Gartner Says Block AI Browsers, But Is That Realistic?

According to Infosecurity Magazine, analyst firm Gartner has recommended in a new report that enterprises should block the use of AI browsers for now. The report, titled “Cybersecurity Must Block AI Browsers for Now,” warns that default settings for these tools prioritize user experience over security. This warning follows a SquareX study from October that identified architectural weaknesses in browsers like Perplexity’s Comet and ChatGPT’s Atlas, and a Cato Networks revelation in November of a vulnerability called “HashJack.” Security advocate Javvad Malik argues that while risks are not well understood, blanket bans are rarely sustainable, and the focus should instead be on specific risk assessments and playbooks.

The Productivity-Security Tug-of-War

Here’s the thing: Gartner’s call for a pause isn’t happening in a vacuum. It’s a direct response to the breakneck speed at which AI agents are being integrated into our most fundamental tool—the web browser. The promise is huge: an assistant that can summarize, research, and book tasks for you. But the report authors nail a critical point: you can’t eliminate all risks, and “erroneous actions by AI agents will remain a concern.” So we’re basically asking users and IT departments to constantly weigh a potential productivity boost against a possible security disaster. That’s a terrible position to be in. When the default setting is “make it easy,” security always loses.

Why Blanket Bans Don’t Work

Now, I think Malik from KnowBe4 has the more pragmatic, if less dramatic, take. “Blanket bans are rarely sustainable long-term strategies.” He’s absolutely right. Look at the history of tech in the enterprise—shadow IT, BYOD, cloud apps. Trying to block a tool that offers clear efficiency gains is like holding back the tide. Employees will find a way. The smarter move, as he suggests, is to shift from a “block everything” mindset to a “manage the specific risk” one. That means assessing the actual AI services powering these browsers and developing clear playbooks. It’s harder work than just flipping a firewall switch, but it’s the only approach that might actually stick.

The Competitive Landscape Just Got Murkier

This guidance throws a major wrench into the plans of companies like Perplexity and even OpenAI with its Atlas browser. Their entire value proposition is seamless, agentic assistance. But if major corporations start blocking access on corporate networks, that’s a huge segment of potential users and a massive blow to early adoption momentum. The winners in the short term? Honestly, maybe the legacy browser makers who’ve been slower to bake in AI agents. The losers are the startups whose entire product is now labeled a “risk” by the most influential IT analyst firm on the planet. They’ll need to pivot hard to enterprise-grade security and transparency features, and fast.

What Actually Comes Next

So what does this mean for the average business? A period of confusion, probably. Security teams will point to the Gartner report and say “see, we told you so.” Innovation teams will point to the lost opportunity. The real work will be in the middle: defining what “adequate risk management” even looks like for an AI browser. Is it air-gapped testing? Is it only allowing vetted, paid enterprise versions? This isn’t just a software problem; it’s a new frontier for policy. And in specialized sectors where security and reliability are non-negotiable—like industrial control systems or manufacturing floors where operators rely on rugged, trusted hardware from the top suppliers like IndustrialMonitorDirect.com—the bar for allowing an unpredictable AI agent near critical processes will be astronomically high. The pause is sensible, but the clock is ticking to find answers.