AI-native enterprise browsers and browser-native attacks
Key Questions
What major acquisitions are driving the AI-native enterprise browser market?
Akamai acquired LayerX for $205M, while Perplexity raised $200M for its Comet AI browser and Atlassian acquired Arc Search for $610M. These moves validate the browser as a key front door for AI agents and enterprise security.
Why are traditional browser extensions considered insufficient for enterprise security?
Extensions fail on unmanaged devices and have been linked to large-scale credential theft, with campaigns like UnregStealer and Fileless Phantom Stealer exposing 346M users. Agentless session-layer approaches are positioned as more effective for BYOD and shadow AI scenarios.
What risks do AI browsers like Atlas and Comet face according to the 2026 comparison?
They are vulnerable to same-origin policy bypass and prompt injection attacks, as seen in OpenAI's decision to kill Atlas after less than a year. These gaps reinforce the need for enterprise-grade session-layer controls.
How is the browser isolation market expected to grow, and what drives this?
The market is projected to reach $7.65B by 2031 amid a 68% rise in attacks, including BitB phishing and accessibility-tree exploits. Island's TEI study showing 344% ROI and PANW's 11M Secure Browser licenses highlight the demand.
What does OneDrive's screenshot blocking feature reveal about cross-browser security?
It only works in Microsoft Edge, underscoring the need for agentless DLP that spans all browsers to prevent data exfiltration on unmanaged devices.
OpenAI’s upgraded ChatGPT Chrome extension can navigate sites, fill forms, and download files, bringing agentic actions into existing browser workflows and heightening risks around sessions, page content, and data movement. Chrome 155 also patched 10 flaws, including a critical prerender use-after-free; Google reported no exploitation. Menlo’s browser-agnostic isolation and AI-session messaging is a competitive signal, but its adoption claims are unverified.