Now with Shadow IT Detection

Control your browsers.
Protect your org.

Fantomo deploys silently via MDM and lets you block sites, deliver contextual policy messages, and detect unauthorized SaaS signups — without touching user productivity.

500+ Domains Pre-Categorized
<50ms Rule Matching Latency
Zero End-User Configuration

Built for enterprise IT teams managing Chrome & Edge

Manifest V3 MDM Ready Shadow DOM Isolation Row-Level Security SOC 2 Architecture

Everything you need to manage
browser-level policy

From blocking unauthorized tools to detecting Shadow IT, Fantomo gives your IT team complete visibility and control.

Intelligent Rule Engine

Match by exact domain, URL fragment, domain pack, or AI-powered classification. Priority-sorted, frequency-controlled, with per-user exceptions.

Silent MDM Deployment

Deploy via Intune, Jamf, or any MDM. No user login required. Auto-provisions users from browser profile data. Fully invisible to the end user.

Shadow IT Detection

Automatically detect when employees create accounts at unauthorized SaaS tools. Multilingual pattern matching for signup and login pages.

Contextual Modals

Show policy messages right where users need them. Dismissable, non-dismissable, or full block — with branded styling and translated messages.

Analytics & Audit

Tiered audit logging from basic alerts through full browsing audit. CSV export, daily metric rollups, and configurable data retention.

Multi-Language Support

Admin panel and end-user messages in English, Spanish (MX), and Portuguese (BR). Auto-translated with manual override control.

Three steps to full
browser governance

01

Create Rules

Define what happens when users visit specific domains, URL patterns, or entire site categories. Set the action — block, warn, or inform. Choose frequency and priority.

02

Deploy Silently

Push the extension through your existing MDM. No user interaction needed. The extension auto-configures using managed storage policies and begins syncing rules immediately.

03

Monitor & Adapt

See which rules fire, detect Shadow IT events, and refine your policies with data. Receive Slack alerts for critical events. Export audit logs for compliance reporting.

Simple, usage-based pricing —
start free

15 seats always free. Only pay for users who were active last month. No contracts, no surprises.

Volume Discounts
16–50 users $4/user/mo
51–100 users $3/user/mo
101–200 users $2/user/mo
200+ users Contact us
Add-ons
+10 rules pack $9/mo
Alert Log $19/mo
Shadow IT Log (incl. Alert) $49/mo
Full Browsing Audit (incl. Shadow IT) $119/mo
+1 yr log retention (up to ×4) $12/mo
White-Label $39/mo

Are you a non-profit? Learn about our non-profit program →

Frequently asked questions

How does the extension get deployed?

The extension is deployed silently via your MDM (Intune, Jamf, etc.) using managed storage policies. End users never see a login prompt or configuration step.

Can users disable or remove the extension?

When deployed via MDM with force-install policies, users cannot disable, remove, or modify the extension. This is a standard Chrome/Edge enterprise capability.

What browsers are supported?

Fantomo supports Chrome and Edge (Chromium-based). Both browsers support Manifest V3 extensions with managed storage for enterprise deployment.

How does Shadow IT detection work?

The extension uses multilingual URL pattern matching to detect when users visit signup, registration, or account creation pages at SaaS providers. Detections are logged and can trigger Slack alerts.

Can I use domain packs without creating individual rules?

Yes. Domain packs (e.g., "Social Media", "AI Tools") contain curated lists of 20-30+ domains. Create one rule targeting a pack to apply policy to all domains in that category.

Is my data secure?

All data is encrypted in transit (TLS 1.3) and at rest. We use PostgreSQL Row-Level Security to ensure strict tenant isolation. Audit data retention is configurable per organization.

What about the Full Browsing Audit add-on?

Available for $119/month, it provides complete browsing analytics with domain categorization, visit frequency tracking, and daily metric rollups. It includes Shadow IT Log and Alert Log. Data retention is configurable.

When does billing start?

Billing only activates when more than 15 users are active in a calendar month. If your team never exceeds 15 active users in a given month, that month is free. We recommend adding a payment method before you hit 15 so there's no interruption as you grow.

What counts as an active user?

A user is counted as active if their extension synced with Fantomo at least once during the prior calendar month. Users who are enrolled but haven't opened their browser that month don't count.

What if our team shrinks?

Billing adjusts automatically every month based on who was actually active. If headcount drops, your bill drops too — you never pay for inactive users.

Are there contracts or commitments?

No contracts. Fantomo is month-to-month and you can cancel at any time. For teams over 200 users, we offer negotiated annual pricing — contact us to discuss.

Ready to take control of your browsers?

Start with a free account. No credit card required. Deploy in under 10 minutes.