Google's Chrome Enterprise is evolving its security features to support the rise of autonomous AI agents. These agents are increasingly performing complex tasks within the browser, necessitating robust data protection for both users and the AI itself. The browser offers a unique advantage by holding user context, existing access policies, and awareness of active applications. This allows agents to operate securely while leveraging existing enterprise permissions.Chrome Enterprise Premium introduces advanced Data Loss Prevention (DLP) to inspect agentic data flows in real-time. This prevents sensitive information from being leaked to public large language models and allows for management of extension permissions. Access controls are extended from users to their AI agents, so if a user cannot access certain data, their agents cannot either.To ensure secure agentic collaboration, Chrome is implementing several safeguards. A User Alignment Critic acts as a gatekeeper, analyzing metadata to prevent prompt injection attacks. Site Isolation is enhanced to limit agent activity to relevant task origins, preventing unauthorized actions on unrelated sites. Agents log their actions, and Chrome automatically pauses at critical junctures for human approval, maintaining the employee in the loop. For example, major financial transactions or mass emails require explicit human consent. Agent actions are clearly tagged in Chrome History for transparency.Google is actively testing these defenses through automated red-teaming and has expanded its Vulnerability Rewards Program. By extending browser isolation principles and providing visibility controls, Chrome Enterprise aims to enable businesses to adopt AI productivity tools without compromising security. This approach ensures enterprises can innovate safely in the evolving landscape of AI-assisted work.