Overview
Swif Browser Security and the Agentic Security agent give you visibility into Shadow IT and AI use across your organization, so you can find and manage unapproved apps as they're used. Both work with Swif's device management and compliance features.
Swif Browser Security was previously called the Swif browser extension.
This article explains how to deploy them to every device, with Swif policies or Google Workspace.
Method 1: Swif policies (recommended)
Swif policies install Swif Browser Security and the Agentic Security agent across your fleet automatically.
Browser or agent | Policies |
Chrome | |
Safari | |
Firefox | |
Edge | |
Agentic Security |
Track coverage across your fleet
Track deployment from the Shadow IT or Agentic Security page:
Coverage alert: shows how many devices have the extension or agent installed, and how many are missing it.
Review Devices: lists the devices that are still missing it.
Hides automatically: the alert disappears once every managed device is covered.
Set up the deployment policies
Click Manage Deployment or Configure Policies to manage the policies for macOS, Windows, and Linux in one place:
Status | Meaning | Action |
Not Configured | The policy hasn't been created yet. | Click Configure Policy to create it. |
Configured | The policy is active. | Click Add Devices to assign it to more device groups. |
Platform support
macOS: deployed through Swif MDM.
Windows: installed as a system service.
Linux: supports x64 and arm64, such as AWS Graviton.
After a policy is assigned, the browser may need to restart for Swif Browser Security to start working. The Agentic Security agent starts reporting as soon as the device syncs.
Method 2: Google Workspace
Use Google Workspace's Force install setting to install Swif Browser Security in Chrome. It applies to users signed in with a managed Google Account on any device, and to enrolled browsers on Windows, Mac, or Linux. For details, see Google's Automatically install apps and extensions.
Sign in to the Google Admin console.
Go to Menu > Devices > Chrome > Apps & extensions. The Overview page opens.
If you signed up for Chrome Browser Cloud Management, go to Menu > Chrome browser > Apps & extensions instead.
At the top, choose the type of install:
Users & browsers: for users who sign in with a managed Google Account on any device, and for enrolled browsers.
Managed guest sessions: for users who sign in to a managed guest session on a managed ChromeOS device.
On the left, choose who to install it for. To apply it to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit or group.
Find and click Swif Browser Security.
In the panel on the right, under Installation policy, choose Force install, or Force install + pin to ChromeOS taskbar.
Click Save. Or, click Override for an organizational unit.
Removing a policy
If you remove a policy, or unassign it from a device, Swif updates the device's status to show it's no longer protected, so your audit trails stay accurate.