Island raises $400M at $6.4B to secure enterprise AI agents in the browser
Enterprise browser startup Island raised $400M at $6.4B valuation. New AI agent security features and cost optimization tools target enterprise AI governance.
What Happened
On September 24, 2026, Island Inc. announced a $400 million Series F funding round led by Evolution Equity Partners. The round included participation from J.P. Morgan, Sequoia Capital, Georgian, and other institutional investors. Island is now valued at $6.4 billion — a $1.8 billion increase from its previous round, implying a prior valuation of approximately $4.6 billion.
Island's core product is an enterprise browser built on Chromium, the open-source engine that also powers Google Chrome. The browser is designed to secure how knowledge workers interact with cloud-based business applications. It blocks malware-laden pages, phishing attempts, and other web threats. It can also overlay custom security controls — such as blocking logins from insecure workstations or Wi-Fi networks — on top of third-party SaaS interfaces that may lack enterprise-grade security features.
Last month, Island expanded its platform with capabilities specifically targeting AI workloads. The browser can now inventory AI agents used by employees, map the MCP servers, files, and browser extensions those agents interact with, and block AI tools that pose security risks. It also filters malicious prompts and strips overly broad access permissions from authorized agents. On the cost side, Island logs inference expenses per agent and identifies unused tools or tasks that could be offloaded from expensive frontier models to cheaper alternatives.
Island reportedly plans to use the funding for product development and go-to-market expansion, including hiring 500 employees by mid-2027.
Why It Matters
The browser is becoming the governance plane for enterprise AI — and Island is positioning itself at the center of it.
As employees adopt AI agents and copilots, often without IT's knowledge, enterprises face a dual problem: security (who can see what data, what prompts are being sent, what tools are accessing what) and cost (how much is being spent on inference, and is it justified). Traditional CASB and DLP tools weren't built for agentic AI workflows. They operate at the API or network layer, which misses what happens inside the browser where users and agents actually interact with applications.
Island's approach — governing AI activity at the browser layer — sidesteps the integration complexity that plagues API-based governance tools. The browser sees everything: the prompts, the responses, the file uploads, the agent-to-MCP-server connections. That makes it a natural control point for enterprises that need to secure and optimize AI usage without deploying a dozen point solutions.
The $1.8B valuation jump signals that investors agree: the enterprise AI governance market is large enough to support a multi-billion-dollar browser company, not just a security tool.
Who Is Affected
Enterprise IT and security leaders deploying AI agents at scale now have a browser-native option for governing employee AI usage — covering security, cost, and inventory in one platform. AI tooling startups building copilots or agent platforms should treat enterprise browser vendors as both a potential integration partner and a potential gatekeeper: if an enterprise browser can inventory and block your agent, compatibility matters. CASB, DLP, and browser extension security vendors face a well-funded competitor that can enforce policies at the endpoint without requiring API integrations or agent-side cooperation.
Strategic Implications
For AI startup founders: If your product involves employee-facing AI agents, expect enterprise buyers to ask whether your tool is compatible with Island or similar enterprise browsers. Building compatibility or partnership awareness into your go-to-market strategy now will reduce friction in enterprise sales cycles later.
For developers building with AI APIs: Browser-level governance could intercept or filter the prompts and API calls your agent makes when running inside an enterprise environment. Design agents with transparent, auditable request patterns — clean MCP server connections, clear data access scopes — so enterprise browser policies don't silently break your workflows.
For non-technical business owners evaluating AI tools: If you're deploying AI agents across your workforce, an enterprise browser like Island could give you visibility and cost controls without buying separate CASB or DLP tools. Evaluate whether browser-based governance covers your AI agent security needs before investing in point solutions that may overlap.
What to Watch Next
Monitor whether Island's AI governance features attract adoption beyond its existing browser customer base — specifically whether enterprises adopt Island primarily for AI agent governance rather than general browser security. Also watch for competitive moves from Google (Chrome enterprise), Microsoft (Edge), and CASB vendors in response to the browser-as-governance-layer thesis.
Frequently Asked Questions
Q: What does Island's enterprise browser do for AI agent security?
A: Island can inventory AI agents used by employees, map the MCP servers and browser extensions those agents interact with, filter malicious prompts, remove overly broad access permissions, and log inference costs to identify unused tools or tasks that could be moved to cheaper models.
Q: How much did Island raise and at what valuation?
A: Island raised $400 million in a Series F round led by Evolution Equity Partners, valuing the company at $6.4 billion — up $1.8 billion from its previous round. J.P. Morgan, Sequoia Capital, and Georgian also participated.