Skip to main content
Browser Agent controls a real browser using Browserbase and Stagehand AI. It handles JavaScript-heavy frontends, authenticated sessions, and dynamic content that traditional scanners miss, and captures screenshots as visual evidence for confirmed findings.

​
What it does

  • Real browser automation: navigates pages, clicks elements, fills forms, and interacts with dynamic content using Stagehand AI-driven actions
  • JavaScript execution: runs scripts in the browser context to probe client-side logic and extract runtime data
  • CAPTCHA solving and stealth: uses Browserbase cloud browser with stealth mode and CAPTCHA solving for public targets; switches to local sandbox browser for internal or VPN-only targets
  • Authenticated session testing: maintains login state across multi-step workflows to test what is only accessible after authentication
  • SPA testing: fully renders and interacts with React, Angular, Vue, and other single-page application frameworks
  • Network traffic capture: monitors and captures HTTP requests made by the browser during testing
  • Visual verification: takes screenshots as evidence for confirmed findings

​
How it fits in

Browser Agent is used whenever a task involves significant client-side behavior, authenticated functionality, or flows that require actual browser interaction. It works alongside API Security Agent for full coverage of both the rendered frontend and the underlying API surface.