Firefox Enterprise Update Adds DLP, AI to Prevent Sensitive Data Leaks

Key Takeaways

• Mozilla has launched Firefox Enterprise 158.0, a new browser designed for corporate environments.
• This enterprise-focused release integrates built-in Data Loss Prevention (DLP) and controls for AI tool usage.
• The solution features a self-hosted Admin Console, enabling organizations to manage browsing, web access, and data sharing centrally within their own infrastructure.
• Key security enhancements include mandatory SSO, device security condition checks, profile encryption, and optional watermarking for sensitive data.

Mozilla has unveiled Firefox Enterprise 158.0, marking its entry into the dedicated enterprise browser market with a robust solution integrating advanced data loss prevention (DLP) and granular controls over artificial intelligence (AI) tool usage. Released on October 13, 2026, this new offering aims to provide organizations with enhanced security and compliance capabilities for employee web activity.

Centralized Control and Self-Hosting

The core of Firefox Enterprise 158.0 is a combination of the familiar Firefox browser and a self-hosted Admin Console. This architecture empowers security teams with comprehensive oversight of browsing activities, web access, and how company data is handled by employees. According to the Firefox Enterprise release notes, organizations are required to deploy this console within their own IT infrastructure.

Crucially, all supporting services, including browser updates, synchronization, telemetry, and crash reporting, also operate entirely within the organization’s environment. This design ensures that all management data remains under the company’s direct control, eliminating reliance on external, third-party management services.

Integrated Data Loss Prevention (DLP) and AI Controls

A primary feature of the new enterprise browser is its integrated DLP functionality. Administrators can configure policies to block or issue warnings for actions such as pasting content, uploading files, downloading data, and printing on specific websites. This allows for precise control over sensitive information.

Customizable messages can be displayed to employees, providing clear explanations for any restrictions. For instance, organizations can prevent staff from pasting proprietary information into unauthorized AI tools, while still allowing access to approved AI services necessary for their work.

The DLP checks are executed locally within the browser, meaning sensitive content does not traverse the network for inspection, enhancing both security and performance. For organizations that already utilize a third-party DLP agent via Firefox’s Content Analysis interface, the built-in DLP is automatically disabled, deferring inspection to the existing agent. Warnings and block events are still logged in the Admin Console, though this logging can be optionally disabled by administrators.

The emphasis on browser-level data controls is particularly relevant given the evolving risks posed by AI tools. Recent reports, such as the “BioShocking AI browser attack,” have demonstrated how adversaries can manipulate browsing contexts to trick AI agents into revealing sensitive data. While Firefox Enterprise’s release notes focus on general data movement controls, rather than a specific patch for that attack vector, the new features significantly bolster an organization’s defense against such exploits.

Enhanced Authentication and Device Security

Firefox Enterprise mandates employee authentication through the company’s single sign-on (SSO) provider, supporting OpenID Connect and enforcing any associated multi-factor authentication (MFA) requirements. This ensures secure access to corporate browsing environments.

Beyond authentication, administrators can enforce device security prerequisites, such as requiring disk encryption or active endpoint protection software, before granting access to the browser. If a device subsequently fails to meet these conditions, Firefox will automatically sign out the employee, maintaining continuous security posture.

Profile encryption is enabled by default, protecting browsing history, form data, saved logins, and TLS session tokens. This data is encrypted using a key provided by the Admin Console, rendering copied profile folders undecryptable without the correct key. Additionally, an optional watermarking feature can embed an employee’s email address and timestamp on sensitive web pages, aiding in the traceability of shared images without physically preventing screenshots.

Comprehensive Policy Management and Security Features

The Admin Console offers support for over 130 enterprise policies, including granular controls over browser extensions and update management. These capabilities directly address risks previously identified in reports concerning AI browser extension vulnerabilities that could expose private sessions and sensitive data.

A “Lockdown Mode” further enhances security by allowing administrators to disable JavaScript JIT compilation, block service workers, prevent HTTP downgrades, and isolate specific websites. Security event logging is configurable for each event type, with records sent directly to the organization’s console rather than Mozilla, facilitating integration with existing SIEM systems. The console also enables remote sign-out for lost or compromised devices.

Firefox Enterprise 158.0 inherits all security fixes from the standard Firefox 158 release. Access to Firefox Enterprise requires a deployed Admin Console and an early-access request to Mozilla.

What You Should Do

• Organizations should evaluate Firefox Enterprise 158.0 for its potential to enhance data loss prevention and control over AI tool usage within their environments.
• Deploy the Admin Console on your own infrastructure to maintain full control over management data and services.
• Configure DLP policies to block or warn against sensitive data transfers (pasting, uploads, downloads, printing) on specific, unapproved websites or AI tools.
• Implement mandatory single sign-on (SSO) and multi-factor authentication (MFA) for all users accessing Firefox Enterprise.
• Enforce device security conditions, such as disk encryption and active endpoint protection, to ensure secure access.
• Utilize profile encryption and consider optional watermarking for sensitive pages to enhance data traceability.
• Leverage the extensive policy management features to control extensions, updates, and enable “Lockdown Mode” for high-risk scenarios.
• Integrate security event logs with your existing SIEM systems for comprehensive monitoring and incident response.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.