, which stores data in the EU, in Dublin with a backup in Paris.¹

Deployment, integrations, and published pricing

We read Push's pricing page for install methods, integrations, and plan terms, and compared it with what G2 reviewers said about rollout. Push protects only the employees whose browsers have the extension, so the install step decides how much of a company is covered. Push says most customers deploy in under a day, by force-installing the extension through Intune, Jamf, or Google Admin Console, by email enrollment, or by self-enrollment.¹ A G2 reviewer in 2023 described deployment through their MDM as super easy.⁶

Native SIEM integrations cover Microsoft Sentinel, Splunk Cloud, Datadog, Panther, and Cribl Cloud, and alerts go to Slack and Microsoft Teams.¹ Every license includes the full platform, employees can be added or removed at any time, and payment is by card through Stripe or by bank transfer on request.¹ Push lists SOC 2 Type II, ISO 27001, ISO 27701, GDPR compliance, and Cyber Essentials.¹ A September 29, 2026 partnership with Proofpoint has Push supplying browser detection and blocking to Proofpoint Advanced Browser Protection.⁸

Three co-founders from MWR and three funding rounds

For the founders and the funding rounds, we read Push's releases and TechCrunch's 2022 launch story. Push came out of stealth in July 2022, so its track record is short and rests largely on its founders' earlier work. Adam Bateman, Tyrone Erasmus, and Jacques Louw founded Push after leaving MWR Infosecurity, which F-Secure bought in a deal TechCrunch reported at $106 million.²⁵ Push announced a $4 million seed round led by Decibel on July 19, 2022, with Duo Security co-founder Jon Oberheide and Thinkst CEO Haroon Meer among the angel investors.⁴

GV led a $15 million Series A announced on April 2, 2023, with participation from Decibel, and Redpoint Ventures led a $30 million Series B on April 24, 2025, with Datadog Ventures and B3 Capital joining.¹³³ TechCrunch described Push as London-based at its 2022 launch, and the company now lists Boston, Massachusetts as its headquarters with a team spread around the world.⁵²⁷

How it compares with Island and the acquired browser vendors

For each rival, we read its latest acquisition release or company announcement to learn who owns it now. A rival bought by a larger company follows that owner's plans for its product and prices. Island is a full enterprise browser, while Push is an extension that runs in the browsers employees use today, including Island itself.¹¹¹ LayerX and Keep Aware also offer browser security, and both now belong to larger companies, Akamai and Jamf.⁹¹⁰ Nudge Security starts from monitoring the mail tenant and adds a browser extension for login metrics, where Push starts from the extension and adds detection and response.¹² Push's own comparison pages set it beside remote browser isolation, secure web gateways, cloud access security brokers, and security awareness training.¹

Where Push Security falls short

We went through the nine G2 reviews on AWS Marketplace and Push's pricing and feature pages for gaps a customer could run into. The reviews all date from January 2023 to August 2024, so they describe the product as it was in those years. Push's current feature list includes a REST API, user and session timelines, and screenshot capture on detection events.⁶¹

Reviewers asked for more context in individual alerts, a way to add apps manually for companies that do not use Google or Microsoft SSO, and an export of the apps in use.⁶ Standard pricing covers up to 500 employees, and larger companies get a quote.¹