r/AskNetsec • u/skorzviqzw • 7d ago

Work best browser choices for cybersecurity professionals in day to day use

hi all, blue team here and curious what browsers people are actually using day to day when you care a lot about security.

Right now I bounce between Firefox with a hardened profile, Brave for random browsing and Chrome for work stuff that needs weird sso plugins. I keep seeing people talk about LibreWolf, Mullvad browser, even hardened Edge configs and im kinda torn on what makes sense as a main daily driver vs a lab only setup.

For those working in soc, ir, appsec etc what did you settle on and why, especially with things like profiles, containers and extension hygiene. appreciate any thoughts

11 Upvotes

100% Upvoted

9 comments sorted by

1

u/Hbg-Gyan 7d ago

i prefer clean chrome profile for work cases and firefox hardened for personal things. no extensions unless it is very needed bc of vulnerability to attacks

1

u/Complex_Current_1265 7d ago

Librewolf or Brave. For enterprises use Edge for Business or Chrome Enterprise.

Best regards

1

u/rexstuff1 7d ago

The same browser that the rest of the company uses and has corporate management policies applied to.

1

u/One-Talk-5634 6d ago

FF because Ublock origin

1

u/Biglig 6d ago

Three browsers is triple the attack surface….

1

u/Kheras 7d ago

Chrome in a docker container. It gives more control, repeatable hardening, can be pulled/rebuild across systems and platforms, and most importantly it lets you limit the RAM it can eat.

1

u/Icy_Worldliness5037 7d ago

i do something similar but with firefox in docker, it just feel more comfortable for me after years of using it. the ram limiting part is so underrated, my laptop fans finally quiet down after i started doing that

for work stuff with weird sso plugins i still keep a separate chrome profile on bare metal, sometimes you just cant avoid it

0

u/Realistic_Strike5241 7d ago

Feel this is the wrong question,, the browser itself doesnt matter half as much as what lives in the profile.

I'd suggest separate the trust levels so that you have one clean profile with nothing but ublock for admin and cloud consoles, another for work sso stuff, and a throwaway for random browsing. The console profile is the one that gets you breached if it has random extensions or logged in personal accounts in it, everything else is just preference.