Coconut Secure Cloud Browser — Product Overview
A fully cloud-isolated, Chromium-based browser delivered as a service. No agents, no endpoint data, no VPN — just secure access to every web app from any device.
What you get out of the box
Cloud-isolated sessions
Every tab runs in an ephemeral container in the cloud — pixels stream to the user, data stays in the cloud.
Zero local data
Downloads, cookies, and credentials are contained server-side. Lost device = lost pixels, not data.
Policy-driven controls
Copy/paste, downloads, uploads, watermarking, printing, and URL filtering enforced per user or group.
Works on any device
Runs in any modern browser on Windows, macOS, ChromeOS, Linux, iOS, and Android. No install required.
SSO-native identity
SAML and OIDC out of the box — Okta, Entra ID, Google, JumpCloud, and more.
Instant rollout
Provision users, point them at a URL, and they're working — no imaging, no shipping laptops.
Three steps from zero to secure
Connect identity
Wire up your IdP via SAML or OIDC and import users or groups.
Set policy
Apply a starter policy or customize controls per role — downloads, clipboard, watermarking, URL allow/deny.
Share the URL
Users open the Coconut URL on any device and start working in a secure, isolated browser.
At a glance
| Browser engine | Open-source Chromium, patched continuously by Coconut |
|---|---|
| Hosting regions | Global — North America, EU, UK, APAC, with data residency options |
| Identity | SAML 2.0, OIDC; SCIM provisioning supported |
| Client requirement | Any modern HTML5 browser; no plugins, no agents |
| Streaming | Low-latency pixel/audio stream over WebRTC |
| Admin console | Web-based; per-tenant policies, users, audit logs, and reporting |
| Logging | Per-session audit logs, exportable to SIEM (optional) |
| Integrations | DLP, SIEM, IdP, and webhook-based events |
Standards we align with
- SOC 2 Type II controls aligned
- GDPR-aligned data handling with regional residency
- Supports HIPAA-aligned workflows (with BAA)
- Aligns with NIST SP 800-207 (Zero Trust)