SquareX provides browser-based protection against malicious and suspicious websites through a combination of remote browser isolation and policy-driven controls. The platform allows enterprises to define custom criteria for what constitutes malicious behavior, such as domain age, geographic location, or excessive permission requests. The solution includes an in-browser site analysis engine that performs real-time detection of potentially malicious websites through DOM monitoring, live OCR, domain authority checks, and brand resemblance analysis. It incorporates phishing feeds to block known threats and can detect advanced attacks like Browser-in-the-Browser (BitB) phishing attempts that operate entirely within the browser. SquareX offers policy-based controls for blocking or isolating websites based on various risk factors including suspicious redirects, typosquatting, newly registered domains, unicode characters in domains, free hosting platforms, geographic origin, and referral sources from social networks. The platform includes an AI-powered policy generator that allows administrators to create security policies using natural language prompts. The disposable browser technology seamlessly integrates with employees' browsers to isolate suspicious content without disrupting workflow. This approach provides protection against threats that traditional cloud proxies and endpoint security solutions cannot detect, particularly for attacks orchestrated entirely within the browser environment.