AI · 7 min read

AI browsers are here. What happens when the browser reads your website for the visitor?

Accendoz·
AI browsers now read your website. Put the facts in plain text.

Comet, ChatGPT Atlas, Gemini in Chrome and Copilot Mode in Edge can summarise a page and compare it with a rival's, and some can already act for the user. Websites that state facts in plain text, publish prices and use properly labelled forms come through best.

An AI browser puts an assistant between your website and the person visiting it. Perplexity's Comet, OpenAI's ChatGPT Atlas, Google's Gemini in Chrome and Microsoft's Copilot Mode in Edge can summarise or explain your page, compare it with a competitor's and, where they have an agent mode, click and type on the visitor's behalf. For a business, that means your site has to survive being read by a literal-minded machine: facts stated in plain text, prices or pricing logic published, and forms built from standard, labelled fields.

The tools are new, but they arrived quickly in 2025, and some already reach Indian users: Comet is free to download worldwide, ChatGPT Atlas launched worldwide on macOS, and Copilot Mode in Edge launched in all Copilot markets, India included. Here is what they do, the security catch, and the fixes that help machines and people alike.

01

How fast this happened

  1. 9 Jul

    Comet launches

    Perplexity releases its browser to Max subscribers first, with a waitlist for everyone else.

  2. 28 Jul

    Copilot Mode in Edge

    Microsoft adds an opt-in AI mode to Edge on Windows and Mac, free for a limited time in all Copilot markets.

  3. 20 Aug

    Brave discloses a Comet flaw

    Hidden text on a web page could steer Comet's assistant into leaking a user's email address and login code.

  4. 18 Sep

    Gemini in Chrome

    Google rolls out its assistant to US desktop users in English and promises agentic features in the coming months.

  5. 2 Oct

    Comet goes free

    Perplexity opens the browser to everyone at no cost.

  6. 21 Oct

    ChatGPT Atlas

    OpenAI launches its browser worldwide on macOS, with agent mode in preview for Plus, Pro and Business users.

  7. 23 Oct

    Copilot Actions

    Edge adds actions such as booking a restaurant, in a free, limited preview in the US.

  8. 20 Nov

    Comet on Android

    Perplexity brings the browser and its assistant to Android phones.

02

What an AI browser actually does

Strip away the branding and these products do three things. They read: Gemini in Chrome is pitched as a way to clarify complex information on whatever page you are on. They compare: Copilot Mode can, with permission, see all your open tabs and weigh the options in them. And they act: Perplexity says each new Comet tab carries an assistant that can take actions on your behalf, and Microsoft's examples include unsubscribing from newsletters and booking a table.

Acting is the least mature part. TechCrunch's testing found that browsing agents handle simple tasks well but struggle with more cumbersome ones. Expect assistants to summarise and compare your pages long before they routinely complete purchases on them.

03

Your page now has a literal-minded reader

A distracted human skims and fills gaps with goodwill. An assistant extracts what is written and reports it. Vague claims summarise as vague. A price that exists only in a phone conversation summarises as missing, which is one more reason to think about publishing prices. Facts locked inside images or sliders may not be read at all.

Agents read pages in different ways. Comet's assistant, for instance, lets users take a screenshot of a page and ask questions about it. Microsoft's open-source Playwright MCP, a tool for letting AI models drive a browser, reads the page's accessibility tree instead of pixels. Either way, clear text and proper structure leave the machine less to guess.

Common page problems and fixes for AI readers
On your pageWhat an assistant may reportFix
Price on request onlyNo pricing information foundPublish prices, ranges or how pricing works
Key facts inside imagesNothing, or a guessPut the facts in real text as well
Taglines without specificsA generic, interchangeable summarySay who it is for, where, and what happens next
Custom form widgetsFields it cannot identify or fillStandard inputs with visible, linked labels
Address and hours in a footer imageWrong or missing location detailsText, plus matching Google Business Profile data

04

Forms are where agents succeed or fail

Your enquiry form is the highest-intent page on the site, and it is where an agent has to work out what each field means. The W3C's accessibility guidance has said it for years: use a real label element for every field, and make its for attribute match the field's id, so that assistive technology presents the right label. Tools that read the accessibility tree, as assistive technology does, rely on the same wiring, and OpenAI's own Atlas launch post tells website owners they can add ARIA tags to improve how its agent works on their sites.

Keep the form boring: standard text inputs, real select menus, one clear submit button and a visible confirmation message. Brave's security team argues that sensitive actions such as sending an email should always ask the user to confirm first, so a form that ends with a plain confirmation step serves both the agent and the person supervising it.

05

The security catch, for your own team

The risk sits mainly with the person using the browser. In August, Brave showed that instructions hidden behind a spoiler tag in a Reddit comment could make Comet's assistant fetch a user's email address and one-time password and post them back, enough to take over the account. This is indirect prompt injection: page text the assistant mistakes for commands. Brave says Perplexity's first fix was incomplete, and later called the problem a challenge for the whole category.

OpenAI is candid about it. Atlas offers a logged-out mode, in which the agent browses without the user's signed-in accounts, which limits both its usefulness and what an attacker can get.

Prompt injection remains a frontier, unsolved security problem.

Dane Stuckey, chief information security officer, OpenAI

06

Test your site the way an assistant sees it

Pick your three most important pages: home, your main service and contact. Ask an AI assistant to summarise each one, then to compare your offer with a named competitor. Read the answers as a customer would. Whatever the assistant gets wrong or leaves out is usually something your page never stated clearly in text.

Then ask an agent to fill in your enquiry form with test details and watch where it hesitates. Fold these checks into the quarterly website audit so they happen more than once.

What to do before the next tab opens

  • State the essentials in text on every key page: who you serve, where, what it costs or how pricing works, and what happens after someone enquires.
  • Rebuild any form that uses custom widgets with standard, properly labelled inputs and a clear confirmation message.
  • Move important facts out of images and sliders, or repeat them in text.
  • Ask an assistant to summarise your top pages every quarter, and fix what it gets wrong.
  • Write a one-paragraph staff policy on AI browsers and sensitive accounts.
  • Moderate comments and reviews on your own site.

The pleasant surprise is that everything that helps the agent also helps the skimming human: clarity ships twice. If you want help making your key pages machine-legible, it is part of our SEO and AEO work.

Sources

Facts checked against these sources, as of 12 December 2025.

Chat with us