LayerX Security

LayerX AI & Browser Security Platform protects against AI, SaaS, web & data risks on any browser, app, device & identity, with no impact on user experience.

[LayerX Security @LayerxSecurity]

𝗔𝗸𝗮𝗺𝗮𝗶 𝗪𝗼𝗿𝗸𝗳𝗼𝗿𝗰𝗲 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗼𝗿 took center stage at @ciso_xc Chicago. 🎤

We led a practical session on AI security: as work moves across GenAI, SaaS, and the browser, security needs to follow.

See you next time at CISO XC Houston. 🚀

[LayerX Security @LayerxSecurity]

🎙️ Or Eshed joined The Security Podcast of Silicon Valley to discuss how enterprise AI risk shows up inside everyday browser sessions.
Listen ↓
Spotify: https://t.co/Dv3EsfkfUB
Apple Podcasts: https://t.co/Hwgx3nEsY2

[LayerX Security @LayerxSecurity]

LayerX was named Best AI Usage Control Platform by The Hacker News. 🏆
AI now spans SaaS, browsers, IDEs, desktop apps and agents. We help enterprises see and control AI use without disrupting work.
🔗https://t.co/AteEagln7r

[LayerX Security @LayerxSecurity]

Or Eshed and LayerX were featured on All Access with Host Andy Garcia, airing on Public Television, to discuss how enterprises can manage AI usage risks without blocking productivity.

Watch the segment ↓

[LayerX Security @LayerxSecurity]

SC Media covered our StealTok research: 12+ TikTok downloader extensions looked legitimate, some even “Featured,” then shifted into covert tracking and remote config. 130K+ users were compromised, and 12.5K installs were still active at analysis https://t.co/nMkRThuXe3

[LayerX Security @LayerxSecurity]

THN went hands-on with LayerX and the messy middle of AI usage: prompts, uploads, copy-paste, IDEs, AI extensions, and agentic workflows.
That’s where policy turns into practice.
https://t.co/HCCUPsXMeO

[LayerX Security @LayerxSecurity]

The prompt field is starting to look like an attack surface. 🛑🤖
When an internal LLM connects to company resources, one compromised user can turn prompt access into account takeover and lateral movement through the application layer.
https://t.co/8LcnUUylFc

[LayerX Security @LayerxSecurity]

🚨 Three lines in CLAUDE.md were enough to turn Claude Code into an offensive attack tool, with no coding at all.
In our test, it cited the file as authorization, then moved into login bypass, SQLi, and dumping creds.
Full breakdown + demo: https://t.co/GJ3f6QUSvs

[LayerX Security @LayerxSecurity]

Anthropic didn’t leak model weights. It exposed something more operationally useful: the layer around the model. @FortuneMagazine reports ~500,000 lines of Claude Code across ~1,900 files. In AI, the surrounding system is part of the security boundary. https://t.co/m2YwwuTNqL

[LayerX Security @LayerxSecurity]

@IntelBusiness and LayerX join forces to bring AI security to the endpoint. 🤜🤛 If AI risk happens in real time, AI security has to happen locally too. Local analysis keeps sensitive data on the device, with real-time decisions and no cloud round trips. https://t.co/y2PLZz8Yp9

[LayerX Security @LayerxSecurity]

We're headed to RSAC in SF, March 23–26 at Moscone Center. We’re meeting with security teams on securing AI interactions, prompts, uploads, and in-session actions. Plus our session: “From Prompt to Pwn” talk, Thu Mar 26, 12:20 PM PT (HT-R05). Book time: https://t.co/GDStisZzeA

[LayerX Security @LayerxSecurity]

🔎 New @BleepinComputer coverage of our Poisoned Typeface research.
Malicious commands can sit in the rendering layer while the HTML still looks harmless, so the user and the assistant are not reading the same page.
All but one vendor said - out of scope.
https://t.co/Q0n5isyuCR

[LayerX Security @LayerxSecurity]

New LayerX research shows AI assistants can call a malicious page safe because they read the DOM, not what the user sees. Text-only parsers miss instructions hidden in the rendering layer. AI should not be your web safety validator. https://t.co/Lz8j6SgioI

[LayerX Security @LayerxSecurity]

Gartner suggested banning AI browsers. You don’t remove GenAI risk, you remove visibility. 🔍 Or Eshed in Dark Reading: why bans backfire and what controlled enablement looks like in-session. https://t.co/VnF5yhBkN5

[LayerX Security @LayerxSecurity]

New research: Zero-permission extensions can hijack downloads by appending code to an installer. The download looks normal and runs normally, then the payload executes on the host. No warnings, no extra permissions, proxy tools miss it. PoC: https://t.co/PAWyTU1pvq

[LayerX Security @LayerxSecurity]

AI governance is getting budget, but many teams still don’t know what to ask for. @TheHackersNews covered our AI Usage Control RFP Guide: score vendors on incognito, AI browsers and agents, and corporate vs personal identities in-session. https://t.co/OahMkGQwaJ

[LayerX Security @LayerxSecurity]

The next chapter for LayerX begins today.
We’re announcing the appointment of Rupal Hollenbeck as Chair of the Board of Directors. She joins LayerX at a pivotal moment as AI transforms industries in unprecedented ways.

Read the full announcement: https://t.co/IMwVYJ2q1R

[LayerX Security @LayerxSecurity]

Shadow AI is getting loud 🤖
Shadow AI isn’t just new tools. It’s personal AI accounts + connectors pulling data from O365/Workspace into a tenant you can’t control. Identity ≠ governance. If you can’t see it in-session (browser), you can’t govern it.

[LayerX Security @LayerxSecurity]

Gartner launched a new AI Usage Control category. LayerX is currently #1 on the list 🏆⭐

If you run AI governance, the shift is clear: stop debating “allow AI” and start controlling it in-session, especially across GenAI tools and the browser.

Reviews: https://t.co/TuX2zeaXCN

[LayerX Security @LayerxSecurity]

Agentic Browser Protection is live. AI browsers now act, not just assist. See LayerX govern agentic actions and the AI sidebar without blocking AI browsers. Webinar Mar 10 + Mar 12. Register: https://t.co/KlTSUbJ0Qw