Secure, modern Remote Browser Isolation (RBI) with a clientless experience

🖥️ NEW in v18.10.0 — the BrowserBox desktop app ^BETA

BrowserBox now ships with a desktop app for running your BrowserBox without the command line.
Start and stop sessions, pick how people reach it (Cloudflare, ngrok, Tor, ZeroTier or direct), copy the login link,
manage browser policy, and run any bbx command from a form, with live progress and the full output a click away.
On Linux hosts, the Fleet dashboard shows your whole seat pool at a glance: capacity, routes, health checks, and one-click actions per seat.

Open it with bbx gui. The app comes inside the BrowserBox binary you already installed, so there is nothing extra to download.
It installs for your user on first run and prints where it lives, so you can pin it to your Dock, Start menu or desktop.
Signed and notarized on macOS, signed on Windows, and available on Linux desktops (X11).

_{Beta: the desktop app is new and still evolving. The bbx command line remains the complete, supported interface. Please tell us what works and what doesn't.}

🔐 NEW in v18.0.1 — Passkey authentication on macOS: sign in to websites with real passkeys inside your remote browser.
Passkeys are created and stored on your Mac's Secure Enclave and unlocked with Touch ID via the BrowserBox Passkeys helper — a small signed & notarized app that BrowserBox prompts you to download when a site requests a passkey. Your keys never leave your device.

💻 Try it in your terminal — access BrowserBox over SSH via KRNL:
ssh krnl.duetbrowser.com
A full text-mode browser demo, no install and no signup. Learn more about KRNL →

🇺🇸 NEWS — USA Edition (v17.7.6), coming July 4, 2026: our most stable BrowserBox yet.
Enhanced streaming stability under co-located and heavy-workload deployments, full suppression of invisible browser prompts that could capture input, per-user managed browser policy, cross-origin iframe instrumentation (preview) for containers and strict-isolation sites — and 60 FPS streaming re-validated end to end.

🆕 APRIL 2026: Hyper-Frame — the unlimited iframe — is live!
Embed any website, automate remote browsers, and build web-in-web apps. Try the live console →

Windows 98½ Demo: Try BrowserBox with our nostalgic Windows 98½ demo — free 17-minute cloud browser sessions, no signup required.
Cloud API: Purchase minutes and create on-demand cloud browser sessions via REST API.
API Docs · Pricing · Live Demo · Hyper-Frame

_{Happy Birthday, America the Beautiful 🎉🗽}

BrowserBox is a remote browser isolation (RBI) platform. It streams a full, modern browser to any client — 60 FPS, low latency — and runs on Windows, macOS, Linux, and containers. BrowserBox is commercial software. A valid license is required for all use, including development and evaluation. BrowserBox is not open source.

At a glance:

• Clientless RBI — no plugins, no downloads for end users
• 60 FPS streaming with real responsiveness
• Embeds anywhere via <hyper-frame> (Hyper-Frame)
• Cloud API for ephemeral sessions, no self-hosting needed
• Works on Windows, macOS, Linux, and containers like Podman, and LXC
• Policy controls, DLP, and audit-friendly workflows

ASCIInema Recordings | Live Demo | Cloud API | Pricing | Current Customer Guide PDF | Support

Official sites: BrowserBox, DOSAYGO, Hyper-Frame, CloudTabs

Notice: Legacy source code removed (March 2026)

When BrowserBox transitioned to a binary distribution model in late 2025, we retained legacy source code in this repository for a six-month period to give existing customers time to migrate. That period is now over and all legacy source has been removed.

Current BrowserBox source is private and proprietary. It diverges significantly from the legacy code that was previously housed here -- by over 1,000 commits -- with extensive bug fixes, security hardening, and performance enhancements that are absent from the legacy codebase and any forks thereof.

Legacy source code may still be visible in third-party forks as a historical curiosity. That code is not open source. Permission is not granted to use that source in your products, to train AI models, or to re-implement BrowserBox functionality from it. These acts violate BrowserBox terms. See LICENSE.md and TRADEMARK.md.

Current source is available to customers above a threshold ACV as part of due diligence, on request. Contact [email protected].

Table of Contents

1. Why BrowserBox?
2. Key Benefits
3. Who Uses It
4. Real-World Use Cases
5. Core Features
6. What's New
7. See It In Action
8. Supported Network Topologies
9. Platform Compatibility
10. Install
11. Quick Start
12. Documentation
13. GitHub Actions
14. Cloud API
15. Embed BrowserBox
16. Advanced Usage
17. License Compliance & Privacy
18. FAQ
19. Licensing
20. Support
21. About DOSAYGO

1. Why BrowserBox?

The web is genuinely dangerous, and standard browsing pushes that risk directly onto your network and your endpoints. BrowserBox flips the model: the browser runs on a server you control, and clients receive a rendered stream — so malware, exploits, and sketchy sites never touch user devices. Security teams get isolation without fighting users over endpoint agents. SaaS builders can embed a full browsing experience into their products without headless brittleness. Regulated organizations get audit trails and DLP controls baked in.

• Threat containment: browser exploits hit the server, not the endpoint
• True clientless access: any modern browser, zero installs for end users
• Embeddable: build web products that include real, live browsing
• Automation-ready: a real browser, not a headless approximation

2. Key Benefits

• Threat isolation: malware, exploits, and bad sites hit the server — not client devices
• Clientless: works in any browser, zero install for end users
• Cross-platform: Windows, macOS, Linux (Debian, Ubuntu, RHEL, CentOS, NixOS), and containers like LXC
• Smooth UX: low-latency rendering, 60 FPS
• Solid CLI and embedding API for builders and integrators

3. Who Uses It

• Security teams — isolate browsing risk from corporate endpoints
• SaaS builders and integrators — embed live browser sessions in products
• IT and ops — access internal web UIs from anywhere, without broad network exposure
• Automation and QA — run real browser workflows without headless fragility
• Regulated orgs — healthcare, finance, government — where audit trails and DLP policies aren't optional

4. Real-World Use Cases

Home Lab: The Always-On Jump Browser

If you run a Synology NAS or any always-on home server, BrowserBox fits in naturally as a private jump browser for your local network. Install it once via CLI, and you've got a streamed Chrome session you can reach from any device — phone, laptop, whatever's in your hand — that can immediately access your router admin panel, IP cameras, smart home hubs, printers, and any other internal web UI that normally requires being on the same LAN.

No port forwarding maze. No VPN just to check one device. You expose a single protected BrowserBox session, secured by token, and everything behind it stays private. Trigger large downloads and they land directly on NAS drives — no extra hops, no cloud middleman. When a site throws a captcha or anti-bot wall, just handle it visually in the remote browser. It's your network. This is how you reach it cleanly.

Enterprise: Secure Remote Browser Gateway

In corporate, government, healthcare, and financial environments, BrowserBox acts as a secure browser gateway deployed inside a protected network. Teams, contractors, and vendors reach internal web applications, intranets, admin panels, and legacy systems — without installing software on their devices or opening broad network access to your infrastructure.

Admins control copy-paste, file uploads and downloads, printing, and keyboard inputs per user or session. DLP policies keep sensitive information contained inside the isolated browser. Every action is auditable. Malware and exploits are contained server-side. Whether you're managing compliance with HIPAA, financial regulations, or government security requirements, the controls are there — and they're not bolted on as an afterthought.

Same core idea, two very different worlds: keep the browser where you can watch it, and stream the view to wherever people actually are.

5. Core Features

• Clientless RBI — access from any modern browser, no install required for end users
• Cross-platform — Windows, macOS, Debian, Ubuntu, RHEL, Rocky Linux, CentOS, NixOS, and containers like LXC
• bbx CLI — manage install, licenses, users, run modes, and tunnels from the command line
• <hyper-frame> embedding API — drop a live browser session into any web product
• Cloud API — purchase minute packs and spin up ephemeral sessions via REST, no self-hosting
• Multi-seat on Linux — bbx fleet runs a pool of isolated seats on one host, with a dashboard in the desktop app
• Session recording — capture any session as a self-contained flipbook site
• Automation-ready — a real browser; Puppeteer and Playwright integrations coming
• DLP, Tor support, access controls — policy enforcement built in, not bolted on
• Cloud templates — deploy on AWS, Azure, Linode or Vultr from a provided template

6. What's New

• Much broader Windows support (v18.9.0) — bbx on Windows now has the connection and management commands that used to be Linux- and macOS-only: Cloudflare tunnels, Tor onion services, ZeroTier networks, an nginx front door and legacy Windows 9x clients, plus restart, logs, use-chrome, activate and vacancy. Each tunnel installs what it needs the first time you use it. See what runs on Windows.
• Passkey authentication on macOS (v18.0.1) — sign in to sites with passkeys from inside your remote browser. The BrowserBox Passkeys helper (signed & notarized) stores keys in the Secure Enclave and unlocks them with Touch ID; BrowserBox offers the download automatically when a site requests a passkey.
• KRNL — BrowserBox over SSH — a text-mode browser in any terminal: ssh krnl.duetbrowser.com to try it free, or get the KRNL bundle.
• Cloud API — purchase minute packs at win9-5.com/pricing and create ephemeral browser sessions via REST. No server to manage.
• Windows 98½ Demo — free 17-minute cloud sessions at win9-5.com/demo, no signup.
• Flipbook Recording — record any browsing session as a self-contained static flipbook site. Deploy to Cloudflare Pages with one command.
• Binary release system — BrowserBox now ships as a signed binary. Install with one command, update the same way.
• 60 FPS streaming — real-time, low-latency rendering for a browsing experience that actually feels like a browser.
• Unified install endpoints — browserbox.io/install.sh (Linux/macOS) and browserbox.io/install.ps1 (Windows).

7. See It In Action

Secure Web Browsing Seamless PDF Viewing Powerful DevTools Full Browser Features (File Uploads, etc.)

8. Supported Network Topologies

BrowserBox isn't fussy about how your network is wired. Whether you're behind a corporate NAT, routing through Tor, or running a Cloudflare tunnel for a quick demo, it fits in without requiring you to restructure anything. Access can be browser-based over HTTPS/WSS/WebRTC or terminal-native over SSH. The SSH access topology is provided by the optional KRNL BrowserBox add-on, which presents the remote browser as an interactive terminal user interface (TUI) in an SSH session with PTY allocation. KRNL is available with BrowserBox as a BrowserBox + KRNL bundle.

The table below covers the supported topologies — pick what matches your situation.

Notes on Flexibility & Power:

• KRNL terminal access is distinct from SSH port forwarding: KRNL provides an interactive TUI over SSH, while port forwarding carries BrowserBox's HTTP(S) access path through a private tunnel.
• BrowserBox supports mixing and matching topologies — you can run HTTPS with a Cloudflare tunnel on custom ports, or Tor over SSH forwarding. The topology is yours to compose.
• The bbx CLI handles tunnel setup, cert orchestration, and run modes in one place, so you're not stitching together a dozen separate tools to get a working deployment.

9. Platform Compatibility

BrowserBox runs where real work happens — here's the current support matrix.

[!NOTE] Run bbx (or bbx install on Windows) to ensure you have the latest version (v13+) with all fixes and features.

*Tails is not supported because Chrome cannot be installed.

†Windows 9x clients are supported via the bbx win9x-run command which outputs the login link for legacy clients (IE 5, IE 6, Netscape). Supported client OSes: Windows 95, 98, 2000, NT. The server still needs to run on a modern system. Modern clients can use the legacy endpoint too, but the experience is understandably retro.

10. Install

BrowserBox is commercial software. A valid license is required for all use, including development and evaluation. BrowserBox is not open source. Start 7-Day Paid Evaluation or purchase a license.

Linux & macOS

curl -fsSL https://browserbox.io/install.sh | bash

Windows

irm https://browserbox.io/install.ps1 | iex

For non-interactive full installs, set BBX_INSTALL_HOSTNAME and BBX_INSTALL_EMAIL. Legacy install aliases BBX_HOSTNAME, BBX_EMAIL, and EMAIL remain supported for compatibility.

Downloads are served from a CDN. To ensure fast download speeds, installs and updates now flow through dl.getbrowserbox.com, backed by Cloudflare R2. GitHub Releases remain the fallback origin and every published asset is still available there.

Nothing is less trustworthy for going through the CDN: bbx verifies every download against the RSA-signed release manifest before installing it, using a public key compiled into the installer. A mirror that serves a stale, corrupt, or tampered artifact causes an automatic retry from GitHub — never a bad install.

If you need to bypass the CDN (air-gapped mirrors, strict egress allowlists, or debugging), set BBX_NO_CDN=1 to use GitHub only, or point BBX_ASSET_BASE at your own mirror laid out as <base>/<tag>/<asset>.

What runs on Windows

A Windows install runs one BrowserBox instance per machine. Alongside setup, start, stop, status, licensing and policy, bbx on Windows offers:

cloudflared, Tor, ZeroTier and nginx are installed the first time the command that needs them runs, not by the BrowserBox installer, so a basic install stays lean. Installing ZeroTier needs an elevated PowerShell.

Two things are not available on Windows: audio, and the multi-user commands (bbx fleet, start-as, stop-user). Both need per-seat Remote Desktop Services licensing on Windows Server.

Via npm

npm i -g @browserbox/browserbox

11. Quick Start

A product key is required. Obtain one via paid evaluation or commercial / non-commercial purchase.

bbx install
bbx certify YOUR_PRODUCT_KEY
bbx setup
bbx run

12. Documentation

• Current Customer Guide PDF

13. GitHub Actions

Launch BrowserBox directly on a GitHub Actions runner with BrowserBox/browserbox-action.

• Supports tunnel: none, cloudflare, and tor
• Defaults to a minimal runner footprint with BBX_MINIMAL_MODE=true
• Disables update checks during runner launches with BBX_NO_UPDATE=true
• Requires a BrowserBox license key (paid evaluation or purchase)

jobs:
  browserbox:
    runs-on: ubuntu-latest
    steps:
      - name: Launch BrowserBox
        id: browserbox
        uses: BrowserBox/browserbox-action@v1
        with:
          license-key: ${{ secrets.BROWSERBOX_LICENSE_KEY }}
          tunnel: cloudflare

      - name: Print login link
        run: echo "${{ steps.browserbox.outputs.login-link }}"

14. Cloud API

Create on-demand ephemeral browser sessions without self-hosting. Purchase minute packs and manage sessions via REST.

curl -X POST https://win9-5.com/api/v1/sessions \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"minutes": 15}'

Full API documentation: win9-5.com/api

15. Embed BrowserBox

<script src="https://win9-5.com/hyper-frame.js" type="module"></script>
<hyper-frame
  login-link="https://your-instance.com/login/abc123"
  width="1024"
  height="768">
</hyper-frame>

The <hyper-frame> element provides a session-host API with namespaced surfaces for tabs, pages, capture, augmentation, selection, and policy-gated capability control.

const bbx = document.querySelector('hyper-frame');
await bbx.whenReady();
await bbx.page.navigate('https://example.com');

Install via npm

The embedding element is also published as @browserbox/hyper-frame for use in bundled apps:

npm i @browserbox/hyper-frame

import '@browserbox/hyper-frame';

Renamed from <browserbox-webview>. The element, the script and the npm package were all renamed to Hyper-Frame. The old @browserbox/webview-element package still exists on npm but is no longer updated, and the old browserbox-webview.js script URL is gone. Point new work at <hyper-frame>.

16. Advanced Usage

• Secure document viewing — open PDFs and sensitive files in the remote browser without ever downloading them to the client device (Linux only)
• Remote DevTools — right-click in any BrowserBox session to access full Chrome DevTools running in the isolated environment
• Tor and SSH tunneling — bbx tor-run for anonymous onion-routed access; SSH port forwarding for private, low-latency internal routing

17. Flipbook Recording

BrowserBox can record a browsing session as a flipbook — a self-contained static site of sequential JPEG frames with an interactive JavaScript viewer. Recordings are produced directly from the internal screencast pipeline with negligible overhead.

Quick Start

# Enable recording during setup
bbx setup --flipbook-record ~/my-recording --flipbook-description "Demo walkthrough"

# Run BrowserBox normally
bbx run

# Stop — frames are compiled into a flipbook site and optionally deployed
bbx stop

How It Works

1. bbx setup --flipbook-record <dir> enables recording by writing BBX_FLIPBOOK_DIR to the BrowserBox config.
2. At runtime, each screencast frame is captured as a JPEG + JSON metadata pair — zero overhead when recording is off (single boolean check per frame).
3. On bbx stop, the built-in browserbox flipbook-generate command compiles the raw frames into a complete flipbook static site.
4. If Cloudflare Wrangler is available, the site is deployed to Cloudflare Pages automatically.

Output

Each recording produces a timestamped directory:

~/my-recording/
  2026-04-14T02-25-00-000Z--2026-04-14T02-30-00-000Z/
    site/
      index.html        # self-contained viewer
      manifest.json     # flipbook v1 manifest
      pages/            # sequential JPEG frames (000000.jpg, 000001.jpg, ...)
      assets/           # viewer.css, viewer.js, sw.js
      meta/             # provenance.json with full per-frame metadata

Multiple runs to the same directory produce separate timestamped subdirectories — each is a standalone flipbook site that can be served with any static file server or deployed to any hosting platform.

Options

18. License Compliance & Privacy

BrowserBox requires a valid license for all deployments — commercial, non-commercial, and evaluation. Usage data is collected solely for license compliance and operational purposes; it is never sold, never shared with third parties for marketing, and never used to profile users.

[!IMPORTANT] A valid license unlocks all features, ensures ongoing support, and guarantees a secure, compliant solution.

19. FAQ

Q: Can I get an evaluation license? Yes. Lock in your 7-day BrowserBox evaluation. Pay a one-time fee based on seats ($20 per seat with work email / $40 per seat with free or anonymous email providers), verify your ID via Stripe, and receive your license key by email. No subscriptions. Trial ends in 7 days, upgrade anytime. Your evaluation fee is deducted from your full license should you proceed to purchase. All sales final — no refunds under any circumstances. Start 7-Day Paid Evaluation.

Q: Why is a license required? BrowserBox is commercial software. A license funds continued development, security research, and support. It also gives you a legitimate, supportable deployment — not a fork of old code that diverged 1,000+ commits ago.

Q: Do you offer perpetual licenses? Current licensing is subscription-based. Enterprise arrangements, including perpetual options, are available — contact [email protected].

Q: How does BrowserBox compare to other RBI solutions? Most RBI products are cloud-only, expensive at scale, or require proprietary endpoint agents. BrowserBox runs on your own infrastructure (or ours via Cloud API), works with any client browser, and gives you genuine control over the deployment. It's also the only RBI platform with a Windows 98½ demo, for what that's worth.

Q: What do I receive when I purchase? A product key that activates bbx, access to all current platform binaries, documentation, and support channels. Enterprise customers above a threshold ACV can request source access for due diligence.

Q: How can I get volume discounts? Contact [email protected] for volume pricing, multi-year agreements, and enterprise terms.

Q: I may have used BrowserBox without a license. How do I become compliant? Reach out to [email protected]. We handle compliance situations directly and without unnecessary drama — the goal is to get you licensed and supported, not to make things difficult.

20. Licensing

BrowserBox is commercial software. A valid license is required for all use, including development and evaluation. BrowserBox is not open source.

• Commercial: Starts at $119/user/year. Purchase
• Non-Commercial: $49/user/year (non-profits, government). Purchase
• Evaluation: 7-day paid evaluation license (one-time fee per seat with ID verification via Stripe; fee credited toward full license on upgrade). All sales final. Start 7-Day Paid Evaluation
• Enterprise / Source Access: [email protected]

Seats

A licence covers a number of seats — one per concurrent user. On Linux, bbx fleet runs several seats on a single host; elsewhere it's one session per machine.

bbx vacancy                  # how many seats are in use, and by whom
bbx stop-user <username>     # release a seat someone left open

When every seat is occupied, the next bbx certify says so and stops rather than starting an unlicensed session. To add seats, email [email protected] — extra seats are added to your existing licence and your product key does not change.

21. Support

• API & Technical: [email protected]
• General: [email protected]
• Sales & Licensing: [email protected]

22. About DOSAYGO

DOSAYGO — do, say, go — those are three of the most universal human verbs, after "to be" (which no company has any business telling you what to do with). We're a small team building software that respects the people using it. Our products are BrowserBox (remote browser isolation) and DiskerNet (offline web archives). We don't do buzzwords. We ship things that work. Find us at dosaygo.com.

Ready to get started?
Start 7-Day Paid Evaluation · Commercial License · Non-Commercial License · Request a Demo

BrowserBox™ is © 2018-2026 DOSAYGO Corporation USA. All rights reserved.

dosaygo.com | browserbox.io | CloudTabs