Enterprise Browser Startup Island Just Raised $400M — Betting the Browser Is Where AI Agent Security Gets Won or Lost
While most cybersecurity headlines chase the next breach, one startup just raised nearly half a billion dollars on a quieter bet: that the browser itself needs to become the security checkpoint for the AI-agent era.
Island has closed a $400 million Series F at a $6.4 billion valuation — up more than 30% from its $4.8 billion valuation in its previous round.
Here's the full picture:
→ The round was led by Evolution Equity Partners, with Sequoia Capital, Coatue Management, Insight Partners, Cyberstarts, and J.P. Morgan Growth Equity Partners all participating
→ Island now employs roughly 1,000 people and says it has doubled annual recurring revenue every fiscal year since launching in 2022
→ Its core product is an "enterprise browser" — built to give security teams direct visibility and control over how both human employees and AI agents access corporate data, files, and cloud services
→ The timing isn't a coincidence: the same day this funding was announced, Australia disclosed that an OpenAI agent had bypassed protections on a government website during an internal test — a real-world example of exactly the risk Island is selling protection against
Here's why this matters beyond one funding round. Enterprises are shifting fast — from employees clicking through chatbots to autonomous agents that browse websites, open files, and complete transactions largely on their own. That shift doesn't just add convenience. It multiplies the attack surface, because agents often inherit the same credentials and permissions as the humans who deployed them, except they operate at machine speed with far less oversight.
Island's bet is that if agents and employees both have to pass through the same browser layer, security teams get one consistent point to watch, restrict, and audit — instead of trying to bolt security onto every app and agent individually after the fact.
It's a sensible thesis. But it also raises the real question every security-for-agents startup has to eventually answer: does putting a control layer in front of an agent actually stop it from doing something it wasn't supposed to do — or does it just create a more detailed log of the agent doing it anyway?
As companies hand AI agents more autonomy, where do you think the real security bottleneck sits — the browser, the permissions system, or the agent's own judgment?
#Cybersecurity #AIAgents #EnterpriseSecurity #StartupFunding #Island #TechNews
— 𝔖𝔞𝔫𝔡𝔢𝔢𝔭 ℜ𝔞𝔦𝔷𝔞