Aiseptor Secure Browser vs OpenLock

Aiseptor Secure Browser is a lockdown browser for secure exams on macOS and Windows, combining exam-window restrictions with operating-system signals and a default-deny network policy. Its controls are intended to block AI overlays, on-device language models, remote-access tools, and attempts to pivot to a second device. The native Mac and Windows builds use the same enforcement, and app switching is blocked. For BYOD deployment, the maker says setup takes about 30 seconds without admin rights; the agent runs in user space and removes itself when the session ends. The product is in beta, with early access for assessment platforms, certification programs, and enterprise hiring teams. It does not require a webcam or microphone and does not log keystrokes, capture clipboard contents, or record the screen. Exam traffic uses a per-session WireGuard tunnel; dashboard and API traffic is TLS-only, and stored data is encrypted with AES-256. Post-exam records default to 90 days, configurable from 7 to 365 days. Five free sessions are available, each up to three hours. Pricing for paid sessions is quoted based on volume, assessment type, and payment terms.

OpenLock is a free, open-source lockdown exam browser built natively for Linux. It aims to provide Safe Exam Browser-style controls, but the project states that it is not exam-ready because SEB key derivation is not byte-exact and the LMS handshake currently fails. It parses .seb files and sends Browser Exam Key and Config Key headers, although those keys do not yet match an LMS handshake. Kiosk mode uses fullscreen takeover through X11 or Wayland/Cage. A process guard monitors and terminates prohibited software such as screen recorders, virtual machines, and remote desktop tools. Input controls block shortcuts including Alt+Tab, Alt+F4, Ctrl+C, and PrintScreen, while browser hardening disables developer tools, downloads, right-click, console access, and drag-and-drop. Security measures include URL filtering, cgroups v2 isolation, VM/debugger/hypervisor detection, optional self-hash checks, and an off-the-record profile. Moodle, Canvas, and Blackboard adapters are listed but not validated live.