Multi-layer navigation based security certificate checking

A method comprising:

• while providing access to a cloud application, receiving data indicating a first universal resource locator (URL) in a search bar of a web browser associated with the cloud application has changed to a second URL;
• determining whether the second URL has a valid certificate;
• in response to determining the second URL is not associated with the application, re-directing the web browser away from the proxy server;
• receiving, from an administrator of the cloud application, data indicating a top level domain of the cloud application, code of the cloud application, and a policy defining access control to the cloud application;
• and
• controlling access to the cloud application based on the policy.

A non-transitory machine-readable medium including instructions that, when executed by a machine, cause the machine to perform operations comprising:

• while providing access to the cloud application, receiving data indicating a first universal resource locator (URL) in a search bar of a web browser associated with the cloud application has changed to a second URL;
• determining whether the second URL has a valid certificate;
• in response to determining the second URL is not associated with the application, re-directing the web browser away from a proxy server hosting the cloud application;
• receiving, from an administrator of the cloud application, data indicating a top level domain of the cloud application, code of the cloud application, and a policy defining access control to the cloud application;
• and
• controlling access to the cloud application based on the policy.