ChatGPT is receiving an enormous upgrade designed to speed up your life and eliminate the mundane background tasks that distract us from work, play, and more. It’s new ChatGPT Agent launches fully automated agentic browsing—and it’s coming to you very soon.
OpenAI Makes ChatGPT Supremely Useful
ChatGPT is gaining the ability to use fully automated AI agents, known as ChatGPT Agent. Think of it like this. Up until now, ChatGPT could browse the web and find information for you, but you still need to remain engaged and help guide its research.
However, now ChatGPT Agent can fully automate all these processes, requests, and demands, and complete tasks with almost zero user input. In many ways, ChatGPT Agent combines two of OpenAI’s previous tools—Operator and Deep Research—to create a significantly more powerful tool that can autonomously complete actions. Operator is OpenAI’s previous attempt at an AI agent, and was able to browse the web, make bookings, and complete some basic tasks. Whereas Deep Research is an in-depth research tool designed to delve into any prompt given to it, generating comprehensive reports filled with data analysis from multiple sources, but it wasn’t designed for the same level of web interaction as Operator.
Combining these tools with the power of agentic AI delivers a tool that can fully browse the web for you, taking into account almost any information you provide. In that, ChatGPT Agent can access “ChatGPT connectors” that allow you to link apps and accounts to the agent, where it can find highly specific information about you and your requirements. For example, you can connect Gmail, your calendar app, and so on, and turn the agentic AI into a fully-fledged personal assistant.
You can break it down into three key areas:
- Autonomous Tasks: ChatGPT Agent can complete complex, multi-step tasks without requiring constant user input.
- Web Browsing: The agent can browse the web within ChatGPT, accurately mimicking a real human with its clicks and movements. It can also navigate forms, something that is vital in today’s internet. It’s a virtual computer within ChatGPT that features both a text-based interface and a visual browser, which the Agent can choose to use.
- Tools: OpenAI has confirmed that ChatGPT Agent can use all of the tools already available to it to complete its tasks, such as accessing APIs, file operations, importing data, reasoning, and even coding to get the job done. For example, Agent has access to its own terminal to work on specific tasks or use generative AI to create unique images.
It’s the first model OpenAI has trained that can seamlessly move between these different functionalities and the “unified toolbox.” Using reinforcement learning, Agent can decide when to use any of the tools at its disposal, enabling it to work through prompts and complex tasks one step at a time. But over time, it will become more efficient at completing tasks, speeding up the process and increasing its accuracy.
Will ChatGPT Agent Complete Tasks Without Asking? Is It Secure?
OpenAI’s live stream highlighted a few key security features built into ChatGPT Agent.
First, while it can complete tasks as required, it will prompt you when it comes to submitting forms, logging into websites, and other important tasks. These breaks are designed to stop issues created specifically in these scenarios. Automation is wonderful, but right now, user inputs are still important.
OpenAI has also trained Agent to deny dangerous, unsafe, or ambiguous requests that it cannot fulfill. It’s strongly aligned with OpenAI’s existing safety standards, which will ensure it doesn’t stray too far from ChatGPT’s current boundaries. Now, that will definitely infuriate some folks who believe ChatGPT is already too locked down, but it stands to reason when unleashing automated AI agents on the world.
Furthermore, at launch, it won’t make any purchases without confirming, either.
Agent also comes with some new tools to protect against prompt injection, a new type of malicious attack focusing on AI tools. Prompt injection is an issue for all types of generative AI, but is a particular concern now that these tools will begin browsing the web autonomously.
In that, OpenAI has built several new safeguards into Agent. For example, ChatGPT Agent runs in a sandboxed environment. Even though it can make changes to your calendar, download files, and so on, OpenAI doesn’t want it interacting directly with your operating system on a level that could cause damage, so it isolates the tool. Additionally, it uses specific classifiers to identify prompt injection attacks and other types of manipulation, and is designed to shut them down.
When Is ChatGPT Agent Launching?
Actually, in a rare moment for OpenAI, Sam Altman confirmed that Agent is launching immediately. ChatGPT Pro subscribers will receive 400 queries per month, while Plus and Team subscribers have a more limited 40 requests.
However, like most of ChatGPT’s new features, even if it’s launched immediately, it still takes a few days to filter down to your specific account, even if you’re already subscribed to one of the aforementioned tiers.
Don’t forget, in-browser agentic browsing is a very busy space. Earlier in 2025, Opera launched its impressive agentic Neon browser, while Perplexity is testing its AI-powered Comet browser, too. And that’s not forgetting that antivirus behemoth Norton is set to launch Neo, another AI-powered browser, sometime in 2025. As said, AI-powered browsers are here, and they’re coming in droves!
