Cette page n’existe pas encore dans votre langue. Vous lisez le texte anglais.
Glossary
Browser isolation
Browser isolation is running a web page away from your computer, so that only a stream of what it drew reaches your screen.
Two shapes of one idea
Both shapes move the page away from the thing being protected. They disagree only about how far away that has to be.
The remote shape
The page runs on a server elsewhere, and your screen receives pixels or a rebuilt document. Nothing it executes ever touches your machine.
The local shape
The page runs on your machine inside a sandbox the operating system holds shut. Its code stays in a process that may reach very little.
The reason it exists
Both were built so a page cannot get at files, other tabs or the rest of the network. Being recognised was never the question.
What the remote shape costs
Every keystroke and every frame crosses a network before you see it, and files have to be handed through a gateway. That is fair for opening one unknown link and painful for a working day.
For account work there is a second cost. The device values and the exit address then belong to somebody else's server rather than to you, and everyone else on that server carries the same pair.
What runs on your machine here
Pages open in a browser on your own computer, not on a server of ours. Each profile is started against a data directory of its own and knows of no other.
The rest is the system sandbox. Where a system cannot provide one, the app says so in plain words instead of quietly going without it.
Whose values these are
This page is executing on your computer, so these values are yours. Under the remote shape a page would be reading the server's instead.
Votre machine, en ce moment
- Platform
- mesure sur votre machine
- Screen
- mesure sur votre machine
- CPU cores
- mesure sur votre machine
- Time zone
- mesure sur votre machine
Lu dans votre navigateur et affiché ici. Rien n’est envoyé nulle part.
Often confused with
Profile isolation
That divides one browser's data between profiles rather than moving execution away from the machine.
Incognito
A window that throws away its storage at closing time. Execution never left the computer for a moment.
A virtual machine
A whole second computer, which divides everything and costs tens of gigabytes for each copy of it.
A proxy
It moves where your traffic comes out. The page itself still runs exactly where it always ran.
How to see where a page runs
Read the panel above against the machine you are sitting at. Values that match yours mean the page is executing here and nowhere else.
Then open the leak check inside a profile. It answers for the address that profile leaves through rather than for this website.
What this does not do
- Our pages do not run on somebody else's computer. Everything opens locally, and that is a deliberate choice rather than a setting you can flip.
- A sandbox is a wall against code, not against reading. A page inside one still reads every device value it is allowed to read, and that set is no shorter for the sandbox.
- It does not move the exit address. That is the proxy's work, and it is configured for each profile separately.
- It does not separate two profiles pointed at one proxy. They arrive at a site from one place whatever else is divided between them.
Check it
Each claim above is one place in the code and one stand.
- Each profile is launched against a data directory of its own
- apps/desktop/src/lib/forkEngine.js
- A system that cannot sandbox is reported rather than passed over in silence
- apps/desktop/test/песочница-на-linux.js
- The app window itself comes up inside a sandbox
- apps/desktop/test/окно-живое-в-песочнице.js
- Erasing a profile takes its directory with it
- apps/desktop/test/delete-leaves-nothing.js
Questions
- Is ARMANOS a browser isolation product?
- No, and the word is worth keeping straight. Pages here execute on your computer, and what is divided is the data and the identity of each profile.
- Does the remote shape hide my fingerprint?
- It replaces yours with the server's, which is one identity shared by everyone using that server. For account work that is the wrong direction.
- Can I use both at once?
- They solve different problems and neither answer substitutes for the other. One says what a page may touch, the other says who a site thinks you are.
- Does a sandbox stop tracking?
- No. Reading a screen size or drawing on a canvas is ordinary page work, and a sandbox has no reason to object to it.
- What happens when a system cannot sandbox?
- The browser starts without one and you are told in the same breath. A weaker browser you know about is better than a weaker browser you do not.
Open two profiles and compare them
The free plan gives two profiles, with no time limit and no card.