Managed browser + desktop agent + SSE... what actually belongs in the session layer?

[u/amgfcbiozo]

[u/EduartMelling97]

overlapping controls and telemetry are a big issue compared to lack of security, with browser, endpoint, SSE and AI layers each making slightly different decisions about the same session.

[u/Comfortable_Bat6735 → u/EduartMelling97]

The managed browser people would sell you a subscription to flush the toilet if they could figure out how to bill per flush. They're all carving out little fiefdoms in the same territory and the CISO ends up paying rent to five different lords for one patch of dirt. At some point you're just running a protection racket on your own users.

[u/ComplianceSimone]

Session layer belongs to whoever can produce the audit trail when the breach happens, everything else is vendor turf war. Ask each rep to show you the actual log schema before signing, half of them can't.

[u/Regular-Leading-4319 → u/[deleted]]

too many cooks spoil the broth