Surface has launched their data sovereign browser security platform! Super excited for this, good to have a tool doing what red teamers have been suggesting for years.

We out here 🤘🎉 prweb.com/releases/surface-s…

@surfacesec is opening up the platform for free trials and discounted early pilot pricing. If you want browser level visibility, but don’t want your data landing on third party servers or a rip and replace motion on all your browser, then now’s your time to try it out! Linked->

Thank you to our exhibiting sponsors for SLEUTHCON 2026! We wouldn't be a success without the support of our sponsors! We hope to see you tomorrow in Arlington, VA. There are still a few tickets left for our stragglers, and you can always join us virtually, too!

Checkout our newest blog post where we cover the similarities between the Kali365 device code phishing kit and Sneaky2fa, an AiTM style phishing kit. surface-security.com/blog/ka…

This was an interesting case we found when testing @Surfacesec’s phishing detection engine. It involves HTML smuggling but not in the way we typically think of it from a red team perspective. surface-security.com/blog/bl…

Surface stops these attacks in the browser and provides timelines and details for analysts. Get full visibility on current and emerging threats in the browser in the Surface platform, all from a simple browser extension.

@Surfacesec just released their platform and as a red teamer, it’s good. - Adaptive learning of auth endpoints - Surface Vision: Patent-pending architecture of visual and code signals to catch phishing. - Sovereign architecture: Your data stays yours I’ve linked their post below

Checkout our recent blog post on ClickFix and related attacks: surface-security.com/blog/cl…