Earlier this year, research revealed how AI browsers could be manipulated into interacting with malicious landing pages. The Guardio Labs research revealed “an attack surface far wider than anything we’ve faced before, where breaking one AI model could mean compromising millions of users simultaneously.” 

The risks associated with agentic AI are considerable, especially as development accelerates at a pace security measures aren’t keeping. 

Randolph Barr, Chief Information Security Officer at Cequence Security, shares, “As organizations rapidly adopt agentic AI, Model Context Protocol (MCP), and autonomous browsing capabilities, we’re seeing a pattern develop: AI-native browsers are introducing system-level behaviors that traditional browsers have intentionally restricted for decades. That shift breaks long-standing assumptions about how secure a browser environment is supposed to be.

“But the real exposure emerges when individuals install AI browsers on their personal devices. We know from every technology adoption wave, cloud apps, messaging platforms, AI assistants, that employees first test these tools at home. With AI browsers, curiosity will drive rapid experimentation. Once users become comfortable with these tools at home, those behaviors inevitably bleed into the workplace through BYOD access, browser sync features, or personal devices used for remote work.

“What’s more concerning is how easy AI browsers are to detect and how quickly adversaries can scale that detection. AI browsers introduce unique fingerprints in their APIs, extensions, DOM behavior, network patterns, and agentic actions. Attackers can identify them with a few lines of JavaScript or by probing for AI-specific behaviors that differ from traditional browsers. With AI-driven classification models, bad actors can now fingerprint AI browsers across millions of sessions automatically. At scale, that enables targeted attacks against users running these higher-risk, agent-enabled environments.

“This underscores why enterprises remain cautious. AI browsers are evolving faster than the guardrails that traditionally protect end users and corporate environments. Transparency around system-level capabilities, independent audits, and the ability to fully control or disable embedded extensions are table stakes if these browsers want to be considered for regulated or sensitive workflows.” 

As AI agents grow more and more commonplace, security leaders must prepare their organizations by understanding the benefits, risks, and best practices for implementation. 

“We are approaching a future where the use of AI agents will outpace the readiness of security measures,” says Barr. “Advisories like this help highlight the gaps and hopefully drive the industry toward more secure, transparent designs before these tools become deeply embedded in enterprise ecosystems.”