Abstract: A web browser determines whether resources (e.g., files) of an enterprise are labelled in alignment with their contents. The web browser identifies a resource of the enterprise that comprises a sensitivity label, where the sensitivity label indicates sensitivity of the first resource. The web browser validates the sensitivity label of the first resource based on content of the first resource. If the sensitivity label does not align with the content of the first resource, the web browser enforces a policy for the first resource. The web browser then labels the first resource based on its sensitivity, which include scanning the first resource for sensitive features.

Abstract: Passwords are vetted by a web browser before the passwords are submitted to an enterprise for use. A set of password groups is generated, where each password group in the set is associated with one or more security constraints to be satisfied by passwords for access to protected resources of the enterprise. The web browser vets a password that is new or modified. Vetting the password includes, by the web browser, determining a first password group of the set of password groups to which the password belongs and determining if the password satisfies one or more first security constraints associated with the first password group. If the password satisfies the one or more first security constraints, the web browser accepts the password for use. If the password does not satisfy the one or more first security constraints, the web browser blocks the password.

Abstract: A web browser prevents phishing attacks in-browser. The web browser, which is associated with an organization, monitors activity of a user performed via the web browser. The web browser detects interaction of the user with a first website. Based on loading the first website, the web browser determines a reputation of the first website maintained by the organization. Based on determining that the first website has a low reputation or no reputation maintained by the organization, the web browser indicates to the user that the first website has a low reputation or no reputation.

Abstract: A data stream generated by a user operating a human-computer interface (HCI) is obfuscated, or “scrambled,” for keylogging prevention. Obfuscating the data stream generated by the user comprises, by a web browser, setting a hook for intercepting keypress events. Keypress events comprise user input events into the first HCI or virtual keypress events. Based on capturing a keypress event corresponding to a first keypress code that triggers the hook, the web browser scrambles the first keypress code to generate a second keypress code that differs from the first keypress code. Scrambling the first keypress code comprises changing, salting, or skipping the first keypress code to generate the second keypress code.