Garrison Technology Ltd is a United Kingdom-based cybersecurity company that
specialises in browser isolation and secure web access technology. Founded in
2014 and headquartered in London, Garrison developed a distinctive approach to
defending organisations against web-borne threats by physically separating the
risky act of browsing the internet from the user's endpoint and corporate
network. The company is best known for pioneering a hardware-based form of
remote browser isolation, an approach that sets it apart from many software-only
competitors in the secure web gateway and isolation market.
The fundamental premise behind Garrison's work is that the web browser remains
one of the most common entry points for malware, ransomware, phishing payloads
and other malicious content. Rather than attempting to detect and block bad
content before it reaches a user, which is an inherently imperfect approach,
Garrison's model assumes that any web content could be malicious and renders it
in an isolated environment away from the user. Only a safe visual representation
of the web page is delivered to the user's device, meaning that active code
never executes on the protected endpoint.
What the Company Does
Garrison's core business is providing remote browser isolation (RBI) and secure
web access solutions to organisations that have stringent security requirements.
The company's technology is aimed particularly at government bodies, defence
organisations, financial services firms, critical national infrastructure
operators and other enterprises that handle sensitive information and face
elevated threat levels.
The central concept of browser isolation is straightforward but powerful. When a
user requests a web page, the page is fetched and rendered remotely on isolation
infrastructure rather than on the user's own computer. The rendered content is
then transformed into a clean, safe stream of pixels or a sanitised visual
representation that is transmitted back to the user's browser. Because the actual
web code, scripts and files are executed and contained remotely, any malicious
content is isolated and destroyed without ever touching the user's device or the
internal network.
What has historically distinguished Garrison from other isolation vendors is its
use of hardware to perform this isolation at scale. Garrison developed an
approach using purpose-built hardware, including custom silicon and System on
Chip (SoC) designs, to convert web content into safe pixels efficiently. By
performing the transformation in hardware rather than relying solely on software
virtualisation, Garrison aimed to deliver isolation that is both highly secure
and capable of supporting large numbers of concurrent users in a
cost-effective way.
Products and Services
Garrison ULTRA
Garrison ULTRA is the company's hardware-based browser isolation platform
designed for the most demanding and high-assurance environments. ULTRA uses a
hardware-enforced separation between the untrusted and trusted sides of the
system, relying on a one-way visual transfer process that converts rendered web
pixels into a clean video stream. This pixel-pushing approach provides a strong
security boundary because no executable web content can cross from the isolated
environment to the user. ULTRA is particularly suited to government, defence and
intelligence customers who require the highest levels of assurance and who often
need to allow staff to access the open internet from secure or classified
networks without compromising those networks.
Garrison SAVI
Garrison SAVI (Secure Application and Virtualisation Infrastructure) represents
the company's evolution of its hardware isolation concept into a more flexible
and broadly deployable form. SAVI is built around the principle of using
specialised silicon to enforce isolation, offering a hardware root of trust and
hardware-based separation while aiming to make the technology accessible to a
wider range of organisations. SAVI extends Garrison's isolation philosophy
beyond browsing to support secure access to applications and other resources,
positioning the company's hardware approach as a foundation for broader secure
access use cases.
Cloud and Managed Isolation Services
Alongside its hardware appliances, Garrison has offered its isolation capability
as a service, allowing organisations to consume browser isolation without
deploying and managing the underlying infrastructure themselves. This delivery
model lowers the barrier to adoption for enterprises that want the protective
benefits of isolation but prefer an operational expenditure model and reduced
in-house management overhead.
Security, Compliance and Risk Management Focus
Garrison's offerings are fundamentally aligned with security, compliance and risk
management objectives. The browser isolation model directly addresses risk by
shrinking the attack surface presented by web browsing, which is one of the most
exploited vectors in modern cyber attacks. By isolating web content, organisations
can reduce their exposure to drive-by downloads, malicious advertising,
weaponised documents and zero-day browser exploits.
For organisations operating under strict regulatory and compliance regimes,
isolation provides a defensible architectural control. It allows security teams
to demonstrate that web threats are contained by design rather than relying
solely on detection-based controls that can fail. This is especially valuable in
sectors such as government and finance where compliance frameworks demand
rigorous protection of sensitive data and systems.
Garrison's hardware-enforced approach is also relevant to high-assurance use
cases where a software-only boundary may be considered insufficient. The use of
a hardware separation layer can provide stronger guarantees that malicious code
cannot bridge from the untrusted browsing environment to the protected network,
supporting risk reduction strategies that assume sophisticated and persistent
adversaries.
Market Position and Customers
Garrison built a reputation as a specialist in high-security browser isolation,
with particular strength in serving government and defence customers in the
United Kingdom and beyond. Its emphasis on hardware-based separation gave it a
differentiated position in a market that includes a number of software-focused
isolation and secure web gateway vendors. The company's technology has been of
interest to organisations that cannot tolerate the residual risk of allowing
potentially hostile web content anywhere near their internal systems.
The company attracted investment to support its development and expansion,
reflecting interest in browser isolation as a category and in Garrison's
distinctive engineering approach. Its customer base has tended to concentrate in
sectors where the consequences of a breach are severe and where strong assurance
is a procurement requirement, including public sector bodies, defence and
national security organisations, and security-conscious enterprises.
Summary
Garrison Technology Ltd is a UK cybersecurity firm that delivers secure web
access through hardware-enforced browser isolation. Its core innovation lies in
using purpose-built hardware and silicon to physically separate risky web
content from user devices and corporate networks, converting web pages into safe
visual streams that cannot carry executable threats. Through products such as
Garrison ULTRA and Garrison SAVI, along with cloud-delivered isolation services,
the company serves organisations with the highest security and assurance needs,
helping them manage cyber risk, satisfy compliance obligations and allow safe
internet access from sensitive environments. By treating all web content as
potentially hostile and isolating it accordingly, Garrison offers a defensive
posture rooted in containment by design rather than reactive threat detection.
