Firefox Enterprise is a browser for organizations with strict security, governance and compliance requirements. It's built upon Firefox, powered by the Gecko engine, with a management console that runs on your own infrastructure, so you decide where your data, policies and management live.
This repository contains the source code for the Firefox Enterprise browser.
- More control: the Admin Console runs on your infrastructure.
- More transparency: the browser is open source, so you can see how it handles data.
- More choice: it works with your existing identity provider, SIEM and MDM, with no ecosystem lock-in.
- More resilience: Gecko is the only major browser engine developed outside Google and Apple, which adds browser diversity and reduces shared failure risk.
- Company sign-in with your organization's SSO (any OpenID Connect provider)
- Built-in data loss prevention (DLP) agent to warn about or block sensitive data actions by domain
- Device posture checks to report the security posture of each device to your Admin Console
- Lockdown Mode for high-risk or restricted browsing
- Watermarking across sensitive pages, according to admin configuration
- Identity-based access to internal apps for employees, contractors and BYOD users
Firefox Enterprise is built to help organizations meet regulatory requirements such as DORA, GDPR, NIS2, ISO 27001 and SOC 2. See the Trust Center for details.
You should work from the enterprise-main branch, which is the repository default.
The main branch tracks upstream Firefox and will build without Enterprise features.
To get started, follow the Firefox build setup instructions for your platform, and install the dependencies:
./mach bootstrapAdd the following line to your .mozconfig:
. "$topsrcdir/build/mozconfig.common.enterprise"Now you can run a build:
./mach buildFirefox Enterprise depends on an Admin Console for its policies and settings. Point the build at your console:
MOZ_ENTERPRISE_CONSOLE_URL=https://console.example.com ./mach runIf you leave MOZ_ENTERPRISE_CONSOLE_URL unset, the first run asks for the address and remembers it.