# BBTI Browser > A secure browser with built-in WAF and RASP protection. Canonical page: [https://chrome-stats.com/d/com.bbti.bbtibrowser](https://chrome-stats.com/d/com.bbti.bbtibrowser) ## Overview - **ID:** `com.bbti.bbtibrowser` - **Platform:** Android - **Type:** Android app - **Status:** Available - **Publisher:** Blake Burns - **Category:** TOOLS - **Downloads:** 42 - **Version:** 1.3 - **Last updated:** 2026-06-04 - **First published:** 2026-05-26 - **Publisher country:** CA - **Size:** 41 MB - **Data as of:** 2026-09-19 - **Store listing:** [Google Play Store](https://play.google.com/store/apps/details?id=com.bbti.bbtibrowser) - **Website:** [https://blakeburnstechnologiesinc.com](https://blakeburnstechnologiesinc.com/) - **Privacy policy:** [https://blakeburnstechnologiesinc.com/privacy-policy.html](https://blakeburnstechnologiesinc.com/privacy-policy.html) ## Description BBTI Browser is a privacy-first browser built by Blake Burns Technologies Inc. Designed for users who demand visibility and control over their web security, it ships a full-featured browsing experience alongside an integrated Web Application Firewall (WAF) and Runtime Application Self-Protection (RASP) engine — capabilities typically reserved for enterprise server infrastructure, now running client-side on your desktop.

Security at Its Core
Every page load and outbound request is scanned in real time against a comprehensive ruleset derived from OWASP's Core Rule Set (CRS). BBTI Browser detects and optionally blocks the most dangerous web attack categories before they reach your system:

XSS (Cross-Site Scripting) — inline event handlers, javascript: URIs, base64 payloads, DOM manipulation attempts
SQL Injection — UNION SELECT attacks, tautology injections, stacked queries, time-based blind SQLi
SSRF (Server-Side Request Forgery) — private IPv4 ranges, loopback addresses, AWS and GCP metadata endpoints
LFI / RFI — path traversal sequences, PHP stream wrappers, remote file inclusion via URL parameters
RCE (Remote Code Execution) — shell command injection, PowerShell obfuscation, command substitution
SSTI (Server-Side Template Injection) — Jinja2, Twig, Java EL expression probes
Malicious Downloads — executable and script file type blocking before download begins
Session Fixation — detection of session IDs exposed in URLs

The RASP engine injects a lightweight monitoring script into every page before content loads, intercepting fetch, XMLHttpRequest, and WebSocket calls to catch attack payloads in outbound request bodies — providing a second layer of defence beyond URL inspection alone.

Browsing Features
BBTI Browser covers everything you expect from a modern browser. Multi-tab support lets you open, switch, and close tabs freely while each tab preserves its full live session — no reloads when switching. The address bar tracks URL changes accurately across both traditional page loads and single-page applications that use history.pushState, replaceState, and hash-based routing, so the address bar is always in sync.

Design
The interface uses a dark, minimal aesthetic built for long browsing sessions. The layout is fully responsive across window sizes — from compact laptop windows to wide ultrawide displays — and re-renders fluidly as the window is resized. A persistent WAF badge in the address bar gives you constant confirmation that protection is active.
BBTI Browser is built and maintained by Blake Burns Technologies Inc., a federally incorporated Canadian technology company. ## Rankings - #2,329,758 — Overall ## Permissions and access ### Permissions - `android.permission.INTERNET` - `android.permission.SYSTEM_ALERT_WINDOW` - `android.permission.VIBRATE` - `com.android.vending.CHECK_LICENSE` - `com.bbti.bbtibrowser.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION` ## Similar extensions and apps - [Iron Browser - by SRWare](https://chrome-stats.com/d/org.iron.srware) — 333,762 users, 3.91 / 5 - [Private Security Browser](https://chrome-stats.com/d/com.browser.privacy.stool.bookmark.security) — 279,647 users, 4.35 / 5 - [Secure Browser - Safe & Fast](https://chrome-stats.com/d/com.fastsecure.browser) — 21 users - [Web Browser: Internet Explorer](https://chrome-stats.com/d/com.mywebapp.rohtak) — 48,436 users, 3.47 / 5 - [Private Secure Browser](https://chrome-stats.com/d/online.tidox.secure.browser.free) — 42 users - [Private Secure Browser](https://chrome-stats.com/d/online.tidox.secure.browser.premium) — 2 users - [Block Browser](https://chrome-stats.com/d/com.blockbrowser) — 316 users - [Personal Secured Browser](https://chrome-stats.com/d/com.private.browser.secured.app) — 39,203 users, 4.29 / 5 - [WootzApp](https://chrome-stats.com/d/com.wootzapp.web) — 5,604 users - [Web Browser AI: Private, Fast](https://chrome-stats.com/d/browser.private.fast.safe.webbrowser) — 155,356 users, 4.86 / 5 - [Smart Browser - Shorts & Drama](https://chrome-stats.com/d/com.martrix.shorts.smartbrowser) — 16,273,385 users, 4.20 / 5 - [UltraBrowser: Privacy Browser](https://chrome-stats.com/d/com.ultra.browser) — 322 users --- Source: [Chrome-Stats](https://chrome-stats.com/d/com.bbti.bbtibrowser)