SentryBay implements isolation that runs as an endpoint agent or cloud service, removing active web content from devices and limiting client-side data exfiltration. It complements endpoint and web controls and is suitable for hardening browser access across mixed estates.