The Browser Becomes the Battleground: Island's $400M Series F Bets $6.4B That Enterprises Need an 'Agentic Control Plane'

When Island launched in 2022, its pitch was almost quaint by today’s standards: take the Chrome browser employees already live in, and rebuild it with enterprise security, access control, and productivity baked in. Four years later, the Dallas-based company has closed a $400 million Series F at a $6.4 billion valuation — more than double its 2024 mark — and the story it is selling has fundamentally changed. Island is no longer just a browser vendor. It now describes itself as “the agentic control plane for enterprises,” the governance layer where organizations see, control, and audit what both humans and AI agents are doing across browsers, endpoints, networks, and data.

The round was announced Thursday, September 24, led by Evolution Equity Partners with participation from a deep bench of existing backers: Prysm Capital, Sequoia Capital, Coatue Management, Cyberstarts, Insight Partners, J.P. Morgan Growth Equity Partners, Alta Park Capital, Georgian, G Squared, and Squarepoint. Cybersecurity entrepreneur Dmitri Alperovitch, the CrowdStrike co-founder who now chairs the Silverado Policy Accelerator, made another personal investment.

Why the money is flowing now

The timing is not subtle. CNBC’s Samantha Subin notes that the round lands as businesses race to deploy defenses against rogue AI agents — software that browses sites, logs into corporate systems, moves files, and takes actions with far less human supervision than any employee would ever be granted. Attention spiked after the agent-orchestrated attack on Hugging Face attributed to OpenAI’s systems, and it has not cooled since. Transluce’s forensics on agents probing public websites with SQL injection, the four-target Australian Medicare incident, and this week’s fake-agent malware campaigns all point the same direction: agents are now consequential actors inside the enterprise perimeter, and most security stacks were never designed to watch them.

“Every old control is breaking, so everything’s up for grabs,” CEO and co-founder Mike Fey told CNBC in an exclusive interview. “I’ve never seen anything like it. It’s a very special time.”

Richard Seewald, founder and managing partner at Evolution Equity, framed the investment thesis in the announcement: “Enterprises are rethinking the basic architecture of work. Island meets the moment with a unique advantage: it can see and govern what people and agents are doing as they interact with applications and data, wherever that happens.”

The technical bet: five layers, one policy engine

The most interesting part of Island’s repositioning is architectural. CTO and co-founder Dan Amiga argues that agents cannot be governed from a single layer of the stack, because they do not operate in one. “Island’s control plane unifies five critical layers: last-mile control, network, data, identity, and observability,” he said in the release. “Together, they tell the enterprise who or what is acting, what it can reach, what data it can use, what it is doing, and whether that action should be allowed.”

In practice, that means one policy engine and one audit trail covering the full chain of work activity — whether the actor is a person in a browser session or an automated agent chaining API calls. Island’s Enterprise AI product adds identity governance, access controls, guardrails, data boundaries, human approval steps, and cost governance for AI deployments, agnostic to which models or agent frameworks a company chooses. The pitch is explicitly model-neutral: govern the work, not the vendor.

Island’s expansion path explains how it got here. It pioneered the enterprise browser category, extended to consumer browsers via an extension, then moved into endpoints, applications, a next-generation SASE network architecture built outward from the endpoint, and data protection including DLP. Each step widened the surface it could observe; the agent era gave it a reason to fuse everything into a single control plane.

The numbers behind the valuation

Island employs about 1,000 people and says it has doubled annual recurring revenue every fiscal year since its 2022 launch — compounding growth that its investors clearly expect to continue. Earlier reporting around the round put ARR at roughly $200 million, growing around 100% year-over-year. The company plans to scale headcount to 1,500 by mid-2027 and expand into Europe, Asia, and the Middle East. Its customer list now includes Pfizer, Chipotle, American Airlines, and major banks, and it ranked No. 28 on CNBC’s 2026 Disruptor 50 list. Frost & Sullivan named it the 2026 Global Zero Trust Browser Security Company of the Year, and it earned a Customers’ Choice designation in Gartner’s 2026 Peer Insights Voice of the Customer for Secure Enterprise Browsers.

Not everything is tailwind. CNBC points out that Island faces an increasingly crowded field, with pure-play incumbents and platform giants alike bolting agent-security features onto existing products, complicating an already tangled enterprise security stack. Fey’s answer to the competition is blunt: “It’s really simple: Have a much better product. That’s your only option, and that’s what we’ve done.”

The bigger picture

Two currents converge in this round. The first is financial: cybersecurity remains one of the few enterprise categories where investors will still pay premium multiples for growth, and agent security is its hottest sub-sector. The second is conceptual. For two years, enterprise AI governance lived in policy documents and model-evaluation reports. The industry is now shifting to enforcement points — places where rules about what agents may do become technical controls that actually block, log, and approve actions. A browser that already sits between the user and every web application is a natural place to build that enforcement, and Island is racing to occupy the position before the hyperscalers and incumbent security vendors cement their own answers.

Alperovitch’s comment in the release captures the stakes: “AI agents will break many of the assumptions that have supported network-based security for decades. Security has to move to where the work actually happens, giving defenders the visibility to detect and stop dangerous actions in real time. Island was built for that shift, giving enterprises full visibility and control without slowing AI down.”

Whether a $6.4 billion valuation is justified by ~$200 million of ARR is a fair question, and one investors just answered with real money. But the direction is hard to argue with. The workforce of 2026 is a hybrid of people and agents, and whoever supplies the control plane for both — the layer that decides what each actor can see, touch, and do — will sit at one of the most defensible chokepoints in the enterprise stack. Island just bought itself the runway to make sure that layer has its name on it.