What Is Kasm Workspaces?
Kasm Workspaces is an open-source container streaming platform that delivers virtual browsers,
desktops, and applications through Docker containers. It enables organizations to deploy isolated, disposable
browsing environments that users access through their web browser – no client software required.
Originally developed for cybersecurity and threat intelligence, Kasm Workspaces has grown into a versatile platform
used for browser isolation, remote work, DevOps workflows, and secure web access. It’s a self-hosted alternative to
cloud browser services, giving you complete control over your infrastructure.
How Kasm Workspaces Functions
Architecture Overview
- Kasm Server: Management plane that orchestrates containers
- Docker Engine: Runs containerized browser and desktop instances
- KasmVNC: Custom VNC protocol optimized for web streaming
- Web Client: HTML5 viewer in user’s browser
- Database: PostgreSQL for configuration and session data
Container Lifecycle
- On-demand creation: Container spins up when user requests a session
- Isolation: Each container is completely independent
- Resource limits: CPU, memory, and network controls per session
- Auto-destruction: Containers destroyed after session ends (optional persistence)
- Image management: Pre-built and custom Docker images for different workloads
How Send.win Helps You Master Kasm Workspaces
Send.win makes Kasm Workspaces simple and secure with powerful browser isolation technology:
- Browser Isolation – Every tab runs in a sandboxed environment
- Cloud Sync – Access your sessions from any device
- Multi-Account Management – Manage unlimited accounts safely
- No Installation Required – Works instantly in your browser
- Affordable Pricing – Enterprise features without enterprise costs
Try Send.win Free – No Credit Card Required
Experience the power of browser isolation with our free demo:
- Instant Access – Start testing in seconds
- Full Features – Try all capabilities
- Secure – Bank-level encryption
- Cross-Platform – Works on desktop, mobile, tablet
- 14-Day Money-Back Guarantee
Ready to upgrade? View pricing plans starting at just $9/month.
Key Features
Browser Isolation
The primary security use case:
- Web browsing contained in disposable Docker containers
- Malware, exploits, and tracking cookies cannot escape the container
- Each session is a fresh, clean environment
- Supports Chromium, Firefox, Brave, and Tor browsers
- Ideal for high-risk browsing (OSINT, threat research, untrusted sites)
Virtual Desktop Infrastructure (VDI)
- Full Linux desktops in containers (Ubuntu, CentOS, Kali Linux)
- Development environments with pre-installed tools
- Windows desktops via Windows container support
- Persistent or ephemeral based on requirements
Application Streaming
- Stream individual applications without full desktop
- VS Code, Sublime Text, LibreOffice in containers
- Terminal sessions for server management
- Custom applications containerized for team access
KasmVNC Technology
Kasm’s custom VNC implementation optimized for web delivery:
- WebSocket-based streaming (works through firewalls)
- Hardware video encoding (H.264) for smooth experience
- Dynamic quality adjustment based on network conditions
- Clipboard sharing between local and remote
- File upload and download support
- Audio streaming capability
Deployment Options
Single Server
Everything on one machine:
- Minimum: 2 CPU cores, 4GB RAM, 50GB SSD
- Suitable for 5-10 concurrent users
- Simplest deployment model
- Good for evaluation and small teams
Multi-Server
Distributed architecture for scale:
- Web application server handles management
- Separate agent servers run containers
- Database server for configuration
- Load balancing across agents
- Scales to hundreds of concurrent users
Cloud Deployment
- AWS: EC2 instances with EBS storage, AMI available
- Azure: Virtual machines with managed disks
- Google Cloud: Compute Engine deployment
- DigitalOcean: Droplets with marketplace image
- Oracle Cloud: Free tier compatible deployment
Installation Guide
Prerequisites
- Linux server (Ubuntu 20.04/22.04 recommended)
- Docker engine installed
- Minimum 4GB RAM, 2 CPU cores
- Open ports: 443 (HTTPS)
- Domain name with SSL certificate (recommended)
Quick Install
Kasm provides a simple installation script:
- Download the latest release from kasm.io
- Extract and run the installation script
- Script installs Docker, PostgreSQL, and Kasm components
- Access the admin interface via HTTPS
- Default admin credentials provided during install
Post-Installation
- Change default admin password immediately
- Configure SSL certificate for production use
- Set up user authentication (LDAP, SAML, OIDC supported)
- Pull workspace images for browser and desktop options
- Configure zone and resource allocation settings
Available Workspace Images
Browsers
- Chrome: Full Chrome browser in container
- Firefox: Firefox with standard or hardened configuration
- Tor Browser: Pre-configured Tor for anonymous browsing
- Brave: Privacy-focused browser
Desktops
- Ubuntu: Full XFCE desktop environment
- CentOS: Enterprise Linux desktop
- Kali Linux: Penetration testing distribution
- Remnux: Malware analysis distribution
Development
- VS Code: Full IDE in browser
- Terminal: Shell access for DevOps
- Jupyter: Data science notebooks
Custom Images
- Build your own Kasm images using Dockerfiles
- Kasm provides base images to extend
- Pre-install specific tools and configurations
- Registry integration for image management
Use Cases
Enterprise Browser Isolation
The most common enterprise deployment:
- Risky URLs opened automatically in Kasm container
- Users browse safely without endangering endpoints
- URL filtering and category-based isolation rules
- Integration with existing security stack
Remote Work and BYOD
- Secure workspace accessible from any device
- No VPN required – works through standard HTTPS
- Data stays on server, not on personal devices
- Consistent environment regardless of endpoint
Cybersecurity and OSINT
- Disposable browsers for threat research
- Investigate malicious sites without risk
- Kali Linux containers for penetration testing
- Evidence collection with session recording
Education and Training
- Lab environments for students
- Pre-configured development setups
- Consistent environments for all participants
- No local installation requirements
DevOps Workflows
- Browser-based VS Code for development
- Testing in isolated environments
- CI/CD integration for automated testing
- Ephemeral development environments
Kasm vs. Cloud Browser Services
| Feature | Kasm Workspaces | Send.win (Cloud) |
|---|---|---|
| Hosting | Self-hosted | Cloud-managed |
| Setup Effort | Server + installation | Sign up and go |
| Fingerprint Management | Limited (custom configuration) | Automatic unique fingerprints |
| Multi-Account | Possible with configuration | Purpose-built feature |
| Proxy Integration | Manual setup per container | Built-in per profile |
| Data Control | Complete (your server) | Provider-managed |
| Cost Model | Infrastructure + license | Subscription per profile |
| Best For | IT teams, security, DevOps | Multi-account, marketing |
Choose Kasm if: You need self-hosted control, have IT resources, and prioritize data sovereignty.
Choose Send.win if: You need easy multi-account management, unique fingerprints, and team
collaboration without infrastructure management.
Security Architecture
Container Isolation
- Each session runs in an isolated Docker container
- Network isolation between containers
- Resource limits prevent container escape
- Read-only rootfs options for maximum security
Authentication
- Local accounts: Built-in user management
- LDAP/AD: Active Directory integration
- SAML: Okta, Azure AD, OneLogin
- OIDC: Google, GitHub, custom
- Two-factor: TOTP-based 2FA
Audit and Compliance
- Session recording for audit trails
- Login and activity logging
- Session watermarking
- Data loss prevention policies
Pricing
Community Edition
- Free and open-source
- 5 concurrent sessions
- Core features included
- Community support only
Enterprise Edition
- Unlimited sessions
- Advanced management features
- SAML/LDAP authentication
- Session recording and audit
- Professional support
- Contact for pricing
Performance Optimization
Server Sizing
- Per browser session: ~1 CPU core, 2GB RAM
- 10 concurrent users: 12+ cores, 24+ GB RAM
- SSD storage: Essential for container performance
- GPU (optional): Hardware video encoding improves streaming
Network Optimization
- Users need 5+ Mbps for smooth experience
- Deploy servers in regions close to users
- WebSocket connections require proper proxy configuration
Frequently Asked Questions
Is Kasm Workspaces really free?
The Community Edition is free for up to 5 concurrent sessions. Enterprise features (unlimited sessions, LDAP, session
recording) require a paid license.
Can I use Kasm for multi-account management?
Yes, but it requires manual configuration. You’d need to set up different proxies per container and manage
fingerprint settings yourself. Purpose-built tools like Send.win handle this automatically.
How does performance compare to local browsing?
Latency of 10-30ms is typical on a good network. Most browsing tasks feel responsive. Heavy JavaScript applications
and video streaming may show slight delays.
Can I run Windows desktops in Kasm?
Yes, Kasm supports Windows containers and RDP-based Windows sessions. Windows licensing is required separately.
Is Kasm suitable for production use?
Yes. Many organizations use Kasm in production for browser isolation and secure remote access. The multi-server
deployment option provides high availability and scalability.
Conclusion
Kasm Workspaces is a powerful platform for organizations that want self-hosted browser isolation,
virtual desktops, and application streaming. Its container-based architecture provides strong security isolation
while keeping resource usage efficient.
Key takeaways:
- Best for: IT teams needing browser isolation, DevOps environments, and security research
- Strengths: Self-hosted control, container security, customizable images
- Consider Send.win instead if: You need easy multi-account management with automatic
fingerprints and no infrastructure to manage
For organizations with the IT resources to deploy and manage it, Kasm Workspaces provides enterprise-grade browser
isolation and virtual workspace capabilities. For individuals and teams focused on multi-account privacy,
cloud-native solutions like Send.win offer a simpler path.