Browser Security Events

Table of Contents

Browser Security Events

Browser security events capture enforcement of security controls that protect the browser environment, including DevTools access, protected browsing features, and account protection.

These events are grouped here by security topic for documentation purposes. In the Events screen, they appear under different categories:

asrControl appears under the Browser security category
devtoolsAccess, javascriptJIT, webRTC appear under the Access category
rceExploitAttempt appears under the Tampering category (documented in Tampering Events)

Event Types

Event Type	UI Name	UI Category	Description
devtoolsAccess	DevTools access	Access	A user attempted to open browser developer tools
javascriptJIT	WebAsm use	Access	JavaScript JIT compilation or WebAssembly execution was detected
webRTC	WebRTC use	Access	A WebRTC connection was initiated
asrControl	Protected browsing	Browser security	An attack surface reduction control was triggered
secureScreenshot	Secure screenshot	DLP	A secure screenshot was taken (admin-initiated evidence capture)

Context Fields — DevTools

Field	UI Label	Description
page.devtools.blockReason	Block reason	Why DevTools access was blocked

DevTools Block Reasons

Reason	Description
Admin policy	Blocked by administrator policy
Masking	DevTools blocked because data masking is active on the page
Sanitizing	DevTools blocked because typing guard is active
Readonly	DevTools blocked because the page is in read-only mode
Watermark	DevTools blocked because watermarking is active
Account protection	DevTools blocked because Account Shield is active
Security settings	DevTools blocked by security settings
Webpage element control	DevTools blocked because element removal is active

Context Fields — Protected Browsing (ASR)

Field	UI Label	Description
page.asr.eventType	Block reason	The specific browser function that was controlled

ASR Event Types

Type	Description
WebRTC	Real-time communication (audio/video/data channels)
WebGL	Hardware-accelerated 3D graphics
Web Clipboard	Programmatic clipboard access via Clipboard API
Web HID	Access to human interface devices
Web Bluetooth	Access to Bluetooth devices
Web USB	Access to USB devices
Web Serial	Access to serial port devices
File System Access	Direct file system access via File System Access API
Sensors	Access to device sensors (accelerometer, gyroscope)
Local Font	Enumeration of locally installed fonts
QUIC Protocol	QUIC/HTTP3 protocol usage
Google Cloud Print	Google Cloud Print service
JavaScript JIT	JavaScript just-in-time compilation and WebAssembly

Context Fields — Screenshots and Screen Recording

These events are documented under Data Protection Events (DLP) since they relate to data exfiltration controls.

Examples

DevTools Access — Blocked (Masking Active)

Field	Value
Type	DevTools access
Category	Access
Time	2026-07-06 10:15:22 UTC
User	john.smith@acme.com
URL	www.internal-crm.acme.com/customer/56789
Block reason	Masking
Action	Blocked
Policy rule	Block DevTools on masked pages

DevTools Access — Blocked (Admin Policy)

Field	Value
Type	DevTools access
Category	Access
Time	2026-07-06 11:00:00 UTC
User	support.agent@acme.com
URL	www.banking-portal.com/accounts
Block reason	Admin policy
Action	Blocked
Policy rule	Block DevTools on financial apps

Protected Browsing — WebRTC Blocked

Field	Value
Type	Protected browsing
Category	Browser security
Time	2026-07-06 09:30:45 UTC
User	jane.doe@acme.com
URL	www.video-chat.com/room/abc
ASR event type	WebRTC
Action	Blocked
Policy rule	Disable WebRTC on untrusted sites

Malware Protection Events

Tampering Events

Prisma Browser Docs

Browser Security Events

Prisma Browser Docs

Browser Security Events

Event Types

Context Fields — DevTools

DevTools Block Reasons

Context Fields — Protected Browsing (ASR)

ASR Event Types

Context Fields — Screenshots and Screen Recording

Examples

Activation & Onboarding

SASE