Rapport secures browser communication from keyboard to website. It detects and prevents Man–in-the-Browser, Man-in-the-middle, phishing, and other attacks launched directly against the user.
The Rapport service includes a lightweight browser security plug-in, as well as cloud-based analysis and reporting services. The browser plug-in works with all major browsers, including Internet Explorer, Firefox, Safari, and Chrome, both on Windows and Mac.
When users browse to sensitive websites such as online banking, Webmail, or payment pages, the Rapport plug-in immediately locks down the browser, and prevents any unauthorized access to web pages and sensitive information that flow through the browser.
This browser lockdown is achieved through a combination of access control, encryption, and verification technologies that take place in the background, completely transparent to the user.
The purpose of the browser lockdown is to prevent malware known as Man-in-the-Browser from accessing the browser itself, as well as keystrokes typed into the browser, and communication that enters and leaves the browser. While the browser is locked down, malware cannot read the content of web pages, or information entered into these websites. Malware cannot tamper with web pages or web communication.
In addition to locking down the browser, Rapport also locks down communication with the website. It authenticates the website, and forces end-to-end secure communication with the website. This communication lockdown prevents both Man-in-the-middle and phishing attacks, and prevents criminals from accessing sensitive web communication.
Unauthorized attempts to access the browser or its communication are automatically reported to the Trusteer cloud-based fraud analysis service. The Trusteer team of fraud analysts works 24x7 analyzing this information from customers all over the world, in order to identify new attack patterns. Institutions registered for the Trusteer service receive immediate reports and actionable alerts of new attacks, and can learn of attacks as they happen, instead of days, weeks, and sometimes months later.