> ## Content Index
> Fetch the complete content index at: https://www.ai-360.online/llms.txt
> Use this file to discover other available public pages before exploring further.

# Perplexity releases BrowseSafe to catch prompt injection
- URL: https://www.ai-360.online/perplexity-introduces-browsesafe-to-secure-the-agentic-browser/
- Published: 2025-12-04T12:00:00.000Z
- Updated: 2026-11-03T05:57:02.000Z
- Description: Perplexity has released BrowseSafe, an open model and benchmark that scans web pages for prompt injection before AI browser agents act on them.
- Author: Faye Waters
- Tags: 2. Security, News, Security, Enterprise software, Agentic AI, AI Agent, Internet of Things

[Perplexity](https://www.perplexity.ai/?ref=ai-360.online) has released BrowseSafe, an open detection model and research benchmark for spotting malicious instructions hidden in web pages read by AI browser agents, [Perplexity said in a blog post on 2 December 2025](https://www.perplexity.ai/hub/blog/building-safer-ai-browsers-with-browsesafe?ref=ai-360.online).

BrowseSafe is fine-tuned to answer one question: does a page's HTML contain instructions aimed at the agent? [Perplexity](https://www.ai-360.online/perplexity/) said it scans full pages in real time without slowing the browser, unlike large general-purpose models that are too slow and costly to run on every page.

The BrowseSafe-Bench benchmark has 14,719 examples that mimic production pages, with 11 attack types, nine injection strategies and three linguistic styles.

In its Comet browser, outputs from tools that return untrusted content such as web pages, emails or files are scanned by BrowseSafe before the agent can act on them. Tool permissions are limited by default, and sensitive actions can require user confirmation.

Perplexity said multilingual and indirect attacks were much harder to catch than direct ones, and that injections in visible footers, table cells or paragraphs were harder to detect than those hidden in comments.

---