Mozilla on October 13, 2026 started selling Firefox Enterprise, a paid version of its browser that adds a management console organizations host themselves, built-in data loss prevention, controls over AI tools and bundled support, with initial sales aimed at France, Germany, Austria and Switzerland.

In Short

Mozilla now sells a business version of Firefox that companies can manage from their own servers instead of from Mozilla's. It matters for banks, hospitals and public bodies in Europe that have to prove where their data goes, and for anyone whose ads, tools or AI products run inside a company browser. You can expect IT departments in four countries to start deciding, site by site, which uploads, extensions and AI tools their staff are allowed to use in Firefox.

What Mozilla put on sale

The product was disclosed on October 13, 2026 in a LinkedIn post by Hermina Condei, who holds the titles Vice President, Firefox Enterprise and Managing Director, Mozilla France. "Today we're launching Firefox Enterprise," Condei wrote. "The Firefox people know, with additional security controls, plus enterprise level support and a management console that organizations can run themselves (on-prem or their own cloud)."

That sentence carries the commercial logic. The browser itself is not new. What Mozilla is charging for sits around it: a console, a set of policy controls and a support contract. "Firefox stays free and open source and it runs on Gecko, our own engine and the only major alternative to Chromium across Windows, macOS and Linux," Condei wrote. The claim about being the only major alternative is Mozilla's own framing. Apple's WebKit engine powers Safari, but Safari does not ship on Windows or Linux, which is the qualification the sentence relies on.

Mozilla has served companies before. It has distributed an Extended Support Release of Firefox for organizations that want slower update cycles since 2012. Firefox Enterprise is different in kind, because it adds a paid management layer and a sales team rather than just a release channel.

No pricing appears in either source. The product page offers "Request a Demo" and "Contact Sales" buttons and nothing more about cost, seat counts or contract length.

Where it will be sold first

"Our initial sales focus is France, Germany, Austria and Switzerland, with most of our engineering team in Berlin and support from Europe, in local languages," Condei wrote.

The geography is narrow and deliberate. Those four countries overlap almost exactly with the markets where Firefox 154 in August made Startpage, a privacy-focused search engine, a built-in desktop search option in Germany, France, Austria, Switzerland and the Netherlands. Mozilla appears to be concentrating its European bets where privacy positioning has historically sold, and where German-speaking and French public sector buyers have been most vocal about dependence on American cloud providers.

That dependence has been documented in front of legislators. In June 2025, Microsoft France's legal director told a French Senate inquiry under oath that he could not guarantee French data held in EU datacenters would never reach US authorities. The answer was blunt: "No, I cannot guarantee it." Deutsche Telekom's IT arm responded to the same buyer anxiety in September 2025 when T-Systems created a Chief Sovereignty Officer role to reduce reliance on US tech companies. Amazon went further in January 2026, when AWS made its European Sovereign Cloud generally available with a first region in Brandenburg.

Mozilla's pitch borrows the same vocabulary. Its product page groups the offer under three words: sovereignty, control and resilience.

The console runs on the customer's infrastructure

According to Mozilla, the management console for Firefox Enterprise can be deployed "on-premises, within your own infrastructure." The page says customers can "define and audit where your data, policies and management live." Condei's post adds that the console can also run in an organization's "own cloud."

The distinction matters because most enterprise browser management currently runs through the vendor. Google administers Chrome Enterprise policies from its own cloud console, and Microsoft does the same for Edge through its own services. Running the policy server in house means policy changes, audit logs and device inventories do not have to pass through a third party's systems, which is precisely the kind of guarantee procurement teams in regulated sectors are asked to document. Whether many organizations want the operational burden of hosting yet another server is a separate question that neither source addresses.

Mozilla's page describes the product as "on-prem browser governance for regulated and security-sensitive organizations." It lists eight components for the enterprise tier:

  • Centralized policy control, described as managing "browser behavior across endpoints"
  • External connection controls, to "govern browser callouts and telemetry"
  • Native DLP, to "warn or block sensitive data actions by domain"
  • AI controls, to "allow, restrict or disable AI tools"
  • SIEM integration, to "export browser events and audit activity"
  • Lockdown Mode, to "harden high-risk or restricted browsing"
  • Extension governance, to "allow or block add-ons organization-wide"
  • Professional Support, described as "private triage and defined response times"

Telemetry that stays home

The telemetry language is the most specific technical commitment in the launch. "Browser telemetry stays on the customer's own infrastructure and isn't sent to Mozilla," Condei wrote. "Organizations can turn it off, and the browser's external connections are documented and configurable."

Browsers make a surprising number of outbound calls: update checks, safe browsing lookups, crash reports, usage pings, remote settings and, in Firefox's case, sponsored content on the new tab page. For an IT security team, each of those is a connection to justify. Mozilla is promising a documented list and the ability to switch connections off, which turns the browser from a black box into something an auditor can inspect. The browser's code being open source supports that claim, and the product page makes the point directly: "The browser is open source. You can see how it handles your data."

Data loss prevention by domain

According to Condei, the built-in DLP "lets IT teams control actions such as uploads and copy/paste by domain." The product page frames it as the ability to "prevent sensitive data from leaving the browser."

Domain-level control over uploads and pasting is where browser security and AI governance meet. An organization could, in principle, allow employees to paste text into an approved internal assistant while warning or blocking the same action on a public chatbot. The separate AI controls on the feature list go further, letting administrators "allow, restrict or disable AI tools." Neither source explains whether those controls cover only Firefox's own AI features, such as the chatbot sidebar, or also third-party AI websites. That ambiguity is material for any vendor whose product is an AI tool used in a browser tab.

Remote access without a VPN

The second capability Condei highlighted is remote access. "Employees can also securely access internal web applications from outside their corporate network without a VPN," she wrote. Mozilla's page says it gives "employees, contractors and BYOD users secure, identity-based access to internal applications - without the infrastructure of traditional remote access."

This puts Firefox Enterprise into a category that security vendors have been building for years, where access to an internal application depends on who the user is rather than which network they are on. Mozilla did not explain how the access is brokered, which identity providers are supported, or whether the feature depends on the self-hosted console.

Compliance claims, as Mozilla states them

Mozilla's product page says Firefox Enterprise is "built to help organizations meet demanding regulatory requirements." It then lists five frameworks: DORA, the EU's Digital Operational Resilience Act for the financial sector; GDPR; NIS2, the EU's revised cybersecurity directive; ISO27001, the information security management standard; and SOC2, the US auditing framework for service providers.

The wording is careful and worth reading closely. "Built to help organizations meet" requirements is not the same as a statement that the product or Mozilla holds ISO27001 certification or a SOC2 report. The page links to a Trust Center, but the captured page does not reproduce its contents, so the status of any audit or certification cannot be confirmed from the source material. These are Mozilla's characterizations, not independent findings.

On resilience, Mozilla's argument is structural. "Built on Mozilla's independent engine, Firefox Enterprise adds browser diversity that reduces shared failure risk and vendor lock-in - while integrating seamlessly with your current security stack," the page states. The reasoning is that if nearly every browser in an organization runs on Chromium, a single engine vulnerability affects all of them at once. DORA asks financial firms to manage concentration risk among technology providers, and Mozilla is positioning Gecko as a hedge against it.

Support moves to the centre

Alongside the enterprise tier, Mozilla is selling support on its own. "Your business now has backup. Introducing Firefox Professional Support," the product page reads. According to Mozilla, the service gives IT staff "a direct path to the people behind the product." The page says standard support "is included with Firefox Enterprise, and is available as a paid upgrade if you're using Firefox as your company's browser."

That creates two commercial tiers. The free Firefox, described on the page as "the browser everyone loves," can be paired with paid support. Firefox Enterprise bundles support with the console and controls.

A third product is listed as coming soon. "Thunderbird Enterprise" will offer, according to the page, "centralized management of Thunderbird email, calendar and contacts, right from the Firefox Enterprise console." Condei's post thanked teams across "Mozilla and MZLA," the Mozilla subsidiary behind Thunderbird, and Ryan Sipes appears in her list of acknowledgments. Natalie Ivanova, who lists her role as Corporate Strategy at Thunderbird, commented under the post: "Very exciting to see this come to life Hermina Condei! Congratulations to you and the entire team on the launch." Condei replied: "Thank you, Natalie! Looking forward to the next one together."

Who is behind it

Condei's post names thirteen people on the team that built the product, including Romain Testard, Benjamin Beurdouche, Gian-Carlo Pascutto and Michael Kaply. A second list of thanks includes Anthony Enzor-DeMeo, who became Mozilla's chief executive in December 2025 with a plan to reduce dependence on search deals, and Eric W. Muhlheim, Mozilla's chief financial officer.

Kaply, who lists his role as software engineer at Mozilla, wrote under the post: "My career long Mozilla dreams finally coming true!" Laura Chambers, who preceded Enzor-DeMeo as interim CEO and returned to Mozilla's board, also commented: "Hermina - huge congratulations!! You and the team have worked so hard and creatively on this project, it's incredible to see it come to life."

At the time of capture, the post had 90 reactions and 20 comments.

Why a revenue line matters for Mozilla

The financial backdrop explains why Mozilla would build a product that requires a sales force. In May 2025, Muhlheim testified in the US search antitrust case that Firefox depends on search revenue and warned that remedies disrupting those deals could damage browser competition and Gecko itself. Most of that money comes from Google, which pays to be Firefox's default search engine.

Mozilla has been trying to build other income streams. In October 2024, Mozilla said it would develop privacy-preserving advertising technology, following its acquisition of the ad measurement company Anonym. In November 2025, Mozilla Ads made Equativ its exclusive full-stack programmatic partner for native inventory on the Firefox homepage and MDN, properties Mozilla said reach about 210 million users.

Enterprise licensing is a third leg, and it differs from the other two in an important way: its revenue comes from organizations paying for Firefox rather than from advertisers or search partners paying for Firefox users' attention. That is a cleaner fit with the privacy positioning, though it is also the slowest to scale. Enterprise browser deals involve long procurement cycles, and Chrome and Edge are already installed on most corporate machines.

Market share is the other constraint. A July 2026 academic paper on the Digital Markets Act estimated that choice screens produced about 6 million extra Firefox users in the EU while Google kept about 90% of European search. Regulation nudged usage, but not dramatically. The Digital Markets Act created openings for alternative browsers on consumer devices; corporate fleets are a different market with its own gatekeepers in IT departments.

Why this matters for marketers

Enterprise browser controls rarely appear in marketing coverage, yet they decide what a large share of business audiences can see and do. A browser where IT teams can document and switch off external connections, block extensions organization-wide and restrict AI tools by domain is a browser where measurement scripts, sales intelligence extensions and AI products face a new approval step.

Extension governance is a direct example. Many B2B marketing and sales tools are delivered as browser extensions, from prospecting add-ons to grammar checkers to ad verification plugins. The scrutiny around how extensions and websites inspect browsers is already high: in April 2026, a class action alleged that LinkedIn secretly scanned Chrome users for more than 6,000 extensions, claims Microsoft disputes. An organization-wide allow list makes the IT department, not the individual user, the buyer for such tools.

AI controls carry similar weight. AI assistants are becoming advertising surfaces, and browsers themselves have become agent platforms. OpenAI's ChatGPT Atlas, a Chromium-based browser, drew security criticism after its October 2025 launch over prompt injection risks in agentic browsing, and in July 2026 OpenAI shut down the standalone Atlas browser and folded it into a ChatGPT Work agent. Enterprise browsers that let administrators disable or restrict AI tools sit between those products and employees.

Firefox's privacy defaults already shape measurement. In November 2025, Firefox 145 roughly halved the share of users identifiable through fingerprinting in Private Browsing and Strict mode. An enterprise version where the organization, rather than Mozilla, decides which telemetry and connections are permitted adds a layer of control on top of those defaults. How many companies in France, Germany, Austria and Switzerland switch is unknown, and Mozilla published no customer names or targets.

The sovereignty framing also places Mozilla, an American nonprofit-owned company headquartered in California, in an awkward but useful position. It cannot claim to be European, but it can claim that customers host the control plane themselves, with engineering in Berlin and support delivered in local languages. That is a narrower promise than the one offered by hyperscaler sovereign cloud products, and also a simpler one to verify.

Timeline

Summary

Who: Mozilla, through Hermina Condei, Vice President, Firefox Enterprise and Managing Director, Mozilla France, with an engineering team mostly based in Berlin. The product is aimed at regulated and security-sensitive organizations.

What: Firefox Enterprise, a paid version of Firefox with a self-hosted management console, centralized policy control, external connection and telemetry controls, domain-based data loss prevention, AI tool controls, SIEM export, Lockdown Mode, extension governance and bundled professional support. Firefox Professional Support is also sold separately for organizations using the free browser, and Thunderbird Enterprise is listed as coming soon.

When: October 13, 2026.

Where: Initial sales focus on France, Germany, Austria and Switzerland, with support delivered from Europe in local languages. The console runs on-premises or in the customer's own cloud.

Why: According to Mozilla, the browser is where work, data, identity and AI converge, making it a governance layer many enterprise stacks do not fully cover. The launch also gives Mozilla a revenue source that does not depend on search deals or advertising, and offers European buyers a browser engine that is not Chromium.