Security
How Step inherits Chromium's security
Step is built on Chromium. Sandboxing, site isolation, and update timing match upstream.
1 min read
Chromium has the most battle-tested security architecture in browsers. Step inherits that directly: same sandbox, same site isolation, same patch cadence.
Sandboxing
Every page renders in a process with extremely limited OS access. Even if a page exploits the renderer, it can't read your files.
Site isolation
Each site runs in its own process. A malicious site cannot read another site's memory.
Patch cadence
Step picks up Chromium security patches on the next release. The cadence is currently every two weeks.