Surface Security

The browser security solution that places an automated analyst in every browser. All on-prem or in-your-cloud.

Stop phishing, AI data loss, and more

[Grant Smith📡 @S1n1st3rSecuri1]

Surface has launched their data sovereign browser security platform!
Super excited for this, good to have a tool doing what red teamers have been suggesting for years.

[Surface Security @Surfacesec]

We out here 🤘🎉

https://t.co/1MEOfuPanO

[Grant Smith📡 @S1n1st3rSecuri1]

@surfacesec is opening up the platform for free trials and discounted early pilot pricing.

If you want browser level visibility, but don’t want your data landing on third party servers or a rip and replace motion on all your browser, then now’s your time to try it out!

Linked->

[SLEUTHCON @SLEUTHCON]

Thank you to our exhibiting sponsors for SLEUTHCON 2026!

We wouldn't be a success without the support of our sponsors!

We hope to see you tomorrow in Arlington, VA.

There are still a few tickets left for our stragglers, and you can always join us virtually, too!

[Surface Security @Surfacesec]

Checkout our newest blog post where we cover the similarities between the Kali365 device code phishing kit and Sneaky2fa, an AiTM style phishing kit.

https://t.co/m1GJCMuetH

[Grant Smith📡 @S1n1st3rSecuri1]

This was an interesting case we found when testing @Surfacesec’s phishing detection engine.

It involves HTML smuggling but not in the way we typically think of it from a red team perspective.

https://t.co/i2Mzuwj6Pg

[Surface Security @Surfacesec]

Surface stops these attacks in the browser and provides timelines and details for analysts.
Get full visibility on current and emerging threats in the browser in the Surface platform, all from a simple browser extension.

[BleepingComputer @BleepinComputer]

Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing
https://t.co/vWUEt8Qx1e

https://t.co/vWUEt8Qx1e

[Surface Security @Surfacesec]

@zellic_io @0xocdsec @eternalsakura13 Yet another reason to use Surface…

[Grant Smith📡 @S1n1st3rSecuri1]

@Surfacesec just released their platform and as a red teamer, it’s good.
- Adaptive learning of auth endpoints
- Surface Vision: Patent-pending architecture of visual and code signals to catch phishing.
- Sovereign architecture: Your data stays yours

I’ve linked their post below

[Surface Security @Surfacesec]

Checkout our recent blog post on ClickFix and related attacks:

https://t.co/xzs78GSKdy

[Surface Security @Surfacesec]

@shenetworks Would it be competing doing some work for us?👀