AI browser
On this page
Strata's AI can use a real web browser: it opens a page, looks at it, reads it, and clicks, types, chooses options, scrolls and presses keys there, one action at a time. Use it when reading a page's text is not enough: a page you have to click through or fill in to reach the answer, a site's own search, something you need to see, or a task you want done on a website.
The browser runs in Strata's own isolated sandbox, never on your computer, and it is not signed in to anything of yours.
#When it is available
The browser is on wherever web search is on. It reaches only the sites your organization's rule for web pages allows, and your administrator can turn it off or keep it to your organization's approved domains (see What can leave your organization). It is not offered in Strata for Outlook, in Microsoft Teams, or to sub-agents.
#What you see
Each action is a step in the trail: Visiting site, Clicking "button", Typing into "field", Choosing "option" on the page, Pressing the key key, Scrolling the page, Going back a page, Going forward a page, Taking a screenshot, Reading the page text, Waiting for the page to load. After every action the AI gets the page's address and title, its buttons, links and fields, its text, and, unless it only read the page text, a screenshot of what the page shows. It keeps the two most recent screenshots in mind and lets older ones go.
Those screenshots are the AI's own: you do not see them. To see the page, ask for a screenshot ("take a screenshot of it"): the AI takes one, and it is attached to the answer as an image you can open and download, named after the site, for example Screenshot of example.com. Above the steps, a turn that browsed sums up as Used the browser.
Pages are someone else's content. The AI reports what a page says and never follows instructions written on it.
#Nothing is submitted without you
Before anything is sent, Strata asks you. Pressing a button that sends, posts, pays, books, orders, deletes or signs up, submitting a form, pressing Enter in a form, or a page's own script submitting one, is held, the trail reads Asking before submitting on site, and a card shows:
- Send this on site? with the button that was pressed and where the form goes,
- each filled-in field and what it holds, in the page's own words (a password field shows as hidden),
- Send and Don't send.
Nothing leaves the browser until you choose Send, and your yes covers that one action only: the next submission asks again. If you choose Don't send, the AI does not try another way to submit it. A search box on a site is not a submission: searching a site runs without a card.
Where nobody can answer a card (a scheduled agent, the API), the browser can still read and look, but it never submits: the AI tells you what it would have sent and where, so you can do it yourself.
#What it never does
- It never types a password, a card number, a one-time code or an identity number, and it does not sign in for you. The AI asks you to do that step yourself.
- It never downloads files, and it opens only web addresses (http and https).
- It never reaches an address on your organization's network or any private address, and it cannot reach the web at all between its own actions.
#Opening pages
The browser opens an address without asking when it came from you or from what Strata already read, as web search does: a link you wrote or attached, a search result, or a page the browser or Strata reached. When the AI wants to open an address it put together itself, it asks first, with Allow once, Always allow site and Deny. Clicking a link on a page it opened needs no question.
#For administrators
The control is Organization then Data and privacy then What can leave your organization then AI browser, below Web pages and search results:
- Same as web pages and search — the default. The browser opens what the rule for web pages and search allows, wherever web search is on.
- Only approved domains — only the sites on the Approved domains list, even where web pages and search may reach any public site.
- Off — the AI cannot use a browser. Reading web pages and web search are not affected.
The browser never goes past the rule for web pages: where that rule blocks web pages and search, there is no browser. Every page the browser acts on is a browser.page row in the audit log: who, which action, the page's address without its query, whether a submission was held or approved, and any site that was refused. For a conversation that is not kept, the row names the site alone. What a page said and what was typed are never recorded.