It would be way over the top and I've no experience of the Android side of things, but we use Meraki (free) to manage iPads at work. As I recall there is an option to have whitelisted sites only and you can restrict app installation too.
As I said I've no experience of Meraki on Android, but it should do what you want if it's like the iPad management.