Protected EnvironmentsBrowser support matrix
Browser support matrix
Which browsers, operating systems, window modes and interactions the Orthalon browser extension protects, monitors or does not cover.
View Markdown
Matrix version 1 — 15 October 2026. Applies to the Orthalon browser extension 1.0.3 and later. Coverage reporting (posture, private-window state, removal signals) requires the first extension release after 1.0.3.
Each cell is one of:
- Supported — the extension inspects and enforces policy for this interaction, and the integration is covered by the extension's automated adapter and policy tests. Chrome and Edge certification on real browser builds is tracked separately (SEC-01-FR-03).
- Pilot — works in the pilot package, but is not covered by release regression testing. Do not rely on it as a control.
- Unsupported — the extension does not see or cannot act on this interaction. The console reports it as a coverage gap where the extension can observe that the gap exists.
A cell never means "protected by assumption". When the extension cannot tell whether an interaction is covered (for example a private window it is not allowed into), the fleet coverage view shows it as not covered.
Browsers and window modes
| Browser | Operating systems | Normal window | Private window (Incognito / InPrivate) | Guest / new profile |
|---|---|---|---|---|
| Google Chrome (current stable) | Windows, macOS, Linux, ChromeOS | Supported | Supported only when the extension is allowed in Incognito; otherwise Unsupported and reported | Unsupported unless the profile is managed and force-installs the extension |
| Microsoft Edge (current stable) | Windows, macOS | Supported | Supported only when the extension is allowed in InPrivate; otherwise Unsupported and reported | Unsupported unless the profile is managed and force-installs the extension |
| Mozilla Firefox | Windows, macOS, Linux | Pilot | Pilot when enabled for private windows | Unsupported |
| Safari | macOS, iOS | Unsupported (no signed release) | Unsupported | Unsupported |
| Other Chromium browsers (Brave, Opera, Vivaldi, Arc) | Any | Unsupported (may work; not tested) | Unsupported | Unsupported |
| Agentic AI browsers (for example Comet, Atlas) | Any | Unsupported | Unsupported | Unsupported |
| Mobile browsers | Android, iOS | Unsupported | Unsupported | Unsupported |
Private windows are environment-dependent. Chrome cannot be told by policy to run an extension in Incognito; see Private windows for the options per browser.
Interactions on certified AI applications
Certified applications: ChatGPT, Claude, Google Gemini, Microsoft Copilot (copilot.microsoft.com), Perplexity, Poe, Meta AI, Mistral Le Chat. Other AI sites use the generic adapter when it is enabled.
| Interaction | Event type | Chrome / Edge | Firefox | Notes |
|---|---|---|---|---|
| Prompt submission (typed text) | PROMPT | Supported | Pilot | Enter key and send control |
| Paste into the composer | CLIPBOARD | Supported | Pilot | Text paste |
| File upload (picker, drag and drop, pasted file) | FILE_UPLOAD | Supported | Pilot | Hosted, short-lived file analysis |
| Copy out of a monitored page | CLIPBOARD_COPY | Supported | Pilot | |
| File download | FILE_DOWNLOAD | Supported | Unsupported | Needs the downloads permission |
| Account context (managed / personal / unknown) | account fields on each event | Supported on ChatGPT, Claude, Gemini, Copilot, Perplexity | Pilot | Corporate only on the organization's own domains; see AI account classification |
| Sign-in and authentication forms | — | Unsupported (by design) | Unsupported | Password and sign-in fields are never read |
| Browser-native AI side panels (Copilot in Edge, Gemini in Chrome) | — | Unsupported | — | Browser UI surfaces are not web pages an extension can script |
| AI features inside other web apps (generic adapter) | PROMPT, CLIPBOARD | Pilot | Pilot | Off unless genericAdapterEnabled is true |
| Desktop AI applications and API clients | — | Not covered by the extension | — | Use desktop protection or the AI gateway |
What is reported when coverage is missing
| Gap | How it shows up | Signal certainty |
|---|---|---|
| Extension not allowed in private windows | Fleet coverage: Private windows unsupported | Unverifiable — the extension cannot observe private windows it is not allowed into |
| Required permission or site access withdrawn | Fleet coverage: Missing permissions | Confirmed — reported by the running extension |
| Extension removed by the user | Fleet coverage: Uninstalled; nightly administrator alert | Confirmed — the browser opens the removal page |
| Extension disabled, removed by policy, or browser not used | Fleet coverage: Stale after 72 hours without a report; nightly administrator alert | Suspected — these look the same from the server |
| Certified application changed its page | Fleet coverage: Adapter degraded | Confirmed for that application |
| Older extension or policy version | Outdated version / Outdated policy | Confirmed |
Change log
| Version | Date | Change |
|---|---|---|
| 1 | 15 Oct 2026 | First published matrix. Private-window coverage reported explicitly; account classification limited to verified organization domains. |