Chrome Enterprise

5 Ways our Enterprise Browser Keeps Reinforcing Security

Tue, 24 Mar 2026 09:28:00 +0000

RSA brings together so many great minds in the security industry. Whether it’s the solution providers continuing to support the ever changing risk landscape, the research community bringing new best practices to others in the field, or in-house security professionals expanding their knowledge to drive more secure experiences in their workforce, there is so much to catch up on when it comes to enterprise security. We are onsite showcasing our secure enterprise browsing solution, helping customers see how they can protect their corporate data in this quickly evolving AI era.

We are also highlighting some newer capabilities that continue to strengthen Chrome and the core, and bring even more protections to Chrome Enterprise. From ongoing hardening of our browser to stronger download controls, if you want to hear about new enhancements that will help protect your workforce, including BYOD users and contractors, read on.

1. Stopping Session Hijacking and Cookie Theft: Last year, Chrome introduced Device Bound Session Credentials (DBSC) representing a major leap forward in protecting user sessions from being compromised. By binding session cookies to a specific device, we effectively neutralize "session hijacking" attempts. Even if a sophisticated attacker manages to steal a user's session cookies, those cookies become useless outside of the original, authenticated device, ensuring that your corporate accounts and data remain secure. This approach offers a critical foundation for browser hardening, helping all users but offering specific benefits to enterprises.

2. Protecting Data at Rest: Security doesn't stop when a user closes their browser; it's equally important to protect the data left behind. Our new browser cache encryption ensures that the cache stored on a device's hard drive is fully encrypted. This means that in the event a laptop is lost or stolen, the cached data cannot be reconstructed or exploited by unauthorized parties, providing peace of mind for both the organization and its employees.

3. Neutralizing Infostealer Malware: The rise of "Infostealer" malware has made it more critical than ever to protect sensitive browser data from malicious applications. With App-bound encryption, we’ve introduced a powerful added defense that prevents unauthorized software from digging through your browser to extract passwords or credentials. By restricting access to browser data solely to the browser itself, we significantly reduce the risk of a successful malware-driven data breach.

4. Increasing Control Over Corporate Data Downloads: Maintaining a secure perimeter requires fine-grained control over how data moves across the cloud or web to local devices. We’ve introduced enhanced download controls that allow IT administrators to set more rigorous policies around where downloaded files are stored. IT and security teams can now set a rule to require Chrome downloads to be stored to Google Drive, and this capability is coming soon for Microsoft One Drive. These protections are especially vital for securing your workforce in a hybrid world, offering robust data loss prevention (DLP) for both managed devices and users on BYOD or contractor hardware.

5. Advancing Secure Access with our Technology Partner Ecosystem: Organizations are already invested in a variety of solutions across their environment to support their secure access needs, especially for unmanaged devices. Chrome Enterprise continues to collaborate with major security solution providers to further strengthen full-stack security approaches for enterprise. For example, with Citrix Secure Access with Chrome Enterprise combined capabilities, customers can securely access SSH and RDP workloads while applying advanced, dedicated protections such as keylogging prevention. Working with identity provider Okta, Chrome Enterprise is now offering additional antivirus signals to support access decisions for Okta customers. Additionally, Remote Commands available through Chrome Enterprise (including clearing cookies and cache) have been extended to profiles being managed by third party providers like Okta.

To learn more about Chrome Enterprise and our advanced enterprise browsing protections, visit our website.

Secure Browsing, Powered by Peers: Join the New Chrome Enterprise Community

Fri, 13 Mar 2026 15:15:00 +0000

We’re excited to announce a new online platform for the Chrome Enterprise Customer Community: a global, open platform now accessible to all our business customers. This community is designed for IT professionals, security professionals, and business leaders who deploy and manage Chrome Enterprise across their organizations, regardless of the operating system or device type.

Directly inspired by customer feedback, we are reinforcing our commitment to an interconnected enterprise ecosystem by bringing Chrome Enterprise to an established, shared platform alongside Android Enterprise, ChromeOS, and Cameyo communities, enabling customers to easily access helpful information and product updates across our solutions. By removing geographical and technical barriers, the community offers unparalleled opportunities for IT professionals to connect, collaborate, share insights, and grow the impact of Chrome Enterprise within their digital workspace.

Direct access to expertise and resources

This global community is a central hub for official announcements, proven best practices for browser management, and helpful troubleshooting tips. Whether IT teams are managing Chrome on Windows, ChromeOS, macOS, or Linux, they can navigate topics and resources freely.

By registering with a Google Account, community members can post questions and reply to fellow users under our team’s moderation. Members gain access to resources designed to help them maximize security, productivity, and manageability. In addition, a calendar of online events and a direct channel for anticipated product development updates deliver a true understanding of everything Chrome Enterprise can do for organizations.

Learn, Share, and Showcase Expertise

This platform connects global IT leaders and professionals who use Chrome Enterprise, creating a space designed for ease in sharing experiences and solving challenges together. Members can learn from each other's successful approaches, share effective practices for deploying Chrome Enterprise in their organization, and collaborate on answering questions from their peers. Beyond problem-solving, the community can discover new ways to secure their workforce with Chrome Enterprise Premium, including advanced data loss prevention (DLP) and context-aware access across. Members can join the conversation, ask questions, and show off their expertise to land on our contributor leaderboard! Plus, they can proudly showcase their Professional Chrome Enterprise badge alongside their profile.

Built for Every Business: Supporting IT Teams from small businesses to Enterprises

Managing a fleet of browsers can present unique challenges, whether a small business is setting up its first managed environment or a global enterprise is maintaining strict security compliance. That is why this platform is specifically designed to support IT professionals across organizations of any size. For small and medium-sized businesses (SMBs), the community offers accessible "getting started" guides, recommended baseline settings, and step-by-step advice to hit the ground running with Chrome Enterprise Core. For large-scale enterprises, IT leaders and architects can find answers to complex management questions, share troubleshooting solutions, and exchange best practices for large deployments. As organizations evolve, teams can access the tailored advice and peer-to-peer support necessary to scale securely and thrive.

We are thrilled to see how this dedicated space will empower our Chrome Enterprise customers to maximize their deployments. What are you most looking forward to exploring on this new global platform? Join the Chrome Enterprise Customer Community today and let us know!

If you need more personalized support you can talk to a Chrome Enterprise Expert

Future Mode Part 1: The intelligent and secure browser for enterprises

Wed, 28 Jan 2026 07:49:00 +0000

Editor's Note: Our Future Mode series will give businesses insight into how Chrome Enterprise is approaching AI in the browser. Stay tuned for more blogs in this series.

For the modern enterprise, the browser has already evolved beyond a simple application and has become the primary workspace where collaboration happens, sensitive data is accessed and employees perform key tasks every day. It’s now also the place where employees are accessing a growing mix of powerful, new AI tools and services.

There’s never been a more exciting time to be working on Chrome Enterprise, the browser that hundreds of millions of employees are already using at work. We believe the browser is uniquely positioned to meet the needs of the modern enterprise. The browser has already begun transcending its traditional role. By providing intelligence that helps workers be more productive, bringing agents that automate tasks, and keeping users safe with security that's becoming even more efficient, we are defining a future where the browser is both agentic and secure. Organizations don't have to choose between innovation and safety.

In this blog series, "Future Mode," our product and engineering experts will share how we are reshaping the way people engage with their apps, data, and the web. Today, we’ll give you a peek into our vision for AI in Chrome Enterprise and how we’re supporting businesses with a secure transformation to this new way of working.

The role of agentic browsing in the workplace

The next generation of browsing is intelligent, agentic and more secure. The browser is no longer just a tool you use. It will increasingly have the ability to perform actions on behalf of the users. Automated capabilities are being built on top of the AI assistant that already sits alongside your work with Gemini in Chrome. Bringing agentic and automated capabilities to the workplace allows the browser to anticipate a user’s intent, handle repetitive business oriented tasks and synthesize information across apps and the web, while enforcing security policies that protect company data dynamically. It will transform the browser into a doer, clearing the path for employees to do their best work, but still keep the user in control of key actions to ensure safety. We’re excited to bring this to enterprises later this year.

An agentic browser will amplify enterprise productivity by streamlining multi-step tasks, so employees can focus on the core job at hand. Let’s imagine a project manager needs to schedule a follow-up meeting with five key stakeholders and wants to ensure they have the latest "Project Scope" document. The agentic browser can analyze a recent team chat, check calendars, send the invite, and automatically share the relevant documentation. It frees employees from time-consuming tasks by taking action on the employee’s behalf. While this is one example, it’s easy to see how this automated browsing experience that will come to businesses soon can change how we approach our day-to-day work.

Built on a foundation of security

Innovation cannot thrive without security, especially in enterprise environments. While IT teams can't afford to ignore AI, or default to shutting it down completely longterm, they do have the tremendous responsibility of ensuring these capabilities are brought to their business in a secure way.

While some tools force a choice between rigid security or unrestricted AI, Chrome Enterprise is able to merge these two critical areas. We provide the granular controls and management tools businesses need to move fast without compromising security. Chrome Enterprise Premium's enhanced DLP features, like real-time copy/paste restrictions, data masking to redact sensitive data being typed into LLMs and dynamic watermarking, help prevent accidental or malicious sharing of sensitive data across the web. This includes protection for the growing number of AI services employees may use at work. It also gives controls over which AI features are enabled for which user groups and restricts access to unapproved external generative AI tools.

As we introduce new agentic capabilities to Chrome, we’re applying our rigorous security standards and launching entirely new defenses to help protect you from new types of online threats. On top of Gemini in Chrome’s existing protections, we’ve added a double-check system that independently reviews the AI’s actions to ensure they are safe. We have also set strict boundaries so the AI can only access the specific websites relevant to the task at hand, blocking it from interacting with anything else. This helps keep our users protected when interacting with agentic prompts. All these security capabilities are built directly into Chrome for all users, and these benefits extend to enterprise customers automatically.

Bringing best in class AI models to businesses

Chrome Enterprise uses Google’s best in class AI models and adapts them to the needs of your organization. By integrating our recently announced Gemini 3 models directly into the browsing experience, we are adapting the world’s best reasoning and agentic capabilities into Chrome. This means that AI isn’t a standalone tool, but a contextual engine that understands the corporate data and web page you’re viewing. By bringing this AI-powered productivity across operating systems, we ensure that no matter where you work, you get a consistent, secure and intelligent experience across platforms.

Gemini 3 is the best model in the world for multimodal understanding and our most powerful agentic and vibe coding model yet. For folks following the benchmarks, it tops the LMArena Leaderboard with a breakthrough score of 1501 Elo. It demonstrates PhD-level reasoning with top scores on Humanity’s Last Exam (37.5% without the usage of any tools) and GPQA Diamond (91.9%).

And as Google’s AI models advance, enterprises will continue to benefit from the rapid innovation coming from Google and will get access to the best AI models possible right in their browser.

Supporting enterprise AI adoption

Because the browser is at the intersection of the apps, data and information on the web that an employee needs to get work done, Chrome Enterprise has a unique opportunity to help re-shape and improve the way people work. We take this very seriously, and are deeply committed to bringing controls for businesses for new AI features in Chrome. Additionally we are giving businesses extra time to evaluate major AI features before pushing them out to enterprise users and working closely with the Google Workspace team to extend enterprise data protections for Chrome’s AI features to our enterprise customers.

We’re excited to partner together to find the most helpful ways to bring together the best of your company apps, data with the Web and the power of AI. Stay tuned for more helpful examples and sneak peeks into what is coming for our Chrome Enterprise customers.

A flexible path to modern end-user computing with Cameyo by Google

Wed, 12 Nov 2025 17:00:00 +0000

While 90% of IT leaders indicate that the future of their end user computing (EUC) strategy is web-based, those same leaders admit that 50% of the applications their organizations rely on today are still legacy client-based apps.¹ Similarly, IT leaders note that enabling end users to take advantage of AI on the endpoint is their top priority in the next 12 months. Clearly, something needs to bridge the gap between today’s reality and tomorrow’s strategy.

Announcing Cameyo by Google: Virtual app delivery for the modern tech stack

To provide today’s organizations with a more modern approach to virtualization, we are thrilled to launch Cameyo by Google, bringing a best-in-class Virtual App Delivery (VAD) solution into the Google enterprise family of products.

Cameyo is not VDI. It is a modern alternative designed specifically to solve the legacy app gap without the overhead of traditional virtual desktops. Instead of streaming a full, resource-heavy desktop, Cameyo’s Virtual App Delivery (VAD) technology delivers only the applications users need, securely to any device.

With Cameyo, those legacy Windows or Linux apps can either be streamed in the browser or delivered as Progressive Web Apps (PWAs) to give users the feel of using a native app in its own window. This allows users to run critical legacy applications — everything from specialized ERP clients, Windows-based design programs like AutoCAD, the desktop version of Excel, and everything in between — and access them alongside their other modern web apps in the browser, or access them side-by-side with the other apps in their system tray as PWAs. For the user, the experience is seamless and free from the context-switching of managing a separate virtual desktop environment. For IT, the complexity is eliminated.

“The beauty of Cameyo is its simplicity. It lets users access applications on any device with security built in, allowing us to reach any end user, on any device, without it ever touching our corporate systems or the complexity or overhead — no VPNs or firewall configurations needed,” said Phil Paterson, Head of Cloud & Infrastructure, PTSG. He added, “VPNS were taking up to 15 minutes to log in, but with Cameyo access is instant, saving users upwards of 30 minutes every day."

Completing the Google Enterprise stack

Today’s enterprises have been increasingly turning to Google for a modern, flexible, and secure enterprise tech stack that was built for the web-based future of work, not modified for it. And Cameyo by Google is a critical unlock mechanism that bridges the gap between those organizations’ legacy investments and this modern stack.

Google’s enterprise tech stack provides organizations with a flexible, modular path to modernization. Unlike all-or-nothing enterprise ecosystems, Google’s enterprise stack doesn’t force you to abandon existing investments for the sake of modernization. Instead, it gives you the freedom to modernize individual layers of your stack at your own pace, as it makes sense for your business — all while maintaining access to your existing technology investments. And Google’s flexible enterprise stack is built for interoperability with a broad ecosystem of modern technologies built for the web, giving you freedom along your modernization journey.

A secure browsing first: Cameyo + Chrome Enterprise

Speaking of enabling organizations to modernize at their own rate, we’ve seen a distinct pattern popping up throughout our conversations with enterprises today. And that pattern is the interest in migrating to Secure Enterprise Browsers (SEBs) to provide a more secure, manageable place for people to do their best work.

And while the market for SEBs is growing rapidly, most enterprise browser solutions share a fundamental blind spot: they are only built to secure web-based SaaS applications. They have no direct answer for the 50% of client-based applications that run entirely outside the browser.¹

This is where the combination of Cameyo by Google and Chrome Enterprise Premium provides a unique solution. This combination is the only solution on the market that delivers and secures both modern web apps and legacy client-based apps within a single, unified browser experience.

Here’s how it works:

Chrome Enterprise Premium serves as the secure entry point, providing advanced threat protection, URL filtering, and granular Data Loss Prevention (DLP) controls - like preventing copy/paste or printing - for all sensitive data and web activity.
Cameyo takes your legacy client apps (like your ERP, an internal accounting program, SAP client, etc.) and publishes it within that managed Chrome Enterprise browser.
This unifies the digital workspace. Those legacy applications, which previously lived on a desktop, now run under the single security context of the secure browser. This allows Chrome Enterprise Premium's advanced security and DLP controls to govern applications they previously couldn't see, providing a comprehensive security posture across all of your organization’s apps, not just the web-based apps.
Bringing AI to legacy apps. The combination of Cameyo and Chrome Enterprise not only brings all your apps into a secure enterprise browser, but thanks to Gemini in Chrome, all of your legacy apps now have the power of AI layered on top.

Unlocking adoption of a more secure, web-based OS and more collaborative, web-first productivity

Moving all of your apps to the web with Cameyo doesn’t just provide a more unified user experience. It can also provide a significantly better, more flexible, and more secure experience for IT. Compared to traditional virtualization technologies that take weeks or months to deploy, IT can publish their first apps to users within hours, and be fully deployed in days. All while taking advantage of Cameyo’s embedded Zero Trust security model for ultra-secure app delivery.

And that added simplicity, flexibility, and security opens up other opportunities for IT, too.

For organizations that have been looking for a more secure alternative to Windows in the wake of years of security incidents, outages, and forced upgrades to the next Windows version, Cameyo now makes it possible for IT to migrate to ChromeOS — including the use of ChromeOS Flex to convert existing PCs to ChromeOS — while maintaining access to all of their Windows apps.

For years, the primary blocker for deeper enterprise adoption of ChromeOS has always been the "app gap" — the persistent need to access a few remaining Windows applications within an organization. Cameyo eliminates this blocker entirely, enabling organizations to confidently migrate their entire fleet to ChromeOS, the only operating system with zero reported ransomware attacks, ever.

Similarly, Cameyo allows organizations to fully embrace Google Workspace while retaining access to essential client apps that previously kept them tethered to Microsoft™, such as legacy Excel versions with complex macros or specific ERP clients. Now, teams can move to a more modern, collaborative productivity suite that was built for the web, and they can still access any specialized Windows apps that their workflows still depend on.

Your flexible path to modernization starts now

For too long, legacy applications have hindered organizations’ modernization efforts. But the age of tolerating complex, costly virtualization solutions just to keep legacy apps alive is coming to an end.

Cameyo by Google, like the rest of the Google enterprise stack, was built in the cloud specifically to enable the web-based future of work. And like the rest of Google’s enterprise offerings, Cameyo gives you a flexible path forward that enables you to build a modern, secure, and productive enterprise computing stack at the pace that works for you.

So, together — let’s get to work.

¹ Forrester Consulting: A commissioned study conducted by Forrester Consulting on behalf of Google, Deliver a Next-Generation Endpoint, 2024

Bringing connected and AI-powered work experiences across our platforms and devices

Wed, 12 Nov 2025 17:00:00 +0000

The way we work is rapidly transforming, and AI is quickly becoming a connection point across workflows and tasks both big and small. Whether it’s saving time by converting automated meeting notes into a follow-up email to a client, or getting help with brainstorming your next big campaign idea, Generative AI, driven by models like Gemini, offers seamless, intelligent help for employees. Google is able to bring the power of AI seamlessly into every work surface, from the browser, to the operating system to core work applications, across an expanding collection of new devices.

So how does this come to life for our customers? Our platforms like Chrome Enterprise, the most trusted enterprise browser, and Android, the flexible OS that powers mobile and beyond, have hundreds of millions of business users relying on these technologies at work, and AI continues to make them more helpful for the workforce.

Hardware like Google Pixel and Chromebook Plus devices are infused with AI, built for these new AI experiences, and are already growing in adoption among businesses. But it doesn’t stop there. We’re also expanding to new surfaces with Android XR, the extended reality operating system for next-gen headsets and smart glasses. And Google Beam, our AI-first video communication platform is redefining how we connect.

Together, Google’s enterprise platforms and devices build for the connected future.

Let’s look at how this comes together with recent and exciting new capabilities for enterprises:

Empowering your employees to work smarter and be more productive

Across our platforms and devices, we’re offering familiar user experiences, so employees get the right apps and information they need. Whether that’s Google’s productivity apps, third party SaaS apps, custom apps or even legacy apps. And we make sure that help from Gemini is just a tap, click or prompt away.

To help organizations continue to move towards a more modern endpoint computing experience, we’re excited to announce the general availability of Cameyo by Google, allowing users to run any application, legacy or modern, side-by-side. Built in the cloud as part of the Google enterprise stack, Cameyo delivers a seamless, web-based experience for users and eliminates complexity for IT.

We recently announced Gemini in Chrome, an AI browsing assistant that enables end users to work more efficiently. It can be used to quickly summarize long reports or documents, grab key information from a video or brainstorm ideas for a new project. Gemini in Chrome can understand the context of a user’s tabs, and recall recent tabs they had open. By combining Gemini in Chrome with an app virtualized by Cameyo, organizations can bring the helpfulness of AI to legacy apps on the web.

Gemini in Chrome is available with enterprise grade protections to Google Workspace customers giving IT and security teams control over how their users use AI. These capabilities are rolling out to Android, iOS, Mac, and Windows users already. We're excited to announce that in addition to the built-in Gemini capabilities on ChromeOS, these Gemini in Chrome capabilities will also be available to Workspace customers on their Chromebook Plus devices soon.

Endpoints for a new work era

Organizations need devices that are purpose-built for the AI era, with powerful hardware and AI integrations directly in the operating system. Google is integrating Gemini and Google AI across a wide set of devices and form factors to deliver a consistent experience, wherever work happens.

Chromebook Plus provides a line of devices designed with more powerful hardware to deliver AI-powered experiences at a great value. This year, we launched new features like Text capture and Select to search with Lens. We also launched two new devices, the Lenovo Chromebook Plus 14” and the Acer Chromebook Plus Spin 514 equipped with Mediatek NPU processors delivering up to 50 TOPS. We will continue to bring powerful laptop experiences to support the needs of workers today and into the future.

Similarly, employees need the flexibility to be productive, especially on the go. Google Pixel uses on-device AI through Gemini Nano to enable features such as offline summarization in the Recorder app,¹ Call Notes,² Magic Cue,³ Live Translate (Voice)⁴ and more. Additionally, features like Gemini Live⁵ with screen sharing and camera sharing help bring new levels of productivity to users on the go.

We’re also starting to see new emerging form factors like extended reality (XR) as ways to extend our workplace. The introduction of Android XR marks a major shift for the modern enterprise, extending the reach of contextual AI beyond mobile devices and into the physical workspace. This platform, running on a new ecosystem of headsets and smart glasses, integrates Gemini to provide a true hands-free, contextual assistant. For employees in fields like field service, manufacturing, healthcare, or logistics, this means real-time, heads-up support overlayed onto their view of the world. For example, a technician could receive step-by-step repair instructions or access complex schematics on an optional in-lens display while keeping both hands on the equipment.

Improving security controls and visibility

For IT teams, we know there is a need larger than ever for more visibility and protections. We’re delivering security intelligence and flexible management to AI-powered end user computing environments.

Comprehensive data protection at the browser and OS level is crucial for navigating today’s evolving threat landscape, especially with the rise of AI services. To deliver this essential protection where work primarily happens, within the browser, we’ve embedded robust data loss prevention directly into Chrome Enterprise Premium. This provides IT and security teams with an extensive, easily configurable set of tools in Chrome to proactively guard against accidental or intentional data loss across all web applications.

We’ve expanded many of the data loss prevention capabilities to mobile platforms as well. Admins now can:

Audit, warn or block access to sites or categories of sites on iOS or Android
Set limitations on copying and pasting sensitive data in mobile
Restrict downloads including when users are in Incognito mode
Provision client certificates to Chrome managed profiles on Android, this capability is coming to iOS soon

Organizations leveraging Google’s security ecosystem can now benefit from a new one-click integration with Google SecOps. This integration delivers unprecedented browser intelligence, including data loss events and risky activity, to SecOps, empowering security teams to conduct more thorough investigations and make faster, better-informed decisions.

The rapid rise of Generative AI, powered by Gemini, fundamentally changes what we expect from our enterprise technology, offering seamless, intelligent assistance across every workflow. Google is committed to delivering a unified vision, ensuring this help is immediately available by empowering your employees across every surface—from Chrome and Android to web applications virtualized by Cameyo by Google. By creating endpoints built for the AI era like Chromebook Plus and extending the workplace with Android XR, we ensure powerful hardware and AI integrations go hand-in-hand. Discover how you can equip your teams for the future with Chrome Enterprise, ChromeOS, and Cameyo.

¹ _{Available on select devices, languages, and countries. Works with compatible accounts and some features may not be available based on corporate account settings. Check responses for accuracy.}

² _{Available in select countries and languages. Available to 18+ users. Availability may vary by account and profile type.}

³ _{Works on calls at least 30 seconds long. Not available in all languages or countries. Requires compatible Pixel phone. See here for more details.}

⁴ _{Results may vary. Check responses for accuracy. Available in select countries and languages.}

⁵_{Results for illustrative purposes and may vary. Check responses for accuracy. Compatible with certain features and accounts. Internet connection required. Available in select countries, languages, and to users 18}_⁺_{. Availability may vary by account and profile type.}

How TELUS is powering growth and productivity with Google

Mon, 29 Sep 2025 09:00:00 +0000

Editor’s note: Today’s post is by Alyson Butler, Director of Team Member Experiences at TELUS, a communications technology company with more than 20 million customer connections. TELUS has integrated ChromeOS, Google Workspace, Chrome Enterprise Premium, and Cameyo to support its transformation into a globally recognized technology leader.

Thirty-five years ago, TELUS started out by providing telecommunication services to Canadians. More than three decades later, we’re still connecting people and the data they need, but we’ve grown into a large, diversified company offering a full range of innovative digital solutions for IT, healthcare, customer experience and agriculture.

As Director of Team Member Experiences at TELUS, I lead the teams responsible for managing the global digital workplace experience for nearly 60,000 team members worldwide. Our mission is to unlock their productivity in a secure way, ensuring they feel like a connected part of the team, while protecting our internal and customer data. This can be especially challenging with a distributed workforce. What may have sounded impossible before, was achievable with Google. We created an enterprise computing stack with ChromeOS, Google Workspace, Cameyo, and Chrome Enterprise Premium. This new solution made our login speed three times faster than our previous setup — a crucial improvement for our customer agents. The tech stack simplified our security and management while unlocking business benefits like higher productivity, cost-per-call savings, and improved customer satisfaction.

Workspace established a strong foundation

Our digital journey began in 2018 with a mission to transform our distributed workforce. We knew that cloud apps with built-in security were the way forward. By migrating to Google Workspace, we immediately improved productivity, enhanced the end-user experience, and took advantage of its robust, natively built-in security and compliance features.

Workspace quickly became an end-to-end solution for us. Our teams create files in Google Docs, Sheets, and Slides, and store them in Google Drive, where the automatic version control ensures seamless collaboration.

We connect on Chat, manage approvals and workflows in Gmail, and use Google Meet to connect virtually. Google Calendar is our workhorse for planning and scheduling, allowing us to view other team members’ schedules, set up events, and send email invites — all from one tab. The benefits of Google Workspace allowed us to fundamentally rethink our end-user computing strategy.

With growth from acquisitions, we built a cloud platform

To address our technical debt and remove past complexities, we needed a platform that could support our growth from acquisitions while improving our security posture and team member experience. Seeing the positive results with Google Workspace, we were inspired to test other Google solutions to support our growth. We anticipated that a combination of ChromeOS, Cameyo, and Chrome Enterprise Premium would help us reap the benefits of browser-based computing, including simplified management and improved security.

We deployed ChromeOS in our call centers, allowing us to move away from our costly legacy Virtual Desktop Infrastructure (VDI) solution. However, we still needed to provide access to important contact center software.

After evaluating several virtualization products, Cameyo clearly outperformed the others and offered the significant cost savings we needed. By choosing ChromeOS with Cameyo, we achieved a major digital transformation, cutting operational expenses and avoiding a $15 million infrastructure refresh. The transition also accelerated performance and simplified our IT management. What's more, our call center team members have found the Cameyo platform incredibly easy to use. Today, more than 100 applications flow through it. Looking ahead, we expect this solution to yield a significantly lower total cost of ownership compared to our previous solution.

This journey led us to what we now call the TELUS Desktop Stream: a zero-trust, browser-based app streaming solution built with ChromeOS, Chrome Enterprise Premium, and Cameyo. Cameyo is crucial because it allows all our applications, whether cloud-based or not, to run directly through a browser. This gives us confidence that we can continue to provide our teams with the necessary tools while reaping the benefits of cloud-based end-user computing.

Unlocking business-wide benefits

At every stage of our digital transformation, we’ve seen benefits beyond cost savings. For example, my IT team appreciates Chrome Enterprise Premium for its ability to streamline our Chrome browser management across our entire device fleet. They also love how Cameyo enables TELUS Desktop Stream to scale application access instantly, supporting the flexible workforce we need to serve customers worldwide.

Chrome Enterprise Premium gave us the security protection we needed for a distributed workforce and a growing business. With extra security features such as context-aware access controls and data loss protection, we are more secure as an organization, even with eliminating the need of VPN’s for team members leveraging virtual access.

ChromeOS helped us deliver the speed that team members requested for their productivity solutions. Login times are three times faster in ChromeOS compared with our old Windows operating system. And today, team members talk about how much faster it is to work within ChromeOS, integrated with Chrome Enterprise and Cameyo, compared with the previous slow VDI solution with annoying lags and inconsistent latency.

In the TELUS call center, the combined solutions have directly delivered greater efficiency by allowing us to handle more calls per hour. The integration has been really powerful, having a real impact on productivity, and by extension, the levels of service and engagement we can bring to our customers.

When employees are satisfied, customers are satisfied

Our ongoing Google deployment is helping us achieve our goal to thrive. We believe that when employees are empowered with intuitive, friction-less experiences, they become not just more productive but more satisfied as well. With Google, we are now set up for the future with a web based tech stack that is agile enough to securely support our growth, while keeping our teams productive and engaged.

From legacy complexity to Google-powered innovation

Wed, 24 Sep 2025 09:00:00 +0000

Editor’s note: Today’s post is by Syed Mohammad Mujeeb, CIO and Arsalan Mazhar, Head of Infrastructure, for JS Bank a prominent and rapidly growing midsize commercial bank in Pakistan with a strong national presence of over 293 branches. JS Bank, always at the forefront of technology, deployed a Google stack to modernize operations while maintaining security & compliance.

Snapshot:

JS Bank’s IT department, strained across 293 branches, was hindered by endpoint instability, a complex security stack, and a lack of device standardization. This reactive environment limited their capacity for innovation.

Through a strategic migration to a unified Google ecosystem—including ChromeOS, Google Workspace, and Google Cloud—the bank transformed its operations. The deployment of 1,500 Chromebooks resulted in a more reliable, secure, and manageable IT infrastructure. This shift cut device management time by 40% and halved daily support tickets, empowering the IT team to pivot from routine maintenance to strategic initiatives like digitization and AI integration.

Reduced IT Burden: reduced device management time by 40%
Daily support tickets were halved, freeing up IT time for strategic, value-added projects
Nearly 90% endpoint standardization, creating a manageable and efficient IT architecture
A simplified, powerful security posture with the built-in protection of ChromeOS and Google Workspace

At JS Bank, we pride ourselves as technology pioneers, always bringing new technology into banking. Our slogan, “Barhna Hai Aagey,” means we are always moving onward and upward. But a few years ago, our internal IT infrastructure was holding us back. We researched and evaluated different solutions, but found the combination of ChromeOS and Google Workspace, a perfect fit in today’s technology landscape which is surrounded by cyber threats. When we shifted to a unified Google stack, we paved the way for our future driven by AI, innovation, and operational excellence.

Before our transformation, our legacy solution was functional, but it was a constant struggle. Our IT team was spread thin across our 293 branches, dealing with a cumbersome setup that required numerous security tools, including antivirus, anti-malware, all layered on top of each other. Endpoints crashed frequently, and with a mixture of older devices and some devices running Ubuntu, we lacked the standardization needed for true efficiency and security. It was a reactive environment, and our team was spending too much time on basic fixes rather than driving innovation.

We decided to make a strategic change to align with our bank’s core mission of digitization, and that meant finding a partner with an end-to-end solution. We chose Google because we saw the value in their integrated ecosystem and anticipated the future convergence of public and private clouds. We deployed 1,500 Chromeboxes across branches and fully transitioned to Google Workspace.

Today, we have achieved nearly 90% standardization across our endpoints with Chromebooks and Chromeboxes, all deeply integrated with Google Workspace. This shift has led to significant improvements in security, IT management, and employee productivity. The built-in security features of the Google ecosystem provide peace of mind, especially during periods of heightened cybersecurity threats, as we feel that Google will inherently protect us from cyberattacks. This has simplified security protocols in branches, eliminating the need for multiple antivirus and anti-malware tools, giving our security team incredible peace of mind. Moreover, the lightweight nature of the Google solutions ensures applications are available from anywhere, anytime, and deployments in branches are simplified.

To strengthen security across all corporate devices, we made Chrome our required browser. This provides foundational protections like Safe Browsing to block malicious sites, browser reporting, and password reuse alerts. For 1,500 users, we adopted Chrome Enterprise Premium. This provides features like Zero-Trust enterprise security, centralized management, data loss prevention (DLP) to protect against accidental data loss, secure access to applications with context-aware access restrictions, and scans high-risk files.

With Google, our IT architecture is now manageable. The team’s focus has fundamentally shifted from putting out fires to supporting our customers and building value. We’ve seen a change in our own employees, too; the teams who once managed our legacy systems are now eager to work within the Google ecosystem. From an IT perspective, the results are remarkable: the team required to manage the ChromeOS environment has shrunk to 40%. Daily support tickets have been halved, freeing IT staff from hardware troubleshooting to focus on more strategic application support, enhancing their job satisfaction and career development. Our IT staff now enjoy less taxing weekends due to reduced work hours and a lighter operational burden.

Our "One Platform" vision comes to life

We are simplifying our IT architecture using Google's ecosystem to achieve our "One Platform" vision. As a Google shop, we've deployed Chromebooks enterprise-wide and unified user access with a "One Window" application and single sign-on. Our "One Data" platform uses an Elastic Search data lake on Google Cloud, now being connected to Google's LLMs. This integrated platform provides our complete AI toolkit—from Gemini and NotebookLM to upcoming Document and Vision AI. By exploring Vertex AI, we are on track to become the region's most technologically advanced bank by 2026.

Our journey involved significant internal change, but by trusting the process and our partners, we have built a foundation that is not only simpler and more secure but is also ready for the next wave of innovation. We are truly living our mission of moving onward and upward.

Supercharging Employee Productivity with AI, Securely, with Gemini in Chrome Enterprise

Thu, 18 Sep 2025 17:00:00 +0000

AI is transforming how people work and how businesses operate. But with these powerful tools comes a critical question: how do we empower our teams with AI, while ensuring corporate data remains protected?

A key answer lies in the browser, an app most employees use every day, for most of their day. Today, we announced several new AI advancements coming to Chrome, which redefine how browsers can help people with daily tasks, and work is no exception. Powerful AI capabilities right in the browser will help business users be more productive than ever, and we're giving IT and security teams the enterprise-grade controls they need to keep company data safe.

Gemini in Chrome, with enterprise protections

Our work days can be full of distractions— endless context switching between projects, and repetitive tasks that slow people down. That’s why we’re bringing a new level of assistance directly into the browser, where many of these workflows are already taking place.

Gemini in Chrome¹ is an AI browsing assistant that helps people at work. It can cut through the complexity of finding and making use of information across tabs and help people get work done faster. Employees can now easily summarize long and complex reports or documents, grab key insights from a video, or even brainstorm ideas for a new project with help from Gemini in Chrome. Gemini in Chrome can understand the context of a user’s tabs, and soon it will even help recall recent tabs they had open.

Gemini in Chrome will be able to recall your past tabs for you

We're bringing these capabilities to Google Workspace business and education customers with enterprise-grade data protections, ensuring IT teams stay in control of their company's data.

Gemini in Chrome doesn’t just help you find information that you need for your workday, you can also take action through integrations with Google apps people use every day like Google Calendar, Docs and Drive. So employees can schedule a meeting right in their current workflows.

Gemini in Chrome is now integrated with your favorite Google apps

Gemini in Chrome is becoming available for Mac and Windows users in the U.S., and we’re also bringing Gemini in Chrome to mobile in the U.S. Users can also activate Gemini when using Chrome on Android, and other apps, by holding the power button. And starting soon, on iOS Gemini in Chrome will be built into the app.

IT teams can configure Gemini in Chrome through policies in Chrome Enterprise Core, and enterprise data protections automatically extend to customers with qualifying editions of Google Workspace.

AI Mode from Google Search in Chrome

In addition to Gemini in Chrome, the Chrome omnibox—the address bar people use to navigate the web—is also getting an upgrade. With AI Mode, people can ask complex, multi-part questions specific to their needs in the same place where they already search. You’ll get an AI-generated response, and can keep exploring with follow-up questions and helpful web links. IT teams can manage this feature through the generative AI policies in Chrome Enterprise Core.

Proactive AI Protection

We know that a browser's greatest value is its ability to keep users safe. As the security threats from AI-generated scams and phishing attacks become more sophisticated, our defenses must evolve just as quickly. That’s why security is one of the core pillars of Chrome’s AI strategy.

Safe Browsing’s Enhanced Protection mode is now even more secure with the help of AI. We’re using it to proactively block increasingly convincing threats such as tech support scams, and will be expanding to fake anti/virus and impersonated brand websites soon. We've also added AI to help detect and block scammy and spammy site notifications, which has already led to billions fewer notifications being sent to Chrome on Android users every day.

AI with enterprise controls

Organizations want to empower their workforce with AI for greater productivity, but never at the expense of security. Chrome Enterprise gives IT teams the tools they need to manage these new capabilities effectively: our comprehensive policies allow IT and security teams to decide exactly which AI features in Chrome are enabled for which users, and how that data is treated.

Chrome Enterprise Premium allows organizations even more safeguards. For example, they can use URL filtering to block unapproved AI tools and point employees back to corporate supported AI services. Within AI tools, security teams can apply data masking or other upload and copy/paste restrictions for sensitive data. These advanced capabilities further prevent sensitive information from being accidentally or maliciously shared via AI tools or any other web sites.

With Chrome Enterprise, AI in the browser offers businesses the best of both worlds: a highly productive, AI-enhanced user experience and the enterprise-grade security enterprises depend on to protect their data. To learn more about these new features, view our recent Behind the Browser AI Edition video.

^{1 Check responses for accuracy. Available on select devices and in select countries, languages, and to users 18+}

Unleash Your Business Potential: The Total Economic Impact of ChromeOS

Wed, 27 Aug 2025 08:38:00 +0000

In today's dynamic business landscape, organizations are continuously challenged to achieve more with fewer resources. The demand is high for technology that is not only powerful but also economical, simple to manage, and secure. Enter ChromeOS, a cloud-first operating system designed to meet these exact needs by enhancing security, boosting employee productivity, and significantly cutting IT costs.

ChromeOS usage can lead to a substantial decrease in the total cost of ownership (TCO) associated with device usage at an organization. But don't just take our word for it— research quantifies these benefits.

The Forrester Total Economic Impact™ Study: Quantifying the Value of ChromeOS

Google commissioned Forrester Consulting to conduct a comprehensive Total Economic Impact™ (TEI) study to evaluate the potential return on investment (ROI) for enterprises deploying ChromeOS. This study provides a robust framework for understanding the financial impact ChromeOS can have on organizations.

Forrester's analysis, based on interviews with six decision-makers experienced with ChromeOS, aggregated their experiences into a composite organization. This composite organization, a multinational corporation with $5 billion in annual revenue and 40,000 employees, realized a 208% return on investment (ROI) over three years, a payback period of less than 6 months, and a Net Present Value (NPV) of $6.8 million in savings. The study highlighted four key areas where the composite organizations achieved significant benefits:

Increased End-User Productivity

Forrester Consulting found that the composite organization saved 90,000 hours per year in productivity time by leveraging ChromeOS, a $6.5 million in total savings over a three year period. Additionally, Interviewees reported a 6-minute drop in login time per employee, with one noting that users experienced over 12 hours less downtime per year with ChromeOS

These gains can be attributed to ChromeOS's fast bootup times, seamless cloud integration and reduced upfront onboarding times, and AI-integration that helps workers focus on the work they value most.

The users love it. They don’t have to wait for IT to fix things. They don’t have to worry about updates or antivirus. It just works. CTO
Healthcare

Lowered Device and Licensing Costs

The study also found that ChromeOS led to $1.3 million in savings over three years for the composite organization due to reduced device and license costs. Organizations saved approximately $500 per device, including $300 in hardware costs and $200 in avoided software licenses for security and endpoint management.

With the Google Admin console, ChromeOS devices can be centrally managed and secured so IT admins can reduce additional security agents and management solutions if they choose. Additionally, with 10 years of OS updates, Chromebooks are built to last a long time. What’s more, organizations can install ChromeOS Flex at no cost to extend the life of existing Windows devices, further contributing to savings.

We don’t need to pay for software-licenses. We don’t need to pay for antivirus. We don’t need to pay for a lot of things that we used to pay for. Enterprise Director
Manufacturing

Strengthened Security Posture

The composite organization achieved a $1.2 million financial benefit from strengthened security. This was driven by a 90% incremental security risk reduction with ChromeOS. One interviewee observed that the number of vulnerabilities per end-user device decreased by 90% after deploying ChromeOS.

ChromeOS offers multi-layered security, automatic updates that happen in the background, and encryption, all contributing to a "secure by default" environment that eliminates the need for extra antivirus software.

Our number of vulnerabilities per end-user device decreased 90% as we continued the ChromeOS rollout. It’s still the only operating system, I believe, that has never had a ransomware attack. CTO
Healthcare

Reduced IT Support Needs

According to the study, ChromeOS reduced IT support needs, delivering at least $1.1 million in savings over three years. Organizations experienced a 63% reduction in help desk tickets with ChromeOS. Interviewees reported that tickets that did arise were resolved quickly. One interviewee reported that ChromeOS-related tickets take approximately 15 minutes on average to resolve, compared to 2 hours for other operating systems.

We have just one FTE to manage a fleet of 11,000 devices. We barely have to think about it. Head of IT Security
Financial Services

Discover More: Join Our Webinar!

Interested in learning how these benefits can apply to your organization? Watch our webinar on demand: The Total Economic Impact of ChromeOS.

During this session, we will:

Discuss how ChromeOS helps businesses reduce costs related to security, IT, and licensing, while also improving productivity.
Walk through the key findings from Forrester Consulting's "The Total Economic Impact of ChromeOS" study.
Help you identify users at your organization who are ready to move to ChromeOS by leveraging the ChromeOS Readiness assessment

ChromeOS desk sync keeps your momentum going, across devices

Tue, 19 Aug 2025 14:40:00 +0000

For many workers, the frequent need to switch between devices can become cumbersome and disruptive. Otherwise simple tasks like logging in, reopening applications, and re-establishing your workspace end up consuming valuable time when done many times throughout the day. To address this challenge, we’re happy to introduce ChromeOS desk sync. This feature allows users to pick up right where they left off, moving from one ChromeOS device to another and seamlessly resuming their work. All open windows, tabs, applications, and user profile settings, along with authentication into different web services, are automatically transferred across devices.

Supporting frontline workers across industries

Across any industry, but especially frontline use cases like retail, hospitality, healthcare, and manufacturing, desk sync is a practical addition to support worker productivity.

In retail and hospitality, desk sync helps streamline operations during shift changes and improve customer interactions. Associates can pick up a new device at the start of their shift and immediately access their work, whether for inventory management, team communication, sales, and more, to better facilitate shift changes. Front desk staff can immediately access guest reservations, check-in systems, and service requests through any available device at the reception desk and continue right where they left off, making guest experiences smoother as well. This instant access allows employees to focus on providing a more consistent service, reducing wait times and improving customer experiences in the process. Even more, new employees may find it easier to adapt to shared device environments, as their familiar workspace can follow them and reduce setup times across devices.

Take a look at Village Hotel Club, who uses desk sync to share devices between hotel employees. At every hotel’s leisure center, two Chromebooks are available to share, which allows employees to take a ChromeOS device with them as they walk prospective members through their facilities, and then complete applications directly from that same device. This means employees can count on a reliable application experience across devices, without any disruptions to their workflows that could potentially impact customer service.

ChromeOS has revolutionized the way we work and revolutionized my role as an IT manager keeping data, people, and devices safe. It has also improved collaboration to the point that I couldn’t imagine how we could work effectively without them. Dan Morley
Head of IT Infrastructure and Service Delivery, Village Hotels

In healthcare environments, desk sync optimizes essential tasks and enhances data consistency. Healthcare professionals can effortlessly move between patient rooms, nurse stations, or any other departments where devices can’t be moved around, accessing electronic health records, diagnostic tools, and communication platforms. Having access to consistent experiences to work across also helps support data privacy by reducing opportunities for vulnerabilities, human error, and data management issues. Overall, desk sync allows healthcare staff to spend less time worrying about login procedures and system navigation, and more time on direct patient care and critical tasks.

Within manufacturing use cases, desk sync contributes to a more continuous production flow and helps support team hand-offs. Manufacturing line workers and supervisors alike can easily move between workstations, accessing real-time data, quality control applications, and dashboards without significant delays. For shift changes, teams can more easily get up and running with desk sync, reducing disruptions in operations between shifts. Ultimately, reduced time spent on device setup will lead to more efficient time spent on the production floor and better operational efficiency as a result.

Future proof your frontline

ChromeOS desk sync is a powerful tool designed to meet the needs of modern work environments. By making it easier to transition between devices, it greatly reduces downtime and disruptions commonly associated with device switching. Whether in retail environments, hospitality, healthcare, or many other industries, desk sync provides consistency across devices, and empowers employees to focus more on their productivity and delivering exceptional customer experiences. If you’d like to get started with ChromeOS desk sync today, you can view our help center page to begin your configuration.

Interested in learning more about how ChromeOS can support shared device use cases? Visit our website.

5 ways Chrome Enterprise enhances Windows 11 environments

Thu, 14 Aug 2025 12:11:00 +0000

With Windows 10 end of life on the horizon, many businesses are getting more familiar with Windows 11. While your organization might be migrating, or perhaps has already migrated, to the latest Windows OS, many of your users might still prefer the familiarity and ease of Chrome as they spend more time working on the web.

But Chrome isn't just the browser that users prefer—it's a trusted browser used by hundreds of millions of business users, many of them working in Microsoft environments. No matter the operating system type or version, with Chrome Enterprise, IT teams get a full set of controls and customizations to meet their organization's specific needs.

Let's explore five key ways Chrome Enterprise is bringing more productivity and security to your Windows and Microsoft 365 environments:

1. Fast Calendar and File Access with New Tab Page Integrations for M365

Checking your Outlook Calendar, finding that crucial file in OneDrive, or viewing the latest updates on SharePoint just got streamlined. Chrome Enterprise offers seamless New Tab Page integrations that bring these essential Microsoft 365 tools front and center. When users open a new tab they instantly see upcoming meetings, recently accessed files, and SharePoint updates–all without having to click through any tabs. IT teams can easily configure these settings for their users, so they automatically get easy access to the information they need to work quickly.

2. Flexible Identity Management

Chrome Enterprise offers a wide range of identity integrations, making it easier than ever to manage Chrome using your existing Microsoft (or other third-party) identity solutions. Our Microsoft Entra integration allows your users to sign into Chrome using your existing Entra identity. You can even enforce the usage of a signed in Chrome profile by creating access policies in Microsoft Conditional Access. Once enabled, your enterprise resources will only be accessible from profiles managed by your organization.

Our new Universal Enrollment integration streamlines the process of letting users sign into Chrome with any third-party identity, without needing to sync identities with Google. We're focused on making identity management seamless, so IT teams can get the security and personalization benefits of a managed browser, even if their organization isn’t using Google identities.

3. Easy Access to Chrome on Windows 11

A big challenge for employees after an OS migration is that their common workflows get disrupted, and they often need to spend time manually updating the OS and re-setting new defaults and preferences. As your users navigate the updated interface of Windows 11, IT teams can help ensure Chrome is right where they need it. With Chrome Enterprise, you can easily configure policies to pin Chrome to the Windows 11 taskbar, making it readily accessible. Similarly, re-setting Chrome as the default browser across your organization can be managed centrally, ensuring a consistent and familiar experience for everyone no matter what OS version they are running on.

4. Customize Chrome for your Organization

With so much work happening in the browser, it’s helpful for employees to have the ability to log into a dedicated enterprise experience that is configured to help them get access to the right apps and data, while keeping the organization’s data safe and policies enforced.

Organizations can make this separation of work and personal profiles clear to employees by branding Chrome with your company logo and colors. Additionally, IT admins will now be able to customize the entire browser with the company name and logo on the New Tab page footer. This reinforces the work context and reminds users that their corporate profile or browser is for work-related activities.

Plus, you can apply other useful customizations, like centrally managed bookmarks, so users have quick access to important internal resources.

5. Gain Broader Visibility and Security Insights

Understanding your organization's browser landscape is crucial for security and planning. Chrome Enterprise provides reporting capabilities, offering broader visibility and security insights across platforms and operating systems. This includes making it easier to identify Windows 10 machines that may still need to be migrated, helping you stay ahead of the curve. These insights empower you to make informed decisions, improve security posture, and ensure a smooth transition as your environment evolves.

As you navigate the changing landscape with Windows 11 and beyond, Chrome Enterprise continues to invest in offering a secure enterprise browsing experience in Microsoft environments. It offers a familiar and loved user experience, paired with the advanced management and data protections that IT and security teams need. Get started with Chrome Enterprise Core or Chrome Enterprise Premium today.

Haven’t quite made the move to Windows 11 yet? Check out how easy it is to flex out your devices to ChromeOS using ChromeOS Flex from anywhere, so you can get your users on a supported and secured operating system quickly.

How ChromeOS devices support health and wellness at Stallant Health

Tue, 12 Aug 2025 09:00:00 +0000

Editor’s note: Today’s post is by Randall Steffens, Chief Information Officer for Stallant Health and Wellness, a healthcare practice in Crescent City, California dedicated to whole-person care and wellness. Stallant Health chose ChromeOS devices to support staff, improve IT productivity, and streamline security.

“Instead of worrying about the management problems of expanding our technology deployment, I’m actually looking forward to it. Scaling to new locations and more users isn’t a problem with ChromeOS.”

Snapshot:

Reduced device management time: Stallant Health successfully cut the time spent on managing devices by 50% using ChromeOS and the Google Admin console.
Enhanced scalability for growth: ChromeOS has enabled Stallant Health to scale its operations effortlessly as it expands to new locations. The ease of deploying and enrolling new ChromeOS devices allows for rapid setup in new offices or facilities, supporting seamless growth.
Strengthened security and compliance: By leveraging ChromeOS, Stallant Health has bolstered its security posture and ability to meet compliance requirements. ChromeOS's inherent security features, such as automatic updates, sandboxing, verified boot, and data encryption, contribute to a more secure environment for handling sensitive patient information.

At Stallant Health & Wellness, we believe healthcare should be personal, welcoming, and even something patients look forward to—never a drudgery they have to endure. Our approach centers on the whole person, prioritizing time to understand root causes rather than simply treating symptoms. This philosophy drives not only how we engage with patients—through meaningful interactions and a strong focus on prevention—but also how we empower our team, providing the right tools and a supportive environment to deliver truly exceptional, holistic care.

To make that happen, our clinicians need to spend time with people—not tech support. That’s why we chose ChromeOS devices as a core part of how we run the practice. ChromeOS is fast, secure, and cost-effective. But most importantly, ChromeOS lets us keep the focus where it belongs: on patient care.

Technology that aligns with our clinical vision

When we launched our first Stallant Health location in Crescent City, we built it from the ground up to feel different, more welcoming, more connected, and more effective for both patients and providers. That philosophy extended across everything we offered: primary care, dental, mental health, and wellness services.

But our old technology setup didn’t match that vision. We were juggling 80 outdated devices that were hard to secure, challenging to keep updated, and a pain to manage. Our third-party device management platform was clunky, and staying compliant was a headache. All of it took time and energy away from what mattered most: expanding access to quality care.

A strategic shift from legacy systems to ChromeOS

Buying more of the same hardware wasn’t a good solution. Besides being expensive, it was overly limiting. Since we were already using Google Workspace successfully, we decided to try a handful of ChromeOS devices with our office staff. That trial went so well, we rolled them out to our providers, too.

We soon noticed the difference. Device management was a breeze. Staff could move easily between exam rooms with lightweight, portable laptops. Battery life was excellent. And fast boot times meant less waiting to get to a patient’s chart. Being able to access treatment plans and wellness materials at the bedside made clinical visits interactive and informative for patients.

On top of that, ChromeOS comes with strong security baked in—sandboxing, automatic updates, built-in virus protection, and encryption—giving our team confidence when handling sensitive data and meeting compliance standards with less hassle.

Security and compliance, without complexity

Our switch to Chromebook and Chromebook Plus devices made compliance simpler and more cost-effective. By integrating Okta Device Trust and USB security keys, we elevated our platform security to a new level. This streamlined compliance certifications, eliminated some awkward workarounds, and made protecting sensitive patient data more straightforward.

Even better, thanks to the reduced risk profile that ChromeOS presented, we qualified for remarkably low cyber security insurance premiums. This was a welcome, tangible financial win driven by better security infrastructure.

50% less time spent on IT management

What’s impressed me most as CIO is just how much time we’ve saved. We’re spending 50% less time managing devices. ChromeOS handles most updates quietly in the background, so there’s less disruption for clinicians. And with the Google Admin console, we can manage devices centrally and efficiently, without needing to add more IT staff.

Because Chromebooks are affordable, everyone gets their own device now. No more shared machines. No more associated headaches. That’s freed up our IT team to focus on bigger-picture initiatives instead of putting out fires all day.

Looking ahead: growth without growing IT overhead

We’re planning to open two more Stallant Health locations in Southern California soon. And instead of worrying about how we’ll handle the extra users and devices, I’m actually excited. ChromeOS scales beautifully. It’s secure, manageable, and cost-effective, even as we grow.

At the end of the day, technology should never slow down good care. At Stallant Health, we’ve built our practice around helping people thrive. And with the right tools, we find that we’re able to do that better every day. 

Wayfair Transforms Contact Center Operations with ChromeOS and ChromeOS Flex

Wed, 06 Aug 2025 09:00:00 +0000

Editor’s note: Today’s post is by Asad Rahman, Director of IT for Wayfair, a leading e-commerce company specializing in furniture and home goods. Wayfair chose ChromeOS and ChromeOS Flex devices to support contact center staff, improve productivity, and streamline security tasks.

"ChromeOS is a natural fit for how Wayfair operates today. We’ve embraced Google Workspace and Gemini to power collaboration and insights, and our teams are fast-moving and globally distributed. ChromeOS keeps pace with us, providing a modern infrastructure that’s simple, scalable, and streamlined."

Snapshot:

Easy deployment across multiple setups: Successfully transitioned 127 employees across 150+ devices with ChromeOS Flex.
Cost savings: Potential savings of over $1.2 million over the next 6 months.
Improved security: ChromeOS layered security model, automatic updates, and sandboxing have dramatically reduced the attack surface.

As the destination for all things home, Wayfair's goal is to make it easy for customers to create a home that is just right for them. Delivering on that promise for millions of customers and an online catalog of over 30 million items requires scalable and secure technology that empowers our global teams. ChromeOS has been a reliable partner in our operations for years, powering digital displays in our offices and serving our retail and grab-and-go spots. We are now building on that success by expanding our ChromeOS deployment to our call centers, further enhancing the productivity and collaboration that are crucial to providing a seamless customer experience.

Recognizing the need for change

For years, we wrestled with a frustrating paradox. We had fully embraced Google Workspace leveraging tools like Gemini and NotebookLM. Yet, our endpoints were still stuck on a different platform. We had a vision to provide a cost-efficient, cloud-based, remote, secure environment that would eliminate expensive VDI licenses and complex engineering overhead, improve user experience, and align to a zero-trust architecture for future workforce expansion. Our users needed to collaborate seamlessly and do their jobs efficiently, but the solution we had just wasn't cutting it. Sales and service agents, along with our BPO partners, faced daily performance and reliability challenges. Log-in times were a nightmare, often upwards of 10 minutes in our virtualized environments, and live updates would bog down productivity in the middle of the workday. Our end-users were constantly asking for something simpler, something that just worked.

On the IT side, we were stretched thin. Most of our resources and time were spent maintaining our stack instead of innovating. A reduction in personnel coupled with the departure of our lead IT architect further underscored the need for a solution that was inherently easier to manage and less resource-intensive. We knew we needed a change, and we needed it fast.

Easy, secure, and built for our future

The decision to lean into ChromeOS for our call centers felt like a natural evolution. Given our existing familiarity in other areas, and our grounding in Google Workspace, it just made sense. We needed a user experience that was intuitive and easy while being simple to manage for our IT team. The security and ease of deployment, while not our initial driving force, quickly became a critical factor once we saw the potential for a broader rollout.

We decided to launch ChromeOS in our Georgia based call center. The good news? We could leverage our existing devices by simply deploying ChromeOS Flex. This meant a smoother transition with less capital expenditure. We successfully transitioned 127 employees across over 150 devices.

Easy deployment across multiple setups

The deployment process was remarkably easy. Our call center agents were already somewhat familiar with the ChromeOS interface, which certainly helped. ChromeOS worked seamlessly with tools that our users depend on, like voice over the internet communication and workplace management tools. Additionally, we can rest assured that our business processing outsource partners have secure remote access to company resources since ChromeOS can work with various hardware solutions, like BYOD. The feedback we received has been stellar. We are now expanding beyond our in-office agents and deploying ChromeOS to our remote workers—working both stateside and globally.

$1.2 million in savings

The great news is that our initial estimates for moving to ChromeOS are looking even better than we projected! We're now looking at a potential savings of more than $1.2 million over the next 6 months. With ChromeOS, we’ve also successfully reduced our fixed costs, meaning we actually see savings when we reduce users, a significant improvement. Plus, we're no longer tied into those long-term, expensive, iron-clad contracts, giving us much more flexibility.

This transition has been great for our IT team as well. Previously, the engineering effort to keep everything running was pretty complex and expensive, but ChromeOS requires fewer resources from them. This is a stark contrast to our old system, where users understandably faced frustration with performance slowdowns, especially audio and lag issues. Those problems resulted in a huge number of support issues—we were dealing with over 7,500 tickets a year! The shift to ChromeOS has streamlined things for everyone.

Don't send me back: The unmistakable benefits of ChromeOS

The results have been nothing short of transformative. Overall feedback was positive, with users praising ChromeOS simplicity and speed, and the elimination of VDI screen switching. For years, VDI issues were consistently one of our top three IT tickets. Since moving to ChromeOS, those tickets have been reduced to none. Now, if there’s an issue, it's almost always user error, not a problem with the underlying technology.

I've heard direct quotes from our users like, “Don’t send me back!” That's the kind of enthusiasm that validates every decision we made. Log-in times are now measured in seconds, not the agonizing 10 minutes they once were. We’ve also seen less latency on certain applications, which has made a real difference in our agents' ability to serve our customers efficiently.

And when it comes to security? ChromeOS security model, automatic updates, and sandboxing have dramatically reduced our attack surface. Our security team has provided positive feedback, noting the peace of mind that comes with knowing devices are inherently more secure, with less manual intervention required from their end. The built-in protection is a game-changer for a company of our size and with our current IT resources.

Looking ahead, we’ll begin assessing the remaining call center population, with the goal of replacing all legacy laptops and desktops with ChromeOS by the end of year. Embracing ChromeOS has been one of the best decisions we’ve made. It’s not just about simpler IT; it’s about empowering our employees, improving productivity, and building a more secure and resilient foundation for Wayfair, one "Don't send me back," at a time.

How Cake, Vietnam's leading digital bank, found the right mix of simplicity and security with ChromeOS and Chrome Enterprise

Mon, 04 Aug 2025 09:00:00 +0000

Editor’s note: Today’s post is by Hiển Từ Thế (Jay), Chief Technology Officer for Cake Digital Bank, a prominent digital-only bank in Vietnam offering a comprehensive suite of financial services entirely through its mobile application. As a technology forward company, they chose ChromeOS to support staff with seamless deployment, ease of management, and streamlined security tasks.

What does it take to be a successful digital bank? For Cake, Vietnam's largest digital bank, it means thinking like a technology company first. Launched in 2021, Cake has rapidly emerged as a key player in the country’s burgeoning fintech landscape, reaching profitability in just a few years—a milestone achieved by only the top 5% of digital banks worldwide.

As a technology-driven bank, we constantly navigate the need to stay secure and compliant while continuing to innovate. To address this challenge, we adopted a more flexible approach—one in which ChromeOS and Chrome Enterprise supported our transition.

Being a leading digital bank in Vietnam, with an average increase of more than 30% in the number of customers each year, while still having to comply with risk management and banking regulations, we face many challenges in IT system management such as growth rate, product and service diversification, flexible expansion, maximum security and safety. We needed a solution that was secure, easy to manage, and empowered our employees to do their best work without friction.

Securing enterprise browsing from the start

We began by deploying Chrome Enterprise to ensure secure access to corporate apps across all employee devices. With built-in protections like Safe Browsing, sandboxing, file scanning, and password alerts, Chrome Enterprise helps us reduce risk from malicious sites, downloads, and unsafe user behaviors.

To meet more advanced needs, we adopted Chrome Enterprise Premium, which lets us enforce centralized access controls, data loss prevention, and real-time protection against threats like phishing and ransomware. We also apply context-aware access policies based on identity, location, and network to support a zero-trust security model.

Extending protection with cloud-first devices

We took the next step by rolling out Chromebooks, which run on a read-only OS that blocks executables—minimizing ransomware risk and reducing our attack surface. ChromeOS adds another layer of protection with sandboxing, device-level DLP policies, and seamless automatic updates that don’t disrupt work.

We also used ChromeOS Flex, a no-cost cloud-first OS offered by Google, to convert and revitalize our existing PCs and Macs—no new hardware required. In a short period of time, we only needed one IT staff to convert 50 devices. The process was fast, cost-effective, and easy for employees, with no extensive training needed. We started with frontline, support, and back-office teams, and the results were immediate.

The results speak for themselves

By implementing Chrome Enterprise and ChromeOS, we didn't just solve our security and management challenges—we enhanced our entire model.

Chrome Enterprise enhances our data security by centralizing control within the browser. This approach prevents sensitive information from being stored on local machines, significantly reducing the risk of data leakage. Through browser settings and Chrome Enterprise policies, we can effectively manage data, control access, and remotely configure settings such as device controls and screen lock, ensuring our secure data remains protected.

Streamlined bank audits and empowered IT

The read-only nature of ChromeOS makes navigating our rigorous bank audits and achieving certifications like ISO and BCIS significantly easier. Furthermore, our lean IT team is more empowered than ever. Using policy as code templates, we can make sure the same protections and access restrictions are applied to everyone. Our team can deploy and manage our entire fleet with incredible efficiency. With ChromeOS, we don't have data stored locally on our devices and it is very easy to control and manage the flow of company information as there is no data going out.

Chrome Enterprise and ChromeOS provide an integrated and secure stack that aligns with our tech-forward mission. The Google Admin console offers centralized control over all device and browser settings, enabling us to enforce policies, audit compliance, and safeguard our data with ease. By utilizing pre-configured templates, we eliminate complex setups and ensure consistent policy application across all users and devices.

Foundation for the future of fintech

For us, choosing ChromeOS and Chrome Enterprise wasn't just a technical upgrade; it was a business decision that gave us peace of mind while reinforcing our identity. It allows us to attract top talent with a modern, flexible work environment while assuring regulators and customers that their security is our top priority. As we continue to pioneer the future of banking in Southeast Asia, our journey proves that with the right tools, you really can have a flexible working environment while maintaining security compliance in the fintech space.

Cloud CISO Perspectives: Going beyond 2FA to address fast-rising, emerging threats

Wed, 30 Jul 2025 16:00:00 +0000

Welcome to the second Cloud CISO Perspectives for July 2025. Today, Andy Wen, director, product management, Workspace Security, discusses new efforts we’re making to defend against identity-based cyberattacks.

As with all Cloud CISO Perspectives, the contents of this newsletter are posted to the Google Cloud blog. If you’re reading this on the website and you’d like to receive the email version, you can subscribe here.

aside_block: <ListValue: [StructValue([('title', 'Get vital board insights with Google Cloud'), ('body', <wagtail.rich_text.RichText object at 0x7fd9bcbd4be0>), ('btn_text', 'Visit the hub'), ('href', 'https://cloud.google.com/solutions/security/board-of-directors?utm_source=cloud_sfdc&utm_medium=email&utm_campaign=FY24-Q2-global-PROD941-physicalevent-er-CEG_Boardroom_Summit&utm_content=-&utm_term=-'), ('image', <GAEImage: GCAT-replacement-logo-A>)])]>

The evolving threat landscape: Beyond traditional 2FA

By Andy Wen, director, product management, Workspace Security

Andy Wen, director, product management, Workspace Security

Threat actors relentlessly pursue identity-based attacks, understanding that compromised credentials are a direct path to their objectives. To counter those attacks, we’re constantly innovating at Google, and we have some good news involving two critical innovations developed in close partnership with the wider security community.

Stolen credentials, email phishing, brute-force, and other identity-based vectors comprised 37% of successful breaches in 2024, in large part because of the rise of infostealers, a method threat actors rely on to scale identity attacks, according to Mandiant’s most recent M-Trends report. These initial breaches can frequently escalate into costly ransomware incidents and data exfiltration.

Google has long been a leader in security, and last year we announced that we are making two-factor authentication (2FA) mandatory for Google Cloud customers. We're now taking security a step further and introducing new capabilities to keep customers secure.

How passkeys and Device Bound Session Credentials can help

To empower users and customers against identity-based attacks, we've introduced two critical innovations developed in close partnership with the wider security community: passkeys and Device Bound Session Credentials (DBSC). These advancements are designed to significantly strengthen account security and prevent account takeovers.

We highly recommend that all Workspace customers, especially those with high-value users such as IT administrators and business leaders, implement these controls.

Use passkeys for a simpler, more secure sign-in

We have made passkeys generally available to all 11 million Workspace organizations and billions of Google consumer users. Passkeys represent a fundamental shift away from passwords, offering a simpler and inherently more secure sign-in experience.

Unlike traditional passwords that can be guessed, stolen, and forgotten, passkeys are unique digital credentials cryptographically tied to your device. They use the robust FIDO2 technology, the same underlying standard used in hardware security keys like our Titan Security Key, and the added convenience of using a device you already own, such as an Android phone or a Windows laptop.

While absolute security remains an elusive goal, from the perspective of account takeover and phishing attacks, passkeys and security keys virtually eliminate these password-based threats. As a founding member and steadfast supporter of the FIDO Alliance, we are encouraged by the growing industry adoption of FIDO technology.

Disrupt cookie theft with Device Bound Session Credentials

We are also addressing the use of infostealers to exfiltrate session cookies, allowing attackers to bypass password and 2FA controls and access victim accounts from their own devices.

In addition to Mandiant’s M-Trends 2025 report, IBM’s 2025 X-Force Threat Intelligence Index observed an 84% increase in emails delivering infostealers in 2024 compared to the prior year.

In close collaboration with the Chrome team, we are adding a powerful addition to our security arsenal, now in beta: Device Bound Session Credentials (DBSC). DBSC are designed to disrupt cookie theft by creating an authenticated session that is cryptographically bound to a specific device. This innovative approach can significantly mitigate the risk of exfiltrated cookies being used to access accounts from an unauthorized device.

DBSC introduces a new API that enables servers to establish an authenticated session bound to a device. When a session is initiated, the browser generates a unique public-private key pair. The private key is securely stored using hardware-backed storage, such as a Trusted Platform Module (TPM), when available.

The browser then issues a regular session cookie. It is crucial to note that throughout the session's lifetime, the browser periodically proves possession of the private key and refreshes the session cookie.

This mechanism allows the cookie's lifetime to be set short enough to render stolen cookies largely useless to attackers. While DBSC currently operates with Chrome and Workspace, numerous server providers, identity providers (IdPs) like Okta, and other browsers such as Microsoft Edge, have expressed strong interest in adopting DBSC to protect their users from cookie theft.

A combined approach for enhanced security

Combined, passkeys and DBSC can empower organizations to significantly strengthen account security and prevent account takeovers. Both of these security controls are readily available to all Workspace customers, and we strongly advocate for their implementation, particularly for your most critical users such as IT administrators and business leaders.

More information is available on how your organization can start using passkeys and implementing DBSC.

aside_block: <ListValue: [StructValue([('title', 'Join the Google Cloud CISO Community'), ('body', <wagtail.rich_text.RichText object at 0x7fd9bcbd4100>), ('btn_text', 'Learn more'), ('href', 'https://rsvp.withgoogle.com/events/ciso-community-interest?utm_source=cgc-blog&utm_medium=blog&utm_campaign=2024-cloud-ciso-newsletter-events-ref&utm_content=-&utm_term=-'), ('image', <GAEImage: GCAT-replacement-logo-A>)])]>

In case you missed it

Here are the latest updates, products, services, and resources from our security teams so far this month:

Secure cloud. Insecure use. (And what you can do about it): If the cloud is secure, why are there still cloud security breaches? Too many organizations don’t use it securely. Here’s how to change that. Read more.
Tabletopping the tabletop: New perspectives from cybersecurity’s favorite role-playing game: A group of bio-cybersecurity experts did a TTX with us to practice and share ideas on how to respond to real-world challenges — without the real-world risk. Read more.
How to enable Secure Boot for your AI workloads: Secure Boot can help protect AI from the moment GPU-accelerated workloads power up. Here’s how to use it on Google Cloud. Read more.
Too many threats, too much data: new survey. Here’s how to fix that: Operationalizing threat intelligence remains a major challenge, say security and IT leaders in a new survey. Here are the survey results, and four steps security teams can take to get more out of their threat intelligence data. Read more.
Your guide to Google Cloud Security at Black Hat USA 2025: We're excited to bring our commitment to cybersecurity innovation and simplification to Black Hat. Here’s where to find us, and what we’ll be talking about. Read more.
How SUSE and Google Cloud collaborate on Confidential Computing: Secure sensitive data on Google Cloud using SUSE Linux Enterprise Server (SLES) and Confidential VMs with AMD SEV, AMD SEV-SNP, and Intel TDX. Read more.
Innovate with Confidential Computing: Attestation, Live Migration on Google Cloud: Confidential Computing has evolved rapidly since we first made it available. See what’s new with two key pillars: robust attestation and live migration. Read more.
Introducing OSS Rebuild: Open source, rebuilt to last: OSS Rebuild is a new project to strengthen trust in open-source package ecosystems that can give security teams powerful data to avoid compromise without burden on upstream maintainers. Read more.
We’re taking legal action against the BadBox 2.0 botnet: Recently, our researchers partnered with HUMAN Security and Trend Micro to uncover BadBox 2.0, the largest known botnet of internet-connected TVs. Building on our previous actions to stop these cybercriminals, we filed a lawsuit in New York federal court against the botnet’s perpetrators. Read more.

Please visit the Google Cloud blog for more security stories published this month.

aside_block: <ListValue: [StructValue([('title', 'Tell us what you think'), ('body', <wagtail.rich_text.RichText object at 0x7fd9bcbd4460>), ('btn_text', 'Vote now'), ('href', 'https://www.linkedin.com/feed/update/urn:li:activity:7356020693123145729/'), ('image', <GAEImage: GCAT-replacement-logo-A>)])]>

Threat Intelligence news

Exposing the risks of VMware vSphere Active Directory integration: The common practice of directly integrating vSphere with Microsoft Active Directory can simplify administration tasks, but also creates an attack path frequently underestimated due to misunderstanding the inherent risks. Read more.
Defending your VMware vSphere estate from UNC3944: Take a deep dive into the anatomy of UNC3944's vSphere-centered attacks, and study our fortified, multi-pillar defense strategy for risk mitigation. Read more.
Ongoing SonicWall SMA exploitation campaign using the OVERSTEP backdoor: Google Threat Intelligence Group (GTIG) has identified an ongoing campaign by a suspected financially-motivated threat actor we track as UNC6148, targeting fully patched end-of-life SonicWall Secure Mobile Access (SMA) 100 series appliances. Read more.
Update on creative phishing attack on prominent academics and critics of Russia: We detailed two distinct campaigns in June observing a Russia state-sponsored cyber threat actor targeting prominent academics and critics of Russia, and impersonating the U.S. State Department. The threat actor is continuing the initial wave of their campaign with changed ASP names while also trying a new tactic: sending calendar invites in an attempt to convince targets to link an attacker-controlled device to their Microsoft Office 365 account through Microsoft’s device code authentication flow. Read more.

Please visit the Google Cloud blog for more threat intelligence stories published this month.

Now hear this: Podcasts from Google Cloud

How to accelerate your SIEM journey: Manija Poulatova, director, Security Engineering and Operations, Lloyd's Banking Group, joins hosts Anton Chuvakin and Tim Peacock for a lively chat on all things SIEM, from migration challenges to AI integration. Listen here.
Governing AI agents, from code to courtroom: The autonomous decision-making and learning capability promise of agentic AI and AI agents presents a unique set of risks across various domains. Anna Gressel, partner at Paul, Weiss, discusses her key areas of concern with Anton and guest host Marina Kaganovich. Listen here.
Cyber-Savvy Boardroom: Harnessing innovation while mastering compliance: Grant Waterfall, partner, PwC, joins Office of the CISO’s Alicja Cade and David Homovich with a deep-dive chat on using compliance to drive innovation. Listen here.
Behind the Binary: A reverse engineer's journey: Reverse-engineering pioneer Danny Quist talks with host Josh Stroschein about the evolving landscape of binary analysis tools, the constant battle with malware obfuscation, and building one of the first malware repositories for research. Listen here.

To have our Cloud CISO Perspectives post delivered twice a month to your inbox, sign up for our newsletter. We’ll be back in a few weeks with more security-related updates from Google Cloud.

How ChromeOS propelled Korean Air's digital transformation

Tue, 22 Jul 2025 09:00:00 +0000

Editor’s note: Today’s post is by Choi HeeJung, Chief Information Officer for Korean Air, one of the world's top 20 airlines, serving 117 cities across 40 countries on five continents. Renowned for its commitment to excellence and customer satisfaction, Korean Air—named AirlineRating’s 2025 airline of the year—chose ChromeOS to further elevate its exceptional 24/7 global customer service.

"Our move to ChromeOS was about more than just replacing old hardware. It was a strategic step in our journey to remove dependencies on legacy systems like Active Directory and build a more agile, secure, and efficient IT environment."

Snapshot:

Improved efficiency: Agents have become significantly more productive, saving 5-7 minutes in boot up time with Chromeboxes.
Stronger security and easier IT: Built-in security and centralized management freed up IT time and reduced vulnerabilities.
Future ready and innovative: Agents have been able to utilize Gemini to search for information in Google Drive, get help drafting customer emails and even assist with translating inquiries from different languages.

Over the last ten years, Korean Air has been on a remarkable journey of digital transformation. Our CEO set a clear vision to modernize our infrastructure and empower our employees with the best tools available. This vision led us to deploy a full-scale adoption of Google Workspace, a decision that proved crucial during the COVID-19 pandemic.

Thanks to Google Workspace, our teams could work remotely and collaborate seamlessly, fostering a more open and democratic culture that continues today. But this was just the beginning. Our next big challenge was to modernize our end-user computing, starting with the heart of our customer interactions: the contact center.

Outdated systems in a 24/7 Environment

Our Seoul contact center, the largest of our five global centers, operates nearly 24 hours a day. Our legacy based solution presented significant hurdles. The devices were slow, sometimes taking five to seven minutes to boot up. In a fast-paced environment where every second counts, this was a major drag on productivity. We were also constantly dealing with forced updates and the dreaded "blue screen," which interrupted operations and frustrated our agents.

Furthermore, the bulky hardware took up valuable desk space, making it difficult for agents who needed multiple monitors to handle increasingly complex customer inquiries. We knew we needed a solution that was secure, efficient, and designed for the modern, cloud-based world we were building.

Thanks to zero-touch enrollment, our ChromeOS devices were ready to use straight out of the box, making deployment effortless for both IT and our agents. Choi HeeJung
Chief Information Officer, Korean Air

A seamless transition to ChromeOS

Our move to the cloud and web-based applications made ChromeOS the logical next step. We decided to deploy 670 ASUS Chromeboxes for 700 users in our Seoul contact center. ASUS was able to manufacture a custom Korean keyboard specifically for us and Google, and Megazone, Google’s partner, was able to help us educate agents on ChromeOS native keyboard shortcuts prior to the launch. By providing training and working with our partners, we ensured a smooth transition for our agents.

Thanks to zero-touch enrollment, our ChromeOS devices were ready to use straight out of the box, making deployment effortless for both IT and our agents. The immediate speed was the first thing everyone noticed; the devices boot in seconds, providing an instant start to the workday that became a celebrated advantage. The compact Chromebox design was another huge win, freeing up valuable desk space and enabling the multi-monitor setups essential for effective multitasking. This newfound efficiency empowers our agents to handle more calls per minute, directly boosting customer satisfaction.

For our IT department, the benefits have been just as profound. Managing this fleet is now incredibly efficient. Using the Google Admin console, our small IT team can centrally manage policies and troubleshoot issues with ease. We no longer have to worry about running antivirus software or scheduling downtime for security updates, as security is built into the core of ChromeOS. This has not only improved our security posture but has also led to significant cost savings, and allowed us to redeploy valuable IT resources to strategic projects vs. low value maintenance, like updates.

AI-powered agents and a company-wide vision

With the foundation of ChromeOS firmly in place, we are now focused on the next wave of innovation: AI. We rolled out Google Workspace with Gemini to our second-level agents—the Korean Air staff who handle the most complex customer issues. Our goal is to empower them to serve customers with even greater confidence. With Gemini, they can instantly search for information across Google Drive, get help drafting replies to customer emails, and even assist with translating inquiries from different languages.

Leveraging Amazon Connect, a Chrome Enterprise Recommended partner, we have also redefined our internal quality assurance process. The screen recording capability allows us to analyze an agent’s on-screen workflow during customer interactions. This provides insights needed for targeted coaching and process refinement, ensuring we consistently improve our customers’ experience with agents.

Scaling ChromeOS beyond the contact center

Following the success of our contact center deployment, we are adopting ChromeOS as our enterprise standard, scaling to 14,000 units company-wide.

This shift replaces legacy desktops and Windows laptops with a secure, cloud-native infrastructure. By partnering with Good Morning IT and utilizing Cameyo, we’ve bridged the gap for the 40% of our workforce requiring legacy application access. Our hardware rollout features the Samsung Galaxy Chromebook Plus, alongside Asus Chromebooks and Chromeboxes.

Looking back, our move to ChromeOS was about more than just replacing old hardware. It was a strategic step in our journey to remove dependencies on legacy systems like Active Directory and build a more agile, secure, and efficient IT environment. By embracing the cloud and tools from Google, we're not just keeping pace with change—we're creating a more innovative, secure, and collaborative future for Korean Air.

Chrome brings seamless work and personal switching to iOS and enhanced enterprise protections to mobile

Mon, 21 Jul 2025 10:00:00 +0000

Many organizations are embracing Bring Your Own Device (BYOD) models, where employees often access company resources from their browsers on personal computers or phones. This means finding a secure and intuitive way for them to keep their work and personal online activity distinct has become increasingly important. Chrome Enterprise already provides businesses with a powerful and secure way to manage users at the browser level. On desktop platforms, employees can keep work and personal information separate, and on Android, many businesses take advantage of offering work and personal profile capabilities.

Now, we’re also giving iOS users the flexibility to easily switch between work and personal Google Accounts in Chrome, and organizations can securely manage their environments with more transparency and added data protections. Whether enterprises have a BYOD model or are looking for more ways to better safeguard their corporate-owned phones and tablets, Chrome is bringing tighter enterprise browsing security to mobile.

Easy account switching and data separation on iOS

People often use their mobile device for both work and personal tasks, requiring them to sign in and out with different Google Accounts. To simplify this experience while tightening security, Chrome on iOS is now offering seamless account switching with data separation for managed accounts.

When users sign in or switch to their managed account in Chrome, browsing related to their organization will be kept separate from their other browsing on the device. This improved account switching experience and data separation better enables businesses to allow employees to use their device of choice. Local data and content (including tabs, history, and passwords) stay only within the managed account browsing experience, giving more peace of mind to both end users and IT admins.

The first time users sign in or switch to a managed account, an onboarding screen provides transparency about the separation of managed account browsing and how their organization is handling their data. Organizations maintain control, with the ability to decide how existing browsing data is handled when a user initially signs in or switches to a managed account. When users switch to their managed account, they are notified they are entering a managed experience through an on-screen confirmation.

Advanced browser data protections on mobile devices

Once an employee is signed into a managed account on either Android or iOS, Chrome Enterprise offers a variety of advanced security capabilities that IT teams can enforce to help protect against data exfiltration.

Chrome Enterprise’s reporting capabilities are now extending to both Android and iOS. This gives organizations the ability to send critical data related to security events to the security investigation tool in the Google Admin console, Chrome logs, or the SIEM of their choice. This additional view of risks including browser activity across mobile devices enables IT teams to make more informed decisions about their overall security posture.

To help limit users from visiting unapproved or unsanctioned sites, URL filtering has been a valuable capability for desktop and Android environments. For example, organizations can block employees from visiting unallowed GenAI sites at a category level and redirect them to the approved corporate services to prevent ShadowAI risks. URL filtering is now available in Chrome on iOS, offering further control to IT teams that want to secure users across mobile devices.

Whether organizations are looking to invest more in productivity on mobile devices, or if they are looking to further reduce risks of data loss across all endpoints, Chrome Enterprise Premium offers a growing number of protections across operating systems and platforms. Enterprises can get started with reporting using Chrome Enterprise Core at no additional cost, and talk to an expert about adding advanced threat and data protections with Chrome Enterprise Premium.

The Future is Collaborative: ChromeOS Customer Community

Mon, 21 Jul 2025 00:23:00 +0000

We're excited to announce a new online platform for the ChromeOS Customer Community: it's now a global, open platform accessible to our business customers. This community is designed for IT admins and professionals, along with business leaders and decision-makers, who use and deploy ChromeOS in their organizations, regardless of size. This expansion, directly inspired by ChromeOS admins’ feedback, reinforces our commitment to building a more interconnected ecosystem. By removing geographical barriers, the community will offer unparalleled opportunities for IT admins and professionals to connect, collaborate, share insights, and grow, no matter where they are.

Please note that the platform will initially be available in English only.

Direct access to expertise and resources

This global community is your central hub for official announcements, proven best practices, and helpful troubleshooting tips. Navigate topics and resources freely, and by registering with your Google Account, under our team’s moderation you can post questions and reply to fellow users. Carefully tailored by ChromeOS specialists and product experts, you'll gain access to valuable resources to help you maximize the use of ChromeOS in your business. In addition, you’ll find a calendar of online events designed for our customers. Most importantly, this community offers a direct channel for anticipated product development information and updates, delivering a true understanding of everything ChromeOS can do for your organization.

Connecting and collaborating through peer-to-peer learning

This platform has the intention to connect global business leaders who utilize ChromeOS, creating a space where sharing experiences and solving challenges together is easier than ever. Members can learn from each other's successful approaches, share effective practices, and collaborate on answering questions from their peers. Beyond problem-solving, the community can inspire new ways to use ChromeOS, driven by real-world examples and from use cases spanning healthcare, retail and finance; to name just a few. Join the conversation, ask questions, and show off your expertise to land on our contributor leaderboard! Plus, you’ll be able to showcase your ChromeOS Admin Professional Certified Admin badge alongside your profile.

Tailored for growth: How our community supports SMBs

For small and medium businesses, navigating device management can often feel like a solo mission, especially when IT resources are limited. This is why this platform was designed for you to easily find answers to common questions, troubleshooting issues, and learning best practices from our user guides or fellow Admins. Additionally, if you’re new to ChromeOS, you’ll find our Getting Started guides to support your onboarding and helping your users. This platform will continue to develop and evolve with small businesses in mind, so whether you're just starting with ChromeOS or scaling an existing deployment, you'll be able to access tailored advice and peer support to help your organization thrive.

We're excited to see how this expanded community will empower our ChromeOS business customers. What are you most looking forward to gaining from this global platform? Join the Community today and let us know!

Securely deploy ChromeOS Flex – from anywhere

Thu, 17 Jul 2025 08:57:00 +0000

Just three years ago, ChromeOS Flex was born with a mission to breathe new life into existing hardware, offering a modern, sustainable, and secure experience in the process. Today, we’re proud to have over 600 certified devices, and millions of ChromeOS Flex devices being used around the world every day. But we aren’t resting on our laurels. I’m happy to share some much anticipated features coming to ChromeOS Flex that will further empower businesses to modernize their fleet.

You may have seen stories like Strawberry Hotels, who recovered from a ransomware attack in less than 48 hours by repurposing their existing Windows devices with ChromeOS Flex, or Foundations Health Solutions, who saved $1 million while improving patient care by adopting ChromeOS and ChromeOS Flex. These stories highlight how ChromeOS Flex is helping organizations of all sizes extend the lifespan of their hardware, reduce IT costs, and enhance security. And now with tools like remote deployment and expanded network security and VPN application support, it’s even easier for businesses to take advantage of ChromeOS Flex.

Upgrade your fleet with ease

The first advancement we’re introducing is ChromeOS Flex remote deployment. We understand that for large organizations with many globally distributed devices, relying solely on USB drives to migrate to ChromeOS Flex can be cumbersome and time-consuming. This new tool changes that, allowing most managed Windows devices to automatically convert to ChromeOS Flex, from anywhere, with no complex IT requirements.

This tool is designed to offer significant efficiency gains, and streamline ChromeOS Flex deployment across your organization. The best part? It’s simple:

Configure: Create a ChromeOS Flex package
Deploy: Push the package with your preferred Windows management tool, leveraging your existing infrastructure
Convert: On execution, the package will automatically convert your devices to ChromeOS Flex, join predefined Wi-Fi networks, and automatically enroll your device in the Google Admin console

To ensure the security and stability of your existing environment, we've designed this tool with administrator-level access in mind, giving IT admins complete control throughout the migration process. For a deep dive into the technical details and how to get started, click here to learn more about ChromeOS Flex remote deployment.

Enhanced security with Android network security and VPN application support

We recognize the critical need for businesses to secure data and access to remote resources, corporate networks, and sensitive information, no matter where work happens. Given that VPN platforms are already the most popular Android applications for our enterprise ChromeOS customers, we’re thrilled to share that Android network security applications from leading providers are now also supported on ChromeOS Flex.

This enhancement boosts ChromeOS Flex’s security capabilities, making it an even more robust solution for repurposing legacy hardware. Businesses and end-users alike will benefit from the seamless compatibility with leading enterprise network security providers such as Cisco, Zscaler, and Fortinet. This enables consistent security policies and a unified approach to network connectivity and data protection across both ChromeOS and ChromeOS Flex devices, ensuring your data is protected at all times, no matter where you get work done.

Three years in, ChromeOS Flex is not just a solution for repurposing hardware–it’s a strategic tool for modernizing your IT infrastructure and strengthening security as well. With ChromeOS Flex remote deployment and Android network security application support, ChromeOS Flex is ready to meet the demands of large organizations, hybrid work environments, and unique security needs.

Interested in learning more about ChromeOS Flex remote deployment? Visit our website.

Work Smarter with Chromebook Plus and Google AI

Mon, 23 Jun 2025 09:00:00 +0000

The way we use technology at work is changing at a rapid pace. Innovation in AI is leading to new experiences and expectations for what can be done on laptops. That’s why we’re excited to unveil the next evolution of Chromebook Plus, a powerful leap forward and designed to help businesses unlock productivity, creativity, and collaboration for employees.

We’ve been hard at work, not only refining the features you already know and love, but also integrating even more Google AI capabilities directly into your devices. We’re also introducing the next wave of Chromebook Plus devices, including the brand-new Lenovo Chromebook Plus, an innovative device powered by the most advanced processor in a Chromebook ever—the MediaTek Kompanio Ultra.

This moment also marks a milestone in our larger effort to improve our hybrid computing approach to AI. With built-in NPU (neural processing unit) capabilities on Chromebook Plus, we now offer on-device AI for offline use, complemented by cloud-based capabilities that benefit from continuous updates and advancements. This hybrid approach allows us to balance performance, efficiency, privacy, cost, and reliability in Chromebook Plus.

The latest in Chromebook Plus

The Lenovo Chromebook Plus (14”, 10) has the most powerful NPU ever in a Chromebook and NPU-enabled capabilities. Powered by MediaTek’s Kompanio Ultra processor, and boasting 50 TOPS (trillions of operations per second) of AI processing power to enable on-device generative AI experiences, this intelligent device is built to keep up with modern workers and offer up to 17 hours of battery life. Learn more.

The Lenovo Chromebook Plus also comes with exclusive AI features built in. Organization is easy with Smart grouping, which provides you with a glanceable chip of your recent tabs and apps. You can also automatically group related items, move them to a new desk, or reopen all tabs in a single window. And with On device image generation, you can effortlessly turn any image into a sticker or standalone graphic with a transparent background, ready for use in Google Slides, Docs, and more.

Smart Grouping

A device for every need

We also understand that every business has its own unique needs and requirements. That’s why we’re so excited to expand the Chromebook portfolio with additional devices, including the ASUS Chromebook Plus CX15, ASUS Chromebook Plus CX14, and the ASUS Chromebook CX14. These additions further broaden the range of choices available, ensuring businesses can find a device that aligns with both their operational needs and budget.

When it comes to modernizing your team, the right device can make all the difference.

For cost-conscious businesses, who prioritize a highly affordable and reliable solution for essential tasks like email, web browsing, and cloud-based applications, standard Chromebooks offer exceptional value.
For enhanced interactions and versatility, especially for teams in retail, field services, or more creative roles, we offer touchscreen options, as well as detachable and convertible form factors so you can adapt to various work environments and presentation styles.
For advanced use cases and future-proofing, and employees that require cutting-edge performance, Chromebook Plus devices are the ideal choice. With powerful processors, more memory, double the storage of standard Chromebooks, and on-device AI capabilities, these devices are equipped to handle the next generation of productivity tools and smart features, future-proofing your investment.

New Google AI features to supercharge your workforce

Along with all of this new hardware, we’re also introducing new and updated features built directly into Chromebook and Chromebook Plus.

For productivity, we’ve enhanced Help me read, which now can simplify complex language into more straightforward, digestible text. This is perfect for quickly grasping complicated topics, technical documents, or anything that might otherwise require more time to understand. Additionally, we’re introducing the new Text capture feature. Leveraging generative AI, it extracts specific information from anything on your screen and provides contextual recommendations. Imagine automatically adding events to your calendar directly from an email banner, or effortlessly taking a receipt screenshot and pulling that data into a spreadsheet for easier tracking. Finally, Select to search with Lens helps you get more information from whatever is on your screen. Whether you’re curious about a landmark, a product, or anything else, this feature helps you quickly identify and learn more about it.

Text Capture

Just as critical as productivity is empowering teams to unleash their creativity. With that in mind, we’ve improved Quick Insert to now include image generation capabilities. With just the press of a button, you can generate high-quality AI images and instantly insert them into your emails, slides, documents, and more. Need a unique visual for a presentation or an email? Simply describe it, and let AI bring your vision to life.

Quick Insert with Image Generation

As always, these features come with built-in policies, ensuring IT admins maintain full control over your organization’s access and usage of AI.

Preparing for the future of work

We continue to invest in making Chromebook Plus the definitive choice for businesses seeking to modernize their operations, empower their end-users with productivity and creativity, and prepare for the evolving demands of the future of work. With Chromebook Plus, your organization gains a secure, intelligent, and powerful platform designed to drive progress today and into tomorrow.

Click here to learn about ChromeOS devices, and discover which device is best for your business.