Architecture

High-performance engineering,
security-first design

Our technology is engineered to protect user privacy, maintain system speed, and operate with zero management overhead. Learn how we deliver reliable browser security without interrupting your business operations.

Business View Take a Deeper Look
Browser Execution

Lightweight Browser Integration

Unlike legacy software that slows down computers, Fantomo runs silently inside the browser using modern web standards. It requires no heavy desktop background services.

  • Fast Site Loading: Standard websites load at their normal speed without lag.
  • Smart Background Processes: Only active when you need it, staying dormant during normal browsing.
  • Tamper-Proof Interfaces: Banners and messages are isolated from external website stylesheets.

Rule matching is executed natively by the browser using the Manifest V3 declarativeNetRequest API. Background service workers wake dynamically for telemetry check-ins and run in a suspended state otherwise. Overlay elements are isolated using Shadow DOM nodes.

DOM Window Shadow DOM Isolated UI Background Worker Idle / Suspended
Data Security

Privacy-Preserving Architecture

Protect corporate security without compromising employee trust. Fantomo reviews web addresses locally on the computer, so personal browsing histories are never stored or transmitted to our servers.

  • Local Policy Review: Controls sites on-device without cloud routing.
  • Cryptographic Signatures: Secure verification ensures that the server only tracks security events, not page URLs.
  • Strict Account Boundaries: Keeping administrative databases isolated between customers.

Domain checks use space-efficient local Bloom Filters and FNV-1a hash matches. Active rules only submit metadata hashes to the reporting API during violations. Customer databases enforce tenant boundaries using PostgreSQL Row-Level Security (RLS).

Client-Side Bloom Filter FNV-1a Hash Cloud Sync Hashed Hits No URLs
Resource Footprint

Minimal System Footprint

Unlike traditional security software that requires complex desktop installations, Fantomo runs safely inside the browser sandbox, ensuring no impact on computer boot times or battery life.

  • No Desktop Installers: Operates entirely within the browser sandbox.
  • Low System Overhead: Uses minimal computer memory and processor power.
  • Network Independence: Won't interfere with your company VPN, office firewall, or internet routing.

Does not load kernel drivers or system-level network filters. Executes entirely within the sandboxed extension process context in user space.

Metric Fantomo Standard Agent
RAM Use < 50 MB 250MB+
Kernel Hook None Required
Network Latency < 5ms 50ms+ (Proxy)
Specifications

Technical Specifications

Client Compatibility

Chrome 88+ and Edge 88+ on Windows, macOS, and Linux. Deployable via any Chromium enterprise policy template.

Cryptography & Security

All client-server communications use TLS 1.3. Local matching runs using FNV-1a non-cryptographic hashes for speed, combined with Bloom filter validations.

Tenant Isolation

Strict database-level Row-Level Security (RLS). Every query executes inside transaction contexts tied to the verified administrator tenant ID.

API Integration

REST API endpoints secured via OAuth 2.0 and API keys. Full support for directory synchronization (Google Workspace OUs/Groups, O365 equivalents), custom log forwarders, and SIEM database targets.