Risky Business · 11/9/2026 · 36 min
Soap Box: Security must be more browser-centric
Transcript (10 segments)
Patrick Gray
For those of you who don't know, these soapbox editions of the show are wholly sponsored, so that means everyone you hear in one of them paid to be here.
Patrick Gray
Now, I am an advisor to Push Security, that means I got some share options in them.
Patrick Gray
And in fact, from now on, the only companies you're going to hear in these soap boxes, I think from next year, are going to be companies that I do advisory for, right? So that's just the way things have worked out.
Patrick Gray
the guts of the Push Security product is a browser extension that sits in the browser and it can do things like fishing prevention, right?
Patrick Gray
All of the stuff that mail gateways used to catch, but can't quite catch anymore because fishing crews obfuscate stuff, push catches that.
Patrick Gray
but they really started off as like this identity security play that as you'll hear, Adam says, well, no one really cared about at the time, doing an inventory of where staff are signing up for accounts and that sort of thing.
Patrick Gray
once you're in the browser and you're doing this sort of stuff, what happens if you add like a client to run on the machine as well, and you can have messaging between the browser extension and the client, you can start doing DLP stuff, you can start doing secure web gateway stuff, even just with the extension there.
Patrick Gray
The the whole point of this conversation is like, well, once you start being very browser centric in your thinking, what other use cases flow from there?
Patrick Gray
And as you're going to hear, push are doing a push into DLP.
Patrick Gray
and they're also doing a push into the secure web gateway kind of thing because why do you want to trombone all of your traffic through a Zscaler product when you could just have a browser extension that does the same thing, but better.