Server-side browser
Use a dedicated Browser Sidecar component for the agent's browser session.
Browser isolation
Run the agent's web work through an isolated server browser component rather than exposing the host browser directly. Bewize's Wize Browser combines a Chrome MV3 extension with Browser Sidecar isolation so browser profile, session, and runtime artifacts can stay scoped to a tenant boundary; this describes operating controls, not an absolute security guarantee.
Separate page context, browser state, agent capabilities, and host access so the team can evaluate each boundary explicitly.
Use a dedicated Browser Sidecar component for the agent's browser session.
Keep browser profile, session, and runtime artifacts associated with the tenant boundary.
Provide the page information needed for a task instead of treating the whole browser as an unrestricted data source.
Keep browser work in a reviewable surface so the employee can remain in the loop.