Architecture

High-performance engineering,
security-first design

Our technology is engineered to protect user privacy, maintain system speed, and operate with zero management overhead. Learn how we deliver reliable browser security without interrupting your business operations.

Business View Take a Deeper Look
Browser Execution

Lightweight Browser Integration

Unlike legacy software that slows down computers, Fantomo runs silently inside the browser using modern web standards. It requires no heavy desktop background services.

  • Fast Site Loading: Standard websites load at their normal speed without lag.
  • Smart Background Processes: Only active when you need it, staying dormant during normal browsing.
  • Tamper-Proof Interfaces: Banners and messages are isolated from external website stylesheets.

Manifest V3 execution & isolation

The extension handles domain checks using Manifest V3's non-blocking declarativeNetRequest API, executing checks at the browser network layers before JavaScript runs. The background service worker suspends during idle states and awakes dynamically.

Warning layouts, overlays, and block pages are injected directly into targeted sites using isolated Shadow DOM elements. This locks extension styles from being modified or bypassed by the underlying page's stylesheets.

  • declarativeNetRequest API: Execute checks at the browser network stack.
  • Service Worker Lifecycles: Wake background processes on-demand.
  • Shadow DOM Containers: Isolate extension alert layouts from host pages.
DOM Window Shadow DOM Isolated UI Background Worker Idle / Suspended
Data Security

Privacy-Preserving Architecture

Protect corporate security without compromising employee trust. Fantomo reviews web addresses locally on the computer, so personal browsing histories are never stored or transmitted to our servers.

  • Local Policy Review: Controls sites on-device without cloud routing.
  • Cryptographic Signatures: Secure verification ensures that the server only tracks security events, not page URLs.
  • Multi-Tenant Isolation: Keeping customer logs and configurations isolated.

Local matching & multi-tenant isolation

The client checks domain names locally using space-efficient Bloom filters and FNV-1a hash tables, sending violation warnings to the server as hashed values. Administrative databases and logs are isolated at every layer using a multi-tenant database architecture, locking query scopes to verified tenant IDs to prevent cross-tenant data exposure.

Checking domains locally prevents browsing URLs from reaching the reporting cloud. Compliance logs, configurations, and dashboards are secured under client-level authentication boundaries to ensure complete data isolation.

  • Local Hashing: Evaluate domain matching on-device without sending URLs.
  • Hashed Telemetry: Transmit violation alerts as anonymous metadata payloads.
  • Database Isolation: Partition administrative tables under a multi-tenant structure.
Client-Side Bloom Filter FNV-1a Hash Cloud Sync Hashed Hits No URLs
Resource Footprint

Minimal System Footprint

Unlike traditional security software that requires complex desktop installations, Fantomo runs safely inside the browser sandbox, ensuring no impact on computer boot times or battery life.

  • No Desktop Installers: Operates entirely within the browser sandbox.
  • Low System Overhead: Uses minimal computer memory and processor power.
  • Network Independence: Won't interfere with your company VPN, office firewall, or internet routing.

User-space sandbox limits

The extension runs entirely inside the browser's user-space sandbox. It requires no OS-level device drivers, kernel network filters, or local loopback proxy setups.

Memory consumption stays below 50MB RAM during active matching cycles, avoiding performance drains. Running in user space avoids conflicts with active enterprise VPN clients, secure web gateways, or local firewalls.

  • Sandbox Execution: Prevent OS kernel driver dependencies.
  • Memory Efficiency: Limit client footprint to under 50MB RAM.
  • Network Compatibility: Operate alongside enterprise VPNs and proxies.
Sandboxed extension process
Metric Fantomo Standard Agent
RAM Use < 50 MB 250MB+
Kernel Hook None Required
Network Latency < 5ms 50ms+ (Proxy)
Specifications

Technical Specifications

Client Compatibility

Chrome 88+ and Edge 88+ on Windows, macOS, and Linux. Deployable via any Chromium enterprise policy template.

Cryptography & Security

All client-server communications use TLS 1.3. Local matching runs using FNV-1a non-cryptographic hashes for speed, combined with Bloom filter validations.

Tenant Isolation

Multi-tenant database isolation. Query scopes are locked to the verified administrator organization context to prevent cross-tenant data exposure.

API Integration

REST API endpoints secured via OAuth 2.0 and API keys. Full support for directory synchronization (Google Workspace OUs/Groups, O365 equivalents), custom log forwarders, and SIEM database targets.