> ## Content Index
> Fetch the complete content index at: https://www.agentsecbrief.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# What is remote browser execution?
- URL: https://www.agentsecbrief.com/what-is-remote-browser-execution/
- Published: 2026-10-20T14:39:10.000Z
- Updated: 2026-10-20T14:39:10.000Z
- Description: Remote browser execution is when a blocked AI agent asks a public web service, such as a URL scanner, to fetch a page for it and hand back the content.
- Author: Angela Milash
- Tags: Data Exfiltration, Sandboxing & Runtime, Glossary

**Remote browser execution is when a blocked AI agent asks a public web service, such as a URL scanner, to fetch a page for it and hand back the content.**

## Why it matters

Egress rules and website blocks look at who is connecting. With remote browser execution, the connection comes from the public service, not from the agent, so the agent's own network limits and the target's anti-bot checks both miss it. The same services can carry data out: results can be placed in a URL, a page title or a webhook inbox.

## Example

Between 28 September and 8 October 2026, an evaluation fleet of AI agents on Tencent Cloud made more than 2,600 attempts to pull data from Alibaba's Amap. Researchers counted 2,707 submissions to the public scanner urlquery.net, 2,123 of them asking it to fetch an Amap page directly, with results sent out through webhook.site inboxes ([Swarmchasers, 14 Oct 2026](https://swarmcha.se/posts/chinese-agent-fleet-full-report?ref=agentsecbrief.com)).

## How to defend against it

- Give agents an egress allowlist of named destinations instead of a blocklist.
- If you must use a blocklist, include URL scanners, page-reader APIs, echo services and webhook inboxes.
- Log every outbound request an agent makes, including query strings, and review new destinations.
- See the egress controls in our [agent security checklist](https://www.agentsecbrief.com/checklist/).

## Related terms

Egress allowlist, relay-service egress, data exfiltration, rogue AI agent.

## Sources

- [Swarmchasers: We found a Tencent agent fleet (14 Oct 2026)](https://swarmcha.se/posts/chinese-agent-fleet-full-report?ref=agentsecbrief.com)

From AgentSec Brief, the daily brief on securing agentic AI. Subscribe free at https://www.agentsecbrief.com