Definition
An agentic browser is a web browser, or a browser built into an AI app, in which an AI agent can navigate pages, click, type and fill in forms to complete multi-step tasks for the user, rather than only summarizing the page that is open. The category grew out of 2025 experiments into features shipped by most large AI companies in 2026, and the lineup has already changed more than once.
The main products as of October 2026:
- Perplexity Comet, a Chromium-based browser that has been free to download since October 2025.
- Gemini in Chrome with auto browse, rolling out to Google AI Pro and Ultra subscribers in the US on desktop and, since August 18, 2026, on Android, and also available in India.
- Claude in Chrome, Anthropic's extension, which is generally available on all paid Claude plans and can now act without approving every step, with a safety classifier checking each action first.
- Browse with Copilot in Microsoft Edge. Microsoft retired Copilot Mode on May 13, 2026 and turned its Copilot Actions preview into Browse with Copilot for Microsoft 365 Premium subscribers in the US.
- The built-in browser in OpenAI's ChatGPT desktop app. OpenAI launched ChatGPT Atlas as a standalone browser in October 2025, announced on July 9, 2026 that it would fold Atlas into the new desktop app, and retired Atlas on August 9, 2026.
How agentic browsers work
Most run the agent inside the user's own browser session, with the user's cookies and logins, and decide what to do from screenshots or the page structure. Some can also hand a task to a remote browser: Google's help center says Gemini can connect to local Chrome or use a separate remote browser in the cloud. The difference shows up in server logs. Local agents look like ordinary Chrome traffic from a residential IP, while cloud agents come from data centers and may identify themselves, as Google-Agent and ChatGPT agent do (see AI agent traffic).
Every vendor adds confirmation steps for purchases and other sensitive actions, and each publishes defenses against prompt injection, the main security risk when an agent reads untrusted pages. Anthropic's Claude in Chrome announcement reports its attack success rates by model.
The legal position is still being settled. In Amazon v. Perplexity, a district court barred Comet's assistant from Amazon in March 2026. On August 4, 2026 the Ninth Circuit vacated that injunction, holding that when the agent runs in the user's browser, it is the user, not Perplexity, who accesses Amazon's computers under the Computer Fraud and Abuse Act. Contract and other claims remain open.
Why it matters for AI search and GEO
Agentic browsers move the point of decision. The agent may compare several sites, choose one and finish the task without the user reading your page. HUMAN Security's July 2026 benchmark attributed about 47% of the agentic traffic it observed to Comet and 24% to Claude in Chrome, with media and ecommerce sites receiving most of it. That puts weight on pages an agent can parse and act on: prices, availability and specs in HTML text, forms built from standard controls, and bot rules that do not block legitimate agents. Structured interfaces such as WebMCP make actions more reliable in browsers that support them.
Measurement is harder than for human visits. Many agent sessions carry no referrer and look human, so combine server logs, verified bot signals and conversion data rather than relying on analytics tags. These practices fall under agent experience optimization and overlap with agentic search, where the agent also does the research.
Examples of Agentic Browser
- A shopper asks Comet to reorder printer ink at the lowest total price. The agent opens three retailer sites in the user's signed-in session, compares prices including shipping, and stops at the checkout page for confirmation.
- An airline's analytics team sees sessions that complete the booking form in under two seconds from residential IPs with a normal Chrome user agent, and traces them to users running agentic browser extensions.
- A software company tests its pricing page with Claude in Chrome and finds the agent cannot read prices that are rendered inside an image carousel, so it moves the plan prices into plain HTML text.
- Before OpenAI retired Atlas on August 9, 2026, an enterprise IT team had staff export bookmarks, moved them to the ChatGPT desktop app's built-in browser, and rewrote internal guides that still referred to Atlas.
