At no other point in the evolution of computing has user experience (as well as attack surface) been so defined by a single piece of software as it is today. Still, no authoritative picture of the true defensive capabilities of the three major web browsers has existed. This session will present the results of our research into six key areas of browser security, and release new, actionable metrics for browser security with a focus on real-world exploitability.