Mozilla launches self-hosted Firefox Enterprise browser

Mozilla has unveiled Firefox Enterprise, a tailored version of its flagship web browser designed for corporate environments with strict security and compliance demands. Built on Mozilla’s independent Gecko engine—currently the only major browser engine developed outside Google and Apple—the new package pairs the browser with an internally hosted management console. The deployment model allows organizations to run the administrative console on their own infrastructure and manage policies using their existing IT tooling. Mozilla said Firefox is currently deployed across thousands of organizations and reaches roughly 200 million monthly users.

The product focuses on data sovereignty, keeping keys, telemetry, and security policies within the customer’s controlled boundaries. IT teams can set user and device access rules, deploy domain or action-level data loss prevention (DLP), and enforce a lockdown mode to guard against zero-day exploits. The browser also provides granular controls over employee AI usage, allowing administrators to allow, restrict, or entirely disable AI tools and prevent data copying. Designed to support compliance with regulations including GDPR, DORA, NIS2, ISO27001, and SOC2, Firefox Enterprise exports event logs directly into security information and event management (SIEM) platforms like Trellix and Broadcom. The subscription-based service debuts in France, Germany, Austria, and Switzerland before expanding globally, and includes Firefox Professional support. Mozilla is also developing a companion product, Thunderbird Enterprise, for email and calendar management.

For enterprise IT practitioners, Firefox Enterprise offers a distinct alternative to Microsoft Edge for Business, Google Chrome Enterprise, and Palo Alto Networks' Prisma Browser. Because it operates on Gecko rather than Chromium, it helps organizations avoid vendor lock-in while avoiding reliance on third-party cloud infrastructure for browser monitoring. However, analysts note that self-managing the console requires dedicated internal technical skills, and complex endpoint environments may face integration challenges. Nonetheless, for security teams managing remote devices or strict data residency rules, the platform provides direct oversight without requiring virtual desktop infrastructure or traditional remote browser isolation software.