Now with Shadow IT Detection

Control your browsers.
Protect your org.

Fantomo deploys silently via MDM and lets you block sites, deliver contextual policy messages, and detect unauthorized SaaS signups — without touching user productivity.

500+ Domains Pre-Categorized
<50ms Rule Matching Latency
Zero End-User Configuration

Built for enterprise IT teams managing Chrome & Edge

Manifest V3 MDM Ready Shadow DOM Isolation Row-Level Security SOC 2 Architecture

Everything you need to manage
browser-level policy

From blocking unauthorized tools to detecting Shadow IT, Fantomo gives your IT team complete visibility and control.

Intelligent Rule Engine

Match by exact domain, URL fragment, domain pack, or AI-powered classification. Priority-sorted, frequency-controlled, with per-user exceptions.

Silent MDM Deployment

Deploy via Intune, Jamf, or any MDM. No user login required. Auto-provisions users from browser profile data. Fully invisible to the end user.

Shadow IT Detection

Automatically detect when employees create accounts at unauthorized SaaS tools. Multilingual pattern matching for signup and login pages.

Contextual Modals

Show policy messages right where users need them. Dismissable, non-dismissable, or full block — with branded styling and translated messages.

Analytics & Audit

Tiered audit logging from basic alerts through full browsing audit. CSV export, daily metric rollups, and configurable data retention.

Multi-Language Support

Admin panel and end-user messages in English, Spanish (MX), and Portuguese (BR). Auto-translated with manual override control.

Three steps to full
browser governance

01

Create Rules

Define what happens when users visit specific domains, URL patterns, or entire site categories. Set the action — block, warn, or inform. Choose frequency and priority.

02

Deploy Silently

Push the extension through your existing MDM. No user interaction needed. The extension auto-configures using managed storage policies and begins syncing rules immediately.

03

Monitor & Adapt

See which rules fire, detect Shadow IT events, and refine your policies with data. Receive Slack alerts for critical events. Export audit logs for compliance reporting.

Start free, scale as
your team grows

Every plan includes the extension, rule engine, and domain classification. Add users, rules, and audit capacity with stackable add-ons.

Free
$0/mo
  • Up to 3 admin users
  • 10 active rules
  • 500+ pre-built domain packs
  • Chrome & Edge support
  • Alert audit (free tier)
Get Started
Enterprise
$199/mo
  • Unlimited admin users
  • Unlimited rules
  • White-label branding
  • Shadow IT Detection
  • Priority support
  • Custom deployment assistance
Contact Sales

All plans support stackable add-ons: +$9/mo per 5 users, +$19/mo per 50 rules, +$29/mo for Shadow IT, +$99/mo for Full Browsing Audit.

Frequently asked questions

How does the extension get deployed?

The extension is deployed silently via your MDM (Intune, Jamf, etc.) using managed storage policies. End users never see a login prompt or configuration step.

Can users disable or remove the extension?

When deployed via MDM with force-install policies, users cannot disable, remove, or modify the extension. This is a standard Chrome/Edge enterprise capability.

What browsers are supported?

Fantomo supports Chrome and Edge (Chromium-based). Both browsers support Manifest V3 extensions with managed storage for enterprise deployment.

How does Shadow IT detection work?

The extension uses multilingual URL pattern matching to detect when users visit signup, registration, or account creation pages at SaaS providers. Detections are logged and can trigger Slack alerts.

Can I use domain packs without creating individual rules?

Yes. Domain packs (e.g., "Social Media", "AI Tools") contain curated lists of 20-30+ domains. Create one rule targeting a pack to apply policy to all domains in that category.

Is my data secure?

All data is encrypted in transit (TLS 1.3) and at rest. We use PostgreSQL Row-Level Security to ensure strict tenant isolation. Audit data retention is configurable per organization.

What about the Full Browsing Audit add-on?

Available for $99/month on any plan, it provides complete browsing analytics with domain categorization, visit frequency tracking, and daily metric rollups. Data retention is configurable.

Ready to take control of your browsers?

Start with a free account. No credit card required. Deploy in under 10 minutes.