Bromium in one line: "Bromium Endpoint Protection is built on the Bromium Microvisor, a Xen-based, security-focused hypervisor designed to automatically isolate each vulnerable user task, such as visiting a website, opening a document, or accessing a USB drive."

That's not hard to do, but it's very restrictive. You can open a USB drive, but can't copy files from it. So, having achieved isolation, then what?