On a single Thursday in late September, a private Dallas company put a $6.4 billion price tag on a piece of software nobody was talking about five years ago — a Chromium-based browser that sits between employees and the cloud apps they use. The round is the first hard print on what security vendors are starting to call the \"agentic control plane,\" and it lands directly on top of revenue lines that Zscaler, Palo Alto Networks, Cloudflare and CrowdStrike are each building, but none yet own.
The deal
The Round: $400M Priced, $6.4B Validated
Round size
$400M
Series F, announced Sept 24, 2026
Post-money valuation
$6.4B
Up 33% from $4.8B in March 2025
Lead investor
Evolution Equity Partners
Joined by Sequoia, Coatue, Insight, J.P. Morgan Growth, Prysm and others
Total outside capital
~$1.13B
Cumulative across Series B through F, 2022–2026
ARR growth
2x every year
Since commercial launch in 2022; $100M ARR disclosed for 2024
- Series B of $115M in November 2022 was led by Insight Partners; Series C of $100M at $1.5B in October 2023 was led by Prysm Capital.
- Series D of $175M at $3B in April 2024 was co-led by Coatue Management and Sequoia Capital — was led by Coatue Management.
- Series E of $250M at $4.8B in March 2025 was led by Coatue Management; total outside capital crossed $730M.
- Series F of $400M at $6.4B on September 24, 2026 was led by Evolution Equity Partners, with Prysm Capital, Sequoia Capital, Coatue Management, Cyberstarts, Insight Partners, J.P. Morgan Growth Equity Partners, Alta Park Capital, Georgian, G Squared and Squarepoint participating; cybersecurity entrepreneur Dmitri Alperovitch also invested personally.
- Founder and CEO Mike Fey is a former president of Symantec; CTO Dan Amiga also co-founded the company in 2020.
Catalyst
What Triggered It: AI Agents Made the Browser the New Perimeter
The Island raise landed less than twelve months after OpenAI shipped ChatGPT Atlas — a Chromium-based browser with a ChatGPT-native agent that can click, type and complete tasks unsupervised — and three weeks after Anthropic put Claude's Computer Use capability into general availability on August 20, 2026. Once AI agents can drive a browser on their own, every legacy perimeter — identity, network, endpoint, DLP — loses the human-in-the-loop it was built around.
- OpenAI shipped ChatGPT Atlas on October 21, 2025 as a macOS-only browser with an agent mode; the company has signaled it will sunset the standalone product in mid-2026 as the agent features migrate back into ChatGPT itself.
- Anthropic announced Claude Computer Use on October 22, 2024; the capability went GA on August 20, 2026 with desktop control, in-browser control and a batch-actions toolset bundled into one release.
- Google launched Gemini-in-Chrome to its consumer base in 2025; agentic extensions like Samsung Browser with Perplexity launched on Windows in March 2026.
- Cisco's 2026 security survey found 83% of enterprises plan to deploy AI agents, yet only 31% say they are fully equipped to control and secure them — the gap Island is selling into.
Agentic-AI security TAM is small today and steeply sloped
MarketsandMarkets sizes the dedicated Agentic AI Security market at $1.65B in 2026, expanding to $13.52B by 2032 — a 42% CAGR that has barely started compounding.
Unit: $B
2026
1.7
2028E
3.5
2030E
7.8
2032E
13.5
Competitive response
The Public Response: Four Vendors, Four Different Bets
Every public security vendor with a browser-adjacent story has shipped or rebranded an agentic-AI product in 2026 — but each has made a structurally different bet about where the control point lives. That divergence is the real story the Island round exposes.
| Vendor | Agentic-AI launch | Architectural bet | Scale anchor |
|---|---|---|---|
| Zscaler (ZS) | AI Broker, ZAgent Framework, Endpoint AI Security at Zenith Live 2026 (Jun 9, 2026) | Network/proxy controls the agent's traffic; SASE-adjacent | $4.4B ARR, $898M Q4 FY26 revenue, +25% YoY |
| Palo Alto Networks (PANW) | Prisma Browser, billed as the 'most secure browser for agentic AI' (Mar 23, 2026) | Replaces the browser itself, sold as part of Prisma SASE | $11.5B FY2026 revenue, +24% YoY; NGS ARR $9.1B |
| Cloudflare (NET) | Agents Week Apr & Aug 2026: 20+ launches incl. AI Access Graph and Secure Sandboxes (GA Aug 2026) | Edge-network runtime governs the agent | $696M Q2 2026 revenue, +36% YoY; 4,698 large customers |
| CrowdStrike (CRWD) | Charlotte AI AgentWorks ecosystem at RSA 2026 (Mar 25, 2026); named Frost & Sullivan's 2026 Zero Trust Browser Security leader | Endpoint-resident agent, SOC-side control plane | $5.40B TTM revenue, +25.8% YoY |
| Island (private) | Series F at $6.4B (Sep 24, 2026) to scale the 'Enterprise Agentic Control Plane' | Chromium browser IS the control plane for both humans and agents | ~$350M implied ARR; 450+ customers; majority of Fortune 50 |
Valuation
The Math: Where Island Sits Inside the Public Comp Set
Island does not disclose ARR with its funding announcements, but the company has stated it has doubled ARR every year since launch. With $100M of ARR disclosed for 2024, the implied run-rate lands near $200M in 2025 and ~$400M exiting 2026. At $6.4B, that puts Island's enterprise-value-to-ARR ratio inside the band the public comp set already trades at — not above it.
Island's implied EV/ARR lands between Zscaler and Palo Alto
Estimated EV/ARR multiples, with Island calculated at ~$400M ARR. Public multiples are EV/Sales on TTM revenue from each company's most recent quarterly filing.
Unit: x
Zscaler
10.6
Island (implied)
16
Palo Alto Networks
27.7
CrowdStrike
48.2
Cloudflare
51.5
The same multiple math tells the other half of the story. If Zscaler cannot attach its AI Broker and Endpoint AI Security to enough incremental ARR to defend a 10.6x EV/Sales multiple in 2027, the public market will start using Island's pricing as the new anchor — and Zscaler's $34.7B market cap looks thin against a private competitor valued at $6.4B with growing revenue. The reverse is also true: a successful Zscaler win of the agentic category would compress Island's IPO multiple by 30–40%.
Supply chain
Upstream and Downstream: Where Island Lives in the Stack
- Upstream — cloud distribution: Island Enterprise Browser is sold through the AWS Marketplace and the Microsoft Azure Marketplace, with management, telemetry and policy events running on both clouds; logs can also be exported into Google Chronicle for SIEM.
- Upstream — engineering substrate: The browser itself is Chromium-based, the same open-source project underpinning Google Chrome, Microsoft Edge and the now-sunset ChatGPT Atlas — making Island a fork of the same foundation Palo Alto Networks's Prisma Browser also depends on.
- Downstream — installed base: Island says a majority of Fortune 50 companies are already customers, including several of the largest U.S. banks and dozens of Fortune 500 healthcare, manufacturing and retail firms; named customers include Fiverr, Swiss Life, The Bank of Marion and ED&F Man.
- Downstream — distribution partners: Island has a formal Cloud Service Provider partner program with both Microsoft and AWS, and SIEM/SOAR integrations with Google Chronicle — meaning every enterprise Microsoft and AWS already sells into is a potential sales channel.
- Recognition signal: Island was named a 2026 Customers' Choice in Gartner Peer Insights for Secure Enterprise Browsers, with 5.0/5 average rating and 98% of reviewers saying they would recommend it as of May 2026.
Horizons
Short and Long Term: Defend, Acquire, or Be Eaten
Short-term (days–quarters): the first reaction from public security vendors will be louder agentic-AI marketing, not product. Zscaler has the most to defend because its core ZIA/ZPA architecture is the network-proxy control point that an agent-bypass browser can route around; Palo Alto Networks has the most leverage because Prisma Browser is already shipping; CrowdStrike can extend its Charlotte AI AgentWorks onto the endpoint if the agent runs locally. The catalysts to watch are the Zenith Live 2027 calendar (typically June) and any partner program Microsoft announces around Edge for Business agentic controls.
Long-term (1–3 years): Island's $400M is large enough to fund either a 2027–2028 IPO at a $15–20B valuation OR a strategic acquisition. The most plausible strategic acquirers are Palo Alto Networks, Microsoft, Google, CrowdStrike and Okta — each of which already touches the enterprise browser layer through adjacent products (Prisma, Edge, Chrome, Falcon, Workforce Identity). A take-out multiple of 2.5–3.0x the $6.4B mark would price the asset at $16–19B, an outcome that would force every public vendor to disclose agentic-AI ARR separately starting in FY2027.
Investable takeaway: the listed names that touch this category
- Faces the biggest agentic threat because its $4.4B ARR runs through a network proxy that an in-browser agent can route around; Zscaler shipped AI Broker, ZAgent and Endpoint AI Security at Zenith Live 2026 (Jun 9, 2026) but has not yet disclosed agentic-AI ARR as a separate line.
- Short-term catalyst: FY2027 Q1 earnings (typically late Oct) — first report after Island's $400M print and the test of whether management finally breaks out agentic security bookings.
- Long-term: a $6.4B private competitor priced at ~16x ARR against Zscaler's 10.6x EV/Sales is a soft valuation ceiling — multiple compresses if Island's 2027 IPO prices above the public set.
- Has the most direct product overlap with Island — Prisma Browser launched Mar 23, 2026 and is bundled into Prisma SASE, which delivered $8.35B in FY2026 revenue (+17% YoY); Palo Alto Networks's $11.5B FY2026 revenue grew 24% YoY with NGS ARR at $9.1B.
- Short-term: integration of the August 2026 'Console' acquisition — added agentic SOC capabilities that complement Prisma Browser.
- Long-term: Palo Alto Networks is the most plausible strategic acquirer of Island at a $16–19B take-out, which would close the architectural gap and justify its 27.7x EV/Sales multiple.
- Watch the Agents Week follow-ons — Cloudflare shipped 20+ agentic features across its April and August 2026 Agents Weeks, but the agentic revenue contribution is not yet disclosed; Q2 2026 revenue of $696.1M was +36% YoY with 4,698 large customers.
- Short-term catalyst: Q3 2026 earnings (early Nov) — first quarter where Secure Sandboxes (GA Aug 2026) will be a reportable line item.
- Long-term: Cloudflare's network-edge runtime is a structurally different bet from Island's browser fork, but both compete for the same 'agentic control plane' budget line — at 51.5x EV/Sales, the multiple is unforgiving if the agentic-AI contribution disappoints.
- Endpoint-resident bet on agentic security — Charlotte AI AgentWorks shipped Mar 25, 2026 at RSA 2026 and Frost & Sullivan named CrowdStrike the 2026 Global Enabling Technology Leader in Zero Trust Browser Security.
- Short-term catalyst: FY2027 Q2 earnings (early Dec) — first full quarter where AgentWorks ecosystem partners are reportable.
- Long-term: TTM revenue of $5.40B (+25.8% YoY) gives CrowdStrike the scale to bundle an agent browser inside Falcon, but Island's standalone browser is hard to displace once installed at a Fortune 500 customer.
- Both upstream partner and downstream competitor — Azure Marketplace hosts Island Enterprise Browser, while Edge for Business is the default browser Microsoft ships into the same Fortune 500 base; Microsoft's security revenue is bundled into the Intelligent Cloud segment and not separately disclosed.
- Short-term catalyst: Microsoft Ignite (typically mid-November) — historically where agentic security features for Edge and Copilot get roadmapped.
- Long-term: a Microsoft acquisition of Island at $16–19B would be small relative to its ~$3T market cap and would convert Island's Azure Marketplace channel into a default-bundled offering across the Microsoft 365 install base.
- Identity layer adjacency — Okta's Workforce Identity Cloud is the natural authentication control point above whatever browser (Island, Prisma, Edge) the agent runs in; agentic identity governance is the next product wedge.
- Short-term catalyst: Q3 FY2027 earnings (late Nov) — watch for disclosure of 'AI agent identities' as a separate metric.
- Long-term: Okta is too small ($20B-class market cap) to acquire Island outright, but could be a partner-of-record and benefit if Island displaces Zscaler-led ZIA deployments in identity-heavy regulated verticals.
