Brave Browser is the latest to test an agentic AI. The feature is currently in an experimental phase.
Brave says that it is approaching AI browsing cautiously, considering the security risks. The company admits security measures have not been perfected, and warns about indirect prompt injections, i.e. these are malicious instructions that are hidden on web pages, which could trick the AI to transmit sensitive data to the website. Google had recently said that these were the biggest challenges faced by AI-powered browsers, and outlined various safety mechanisms that are in-place for agentic AI in Chrome. The other issue is that AI models need to be restricted from taking actions that the user did not intend.
Brave’s agentic AI works in an isolated profile. This uses a separate storage to ensure cookies, caches, logins, etc., from your regular browsing data are protected. When you enable the agentic AI feature, the browser creates a separate profile that is exclusively used for the AI agent.
Brave is using a second model to check the main AI agent’s model. It receives the system prompt, the user prompt, and the task model’s response, and then checks if the task model’s instructions match the user’s intention. This guardrail is similar to the method that Google uses for Chrome’s agentic AI. The “alignment checker” does not have access to the website and its content, to prevent prompt injections from affecting it. Brave’s AI also uses security-aware system instructions: a structured prompt made by the company to encodes policy-based rules that will be updated. Claude’s Sonnet hybrid reasoning model for agents is also used in Brave to mitigate prompt injections.
Users will be in control while the AI agent performs its task, and will be able to view the session as the AI works, pause it or stop it at any time. Brave says that its AI has a strict no-logs, no-retention data privacy policy, and that it does not train its models on user data. The AI browsing mode works with the browser’s protections, including the ad-blocker.
Agentic AI browsing is currently available in Brave’s Nightly channel. You can download the nightly version of Brave Browser here. Users who wish to test it will need to enable an opt-in flag.
- Go to brave://flags
- Search for AI browsing
- You should see a result labeled “Brave’s AI browsing”. Its description reads, “Enables Ai browsing features and only in a separate built-in profile. – Mac, Windows, Linux. #brave-ai-chat-agent-profile”
- This option is disabled, click on the drop-down menu to enable it.
- Restart the browser to apply the changes.
Now you can use the AI to perform tasks, from Leo’s chat interface.
(Image courtesy: Brave)
You can read the official announcement here.
Brave joins the likes of Google Chrome, OpenAI’s ChatGPT Atlas, Perplexity’s Comet, who have all introduced an agentic AI for browsing.
Have you tried Brave’s agentic AI?
Advertisement
