SquareX, a cybersecurity firm focused on browser security, has raised US$20 million in series A funding.

The funding round was led by SYN Ventures, with contributions from existing investor Peak XV Partners.

The company offers a Browser Detection and Response (BDR) extension to protect against threats like phishing, malicious add-ons, and insider risks.

It allows users to maintain their preferred browsers without added complications.

The funding will assist SquareX in expanding its product offerings and advancing its technology.

🔗 Source: SquareX

🧠 Food for thought

1️⃣ Browser security has evolved from protocols to specialized detection platforms

The browser has undergone a significant security evolution spanning three decades, starting with Netscape’s introduction of the Secure Socket Layer (SSL) protocol in 1994, which became essential for secure internet communications 1.

Google’s Safe Browsing project, launched in 2005, marked another milestone by introducing automated protection against phishing and malware that now operates on over 3 billion devices worldwide 2.

Today’s reality of 95% of organizations experiencing browser-based attacks has created urgency for specialized solutions like SquareX’s Browser Detection and Response 3.

This progression represents a shift from securing connections (SSL/TLS) to detecting threats (Safe Browsing) to actively responding to sophisticated attacks within the browser environment itself.

The need for browser-specific security has accelerated as approximately 85% of the modern workday now involves browser-based activities, creating an extensive attack surface that traditional security tools weren’t designed to protect 3.

2️⃣ Enterprise browser security represents a rapidly growing market segment

SquareX’s $20 million Series A funding reflects investors’ recognition of the growing demand for specialized browser security solutions, as Gartner reports 52% of enterprises plan to adopt secure browsers by 2025 4.

This market growth is driven by the increasing inadequacy of traditional security approaches like VPNs and VDI solutions, which struggle to protect against sophisticated browser-based threats targeting cloud applications 3.