Menlo Security review

Menlo Security is an enterprise browser security platform for protecting people and AI agents. Its product description centers on controlling activity in the browser rather than replacing an organization’s full security stack.

For high-risk browsing, Menlo routes sessions through its cloud for rendering and threat elimination. Its browser security features also include zero-day threat prevention and file protection. The Menlo Secure Extension adds data-loss prevention and visibility for interactions with trusted sites and web apps.

The AI-agent pitch is about applying security controls and visibility to agent workflows, including browser agents. Menlo says agents can connect to applications and data through web interfaces when limited APIs are available. That makes the browser a controlled access path, though the published product information does not spell out specific agent policies or supported integrations.

Pricing is license-based, but the pricing material does not publish rates. The Protect, Secure and Manage tiers are listed without prices or seat limits.

Menlo’s clearest strength is its focus: browser sessions, web-app activity and agent workflows are the center of the product, not an add-on to a broader endpoint pitch. Organizations that need to control browsing across trusted and high-risk sites can evaluate cloud rendering, browser DLP, file protection and threat prevention as parts of one browser security platform.

The agent angle is relevant where an organization wants agents to reach applications through their web interfaces because APIs are limited. Menlo says it provides controls and visibility for AI-agent and browser-agent workflows, and can connect agents to applications and data through those interfaces. That is a practical use case to investigate, but the available product information does not specify which agents, apps or policy controls are supported.

The design also gives security teams a place to consider data controls for web-app interactions, not just blocking known malicious sites. For companies assessing browser-focused security, Menlo is worth evaluating against the workflows they actually need to protect. Its product description covers both user browsing and agents; that breadth is a reason to put it on a shortlist, not proof that its controls will fit every environment.

The biggest buying problem is price opacity. The pricing information lists Protect, Secure and Manage as per-user plans, but publishes no monthly or annual rates. It says pricing depends on the number of user licenses; seat limits and overage costs are also not published. Menlo Care360 and supporting products or services are listed as add-ons, with no published prices. There is no free plan, and trial availability is not published. Buyers will need a quote to compare total cost or work out whether a plan fits their seat count.

User experience is another open question. In two Air Force Reddit threads, users report authentication loops, pages that remain blank, trouble accessing Gmail or other sites, and difficulty downloading a PDF. Those are individual reports in a managed government environment, not evidence that all Menlo deployments behave that way. Still, they point to a sensible evaluation checklist: test the sites, authentication methods and file workflows your users rely on.

The published material also gives no seat caps, overage terms or detailed plan-by-plan feature matrix, so buyers cannot verify those details from public pricing information alone.

The available pricing information lists three per-user plans—Protect for web protection, Secure for secure access, and Manage for managed security—but publishes no prices. Monthly and annual rates are unavailable, so there’s no way to calculate the jump between tiers or compare an annual discount. The information says pricing depends on the number of user licenses needed; seat limits and overage costs are also not published.

Menlo Care360 and supporting products or services are listed as add-ons, with no published prices. That leaves the total cost unclear: buyers need a quote to compare plan scope, add-ons, and any costs tied to seats or usage. The pricing details available to us are low-confidence, so confirm current terms directly with Menlo before budgeting. Small teams or buyers who need predictable seat costs may find the lack of public pricing a poor fit.

The published information doesn’t establish how long migration takes, what data can be exported, or whether existing browser policies and logs can be moved. It also doesn’t specify contract terms or integrations that could affect lock-in. Treat those as questions for Menlo, not assumptions: ask for export formats, retention periods, policy migration steps, and exit terms before signing.

Menlo routes high-risk browsing through cloud rendering and offers a Secure Extension for DLP and visibility on trusted sites and web apps. Before switching, pilot the workflows your users and AI agents depend on, and check how access exceptions are handled. Those details could shape the user experience, but the published material doesn’t say how they work in practice. We don’t have Reddit posts or comments in the published material, so we can’t substantiate claims about why customers leave. Ask Menlo for customer references and a documented migration and offboarding plan.