Abstract: An agent can be installed that is separate from an unsecure application, such as a third party browser, executing on a client device. Content to be displayed by, or accessible to, the application can be rendered or determined remotely, such that only unrestricted data is received by the application. Restricted data to be stored on the device, as may include one or more authentication credentials, can be transmitted over a secure connection to the agent, which can store the sensitive information to a secure location on the client device that is inaccessible to the application. Such management allows the sensitive information to be stored on the client device and provided with requests for restricted data, for example, while preventing the restricted data from being exposed to the application on the client device.

Abstract: Generally described, one or more aspects of the present application correspond to a content rendering system. A content management service hosts content on behalf of the content provider. The content management service includes one or more rendering engines that receive content from the one or more content providers that are registered with the content management service. Each content rendering engine can be configured to receive a content resource and generate at least one piece of processed content that can be rendered on a user device.

Abstract: Various embodiments provide a means of user and/or device authentication by monitoring interaction based posture data received from the client device. Such interaction based posture data may include the particular manner in which a user interacts with the content on the client device or the client device itself, such as scroll patterns, touch pressure, touch duration, elements selected, typing speed, swipes, downloads, among other characteristics that make up a posture profile associated with an authorized user. Thus, interaction data received from the client device that deviates from the posture profile of the authorized user may be used to detect aberrant behavior, which may indicate that the client device has been comprised, such as the client device being used by a user other than the authorized user or the presence of malware. When aberrant behavior is detected a security protocol may be initiated to secure the device.

Abstract: Generally described, one or more aspects of the present application correspond to a content rendering system. A content management service hosts content on behalf of the content provider. The content management service includes one or more rendering engines that receive content from the one or more content providers that are registered with the content management service. Each content rendering engine can be configured to receive a content resource and generate at least one piece of processed content that can be rendered on a user device.

Abstract: Systems, methods, and computer-readable media are described for automated optimization of one or more pages for display by a mobile computing device. Based on an analysis of the series of actions taken by a number of different users when interacting with one or more pages, a system may group the users into two or more groups based on similarities in the users' action paths. The system may then generate an optimized page template for the group that includes identifiers of the portions of at least one page determined to be frequently accessed or otherwise of interest to the users in the group, and that excludes at least some other portions of the at least one page. This template may be subsequently used to generate a modified version of a page for display on a mobile computing device operated by a member of the group.

Abstract: Systems, methods, and computer-readable media are described for capturing detailed data access audit trails identifying the portions of pages or other files accessed by users from a specific network content source. A graphical representation of a page or file may be rendered by an intermediary system, and an initial portion of the graphical representation may be sent to a user device along with control data. The user device may send interaction data to the intermediary system as the user interacts with the page or file, which may result in additional graphical content being delivered to the user device by the intermediary system. In the event of a corporate data leak or for other data access audit purposes, a system administrator may search stored interaction data to identify which users accessed or viewed specific information within one or more pages or files.

Abstract: Techniques and solutions are described for content synchronization across devices. A web page currently being viewed at a first device associated with a user profile of a user can be identified. Browsing information for the page (such as URL, scrolling location, and a DOM element) may be stored in the profile. The DOM element may be associated with page content displayed during a browsing session in a viewport while the web page is at the current scrolling location. The browsing information may be updated dynamically, upon detecting a change in the current scrolling location of the page at the first device. A request for displaying the web page at a second device associated with the user profile may be received. The browsing information for the web page may be provided to the second device, so that the web page with the current scrolling location is displayed at the second device.

Abstract: A system is disclosed that enables a user to access a first piece of content on a first computing device while accessing a related, but different piece of content on a second computing device. In some cases, the different piece of content is a portion of the first piece of content. In some embodiments, the system can automatically identify complementary content and can automatically cause the second computing device to access the complementary content without the user interacting with the second computing device. In some cases, the system may reformat the complementary content for presentation to the user based on characteristics of the second computing device.

Abstract: A system is disclosed that generates page profiles for network pages based on aggregated usage data. The page profile for a given page may, for example, include information regarding specific page generation tasks (e.g., resource requests) that are frequently executed by browsers when the page is loaded. The page profiles may be used by browsers or an intermediary system to preemptively perform selected page generation tasks, thereby reducing perceived page load times.

Abstract: Features are disclosed for generating bundles of content items and proactively providing the bundles to client devices. The bundles may be provided to client devices in response to requests for the content page that references the content items in the bundle, or in response to a request for a content page hosted by the same domain as the content items in the bundle. A browser module executing on the client device can extract the referenced content items in the bundle and cache them in a local content cache at the client device prior to the client device receiving and processing a requested content page. As a result, the browser module may have access to cached versions of referenced content items when processing the requested content page even if the referenced content items were not present when the requested content page was requested.

Abstract: A user device that presents a static non-interactive graphical representation of a content page received from an intermediary system may emulate controls or interactive elements included in the content page based on control metadata received from the intermediary system. The emulated controls enable the user device to restore the interactivity that is lost by generating the graphical representation of the content page. Further, the emulated controls may be included as part of an overlay layer positioned above the graphical representation of the content page. Information or control metadata for each control included in the content page may be provided to the user device with the graphical representation of the content page. The user device may use the control metadata to identify types of controls to emulate and where to position the emulated control with respect to the graphical representation of the content page.

Abstract: Features are disclosed for generating bundles of content items and proactively providing the bundles to client devices. The bundles may be provided to client devices in response to requests for the content page that references the content items in the bundle, or in response to a request for a content page hosted by the same domain as the content items in the bundle. A browser module executing on the client device can extract the referenced content items in the bundle and cache them in a local content cache at the client device prior to the client device receiving and processing a requested content page. As a result, the browser module may have access to cached versions of referenced content items when processing the requested content page even if the referenced content items were not present when the requested content page was requested.

Abstract: Techniques and solutions are described for content synchronization across devices. A web page currently being viewed at a first device associated with a user profile of a user can be identified. Browsing information for the page (such as URL, scrolling location, and a DOM element) may be stored in the profile. The DOM element may be associated with page content displayed during a browsing session in a viewport while the web page is at the current scrolling location. The browsing information may be updated dynamically, upon detecting a change in the current scrolling location of the page at the first device. A request for displaying the web page at a second device associated with the user profile may be received. The browsing information for the web page may be provided to the second device, so that the web page with the current scrolling location is displayed at the second device.

Abstract: A system is disclosed that generates page profiles for network pages based on aggregated usage data. The page profile for a given page may, for example, include information regarding specific page generation tasks (e.g., resource requests) that are frequently executed by browsers when the page is loaded. The page profiles may be used by browsers or an intermediary system to preemptively perform selected page generation tasks, thereby reducing perceived page load times.

Abstract: An intermediary system operates as an intermediary between content servers and user devices, and provides services for improving page load times as seen by end users. One such service involves converting all or a portion of a retrieved content page (e.g., web page) into a stream of graphics commands, such as OpenGL commands, that can be executed by the user device's graphics processing unit (GPU). The intermediary system sends these commands to a browser component running on the user device for execution by the GPU.

Abstract: Features are disclosed for determining which content item or items are likely to be requested by a particular user or device, or by a group of users or devices. The determined content items may be obtained independently of a request from the users or devices, and substantially current versions of the content items may be maintained at a server system, such as an intermediary system. Visual representations of the content items may be generated to reduce processing requirements at a user device. When the content items are determined to be likely to be requested by a particular user, a predicted time may also be determined, and the visual representations may be generated such that they are available at the predicted time.

Abstract: Features are disclosed for automatically generating content requests and recording metrics and other information about execution of the requests. The requests can be background requests, executed by user computing devices during idle periods and without any user initiation. The background requests may be browser requests for content pages. Metrics and other information about execution of the requests may be recorded during execution of the background requests and reported to a performance analysis system. Instructions to execute background requests can be generated so as to develop a data set, such as a data set for analyzing request execution performance.

Abstract: Features are disclosed for determining which content item or items are likely to be requested by a particular user or device, or by a group of users or devices. The determined content items may be obtained independently of a request from the users or devices, and substantially current versions of the content items may be maintained at a server system, such as an intermediary system. Visual representations of the content items may be generated to reduce processing requirements at a user device. When the content items are determined to be likely to be requested by a particular user, a predicted time may also be determined, and the visual representations may be generated such that they are available at the predicted time.

Abstract: Features are disclosed for determining which content item or items are likely to be requested by a particular user or device, or by a group of users or devices. The determined content items may be obtained independently of a request from the users or devices, and substantially current versions of the content items may be maintained at a server system, such as an intermediary system. Visual representations of the content items may be generated to reduce processing requirements at a user device. When the content items are determined to be likely to be requested by a particular user, a predicted time may also be determined, and the visual representations may be generated such that they are available at the predicted time.