MirrorTab

MirrorTab is a cybersecurity company that protects web applications and APIs from client-side and automated attacks. Its core approach is proprietary isolation technology, described as pixel streaming, that is deployed server-side so an application's code, DOM, APIs, tokens and data never reach the end user's browser. Because the client-side attack surface is removed rather than monitored, the company positions the product as stopping automation outright instead of detecting or throttling it. Listed threat categories include account takeovers, concurrent session exploitation, content scraping, automated money movement, transaction fraud, malicious browser extensions, cookie and token theft, formjacking, API abuse, data leakage and harvesting, script injection, AI-powered bots, agentic AI attacks and untrusted device access.

The product is delivered as an extension of a customer's existing edge stack — CDNs, WAFs and fraud platforms — and requires no code changes, plugins, agents or end-user installs. Protection can be triggered selectively by WAF rule, bot score, authentication state or feature flag, allowing it to be applied to high-risk users, sensitive transactions and post-login workflows rather than an entire site. The company also documents how the isolation model breaks each step of the man-in-the-browser attack chain, preventing a malicious extension from reading form submissions, modifying the DOM, viewing or altering network and API traffic, or rewriting transaction receipts. Alongside the enterprise product, MirrorTab has announced Trusty, a consumer-facing secure browsing companion for online banking and healthcare tasks, offered via a waitlist.

Founding story

Founder and CEO Brian Silverstein co-founded Honey, a shopping rewards browser extension later acquired by PayPal, where he served as CTO. Building what the company calls the world's most popular browser extension required working deep in the DOM, and that experience showed him how similar techniques could be used to access sensitive information during web sessions and expose businesses and consumers to fraud. MirrorTab inverts the model by removing the DOM from the end browser entirely.

Business model

MirrorTab sells its isolation technology to businesses as a server-side security layer that integrates with the customer's existing edge and fraud infrastructure, with no client-side software for the customer's end users. It is also developing a consumer-oriented secure browsing product, Trusty, currently at waitlist stage.

Sold to businesses as a security solution for web applications and APIs; specific pricing and contract structures are not disclosed.

Traction

The company reports a 2025 Cybersecurity Breakthrough award for Web Filtering and Control Solution of the Year and is working to broaden commercial availability following its seed round. It is a small team, listed at 1-10 employees with eight people at its San Francisco headquarters, and its advisors include Allison Miller, former CISO and VP of Trust at Reddit.

Latest developments

MirrorTab announced that it received a 2025 Cybersecurity Breakthrough award for Web Filtering and Control Solution of the Year, and has introduced Trusty, a consumer secure browsing companion for online banking and health information, currently accepting waitlist signups. Its $8.5m seed round was announced in February 2025.