I recommend to use a site-specific browser (SSB) for internal stuff. This way you get a fixed platform which can be updated as needed. For the internet, you can

I recommend to use a site-specific browser (SSB) for internal stuff. This way you get a fixed platform which can be updated as needed. For the internet, you can continue to use an auto-updating browser. Take a look at XULRunner and the Chromium Embedded Framework (CEF). If you want to see CEF in action, try Brackets: http://brackets.io/ http://brackets.io/