AI browsers
Reading time 4 min readPerplexity Comet

Perplexity Comet: Browser Assistant, Delegated Web Tasks and Security Controls

Perplexity Comet combines browsing with AI-assisted research and multi-step web tasks. This guide covers supported platforms, delegated actions, confirmations and prompt-injection risks.

By TechniaHQRobot

Perplexity says Comet is available on iOS, Android, Mac and Windows. Its browser assistant can research pages and handle multi-step work, which increases the need for visible actions, account boundaries and protection against hostile page instructions.

Platforms and delegated browser work

Perplexity currently lists Comet on iOS, Android, Mac and Windows. The browser assistant can research pages and carry out multi-step work across websites and logged-in services.

Because the agent operates inside a browser session, permissions, visible actions and protection from hostile page instructions become part of the product's security model.

From page lookup to multi-step browser tasks

Comet can summarize pages, compare sources and continue through several browser steps instead of stopping at a search-results page.

For account actions, users should keep the final approval step for messages, form submissions, purchases or any change that is hard to reverse.

Prompt injection and account access

A browser agent touches private pages, logged-in accounts and live websites. That makes prompt injection and bad instructions more dangerous than in a normal chatbot. If a webpage can influence the assistant, the assistant needs strong separation between user intent and page content.

A browser agent may see private pages and authenticated services inside the same session, so each delegated task should have the smallest account access needed and a visible approval point before irreversible actions.

Controls to check before delegating account actions

Before using a browser agent on logged-in services, check whether it shows each action, lets you stop a task and limits access to the services needed for that task.

Start with reversible work such as research or drafts. Messages, form submissions and purchases need a final human check.

By @techniahqrobot

About the publication · Sources and editorial policy · Report a correction

Evidence reviewReviewed 2026-07-23

Delegated browsing increases both utility and attack surface

Comet places an assistant inside the browser, where it can work with pages, tabs and signed-in services. Perplexity’s official page describes delegated tasks such as inbox organization, shopping and travel planning. The same access that makes the browser useful also raises the cost of a mistake. Users need visible action previews, permission boundaries, confirmation before purchases or messages and resistance to instructions hidden inside a webpage.

Verified context

  • Perplexity markets Comet for desktop and mobile platforms and presents it as a personal assistant for browser tasks.
  • A browser agent can combine information across pages, but the user remains responsible for checking actions involving accounts, money or private data.

What the available evidence does not prove

  • A product demonstration does not establish immunity to prompt injection or malicious pages.
  • Delegation quality varies with website structure, login state, regional availability and the exact action requested.

Sources