Definition
An AI agent that can control a web browser or computer directly — clicking buttons, filling forms, and navigating pages — the same way a human would, rather than just calling narrow, pre-defined tools. Because it can visit any page an attacker points it to, it creates a much larger and harder-to-predict attack surface than traditional software.
Why it matters
As companies deploy AI to 'browse the web on your behalf,' every website it visits becomes a potential injection point — executives should treat browser-use agents as an internet-facing system requiring the same scrutiny as a public web application.