← Back
Home › Systems › AI and agent security

agent-browser-isolation

isolated remote browsers for agents

Browserbase, Cloudflare Browser Rendering

SystemTechniques · 20Primitives · 82 agent-browser-isolation Deterministic simulation testingdistributed · medium: Run the whole system in one thread under a seeded scheduler with simulated network, disk and clock, so every failure replays from its seed.›Primary-backup replicationdistributed · medium: One node orders all writes and ships them to standbys; the acknowledgement rule (none, one, all) sets what a crash loses, and an external arbiter decides who takes over.›Session replaygraphics · medium: Record DOM snapshots and mutations to replay user sessionsVm snapshot restorehardware-os · medium: Snapshot an initialised VM/isolate heap and restore it for fast cold startsLow latency video encodingmedia · medium: Video encoding tuned for latency: no B-frames, intra refresh, slice output, low-delay rate controlCoverage-guided fuzzingsecurity · medium: Mutate inputs, run an instrumented target, and keep any input that reaches a new code edge; feedback turns blind guessing into incremental search.›Egress proxy filteringsecurity · medium: Forcing sandbox network traffic through a proxy with domain allowlists, TLS SNI checks and request loggingCgroups and namespaceshardware-os · low: Linux namespaces limit what a process can see; cgroup v2 limits and accounts what it may use. Containers, sandboxes and job schedulers are built from the two.›Seccomp bpfsecurity · low: Syscall filtering with seccomp BPF programsObject storagecloud · low: S3-compatible blob storage at cents per GB-month with 11 nines durability; pick by egress price, request price and latency, not by storage price alone.›Accessibility treeagentic-ai · low: Extracting the browser/OS accessibility tree (roles, names, bounds) as a compact text view of a UI for agentsBrowser automation protocolagentic-ai · low: CDP / WebDriver BiDi commands and events over websockets to drive browsersInput event synthesisagentic-ai · low: Inject synthetic mouse, keyboard and touch events at OS or browser level (CGEvent, SendInput, uinput, CDP Input) with realistic timingScreen captureagentic-ai · low: Damage-region screen capture with GPU surfacesContainers and Kubernetescloud · low: Containers package a service with its dependencies; Kubernetes schedules them across machines. Use the smallest orchestrator that does the job.›Hdr histogramdata-structures · low: Log-linear bucketed histograms with bounded relative error for latency percentilesProcess supervisionhardware-os · low: A parent process starts services, reaps their exits and restarts them under a delay and burst-limit policy, then stops them with SIGTERM before SIGKILL.›Remote framebuffer protocolnetworking · low: RFB/VNC framebuffer updates, encodings and input events for remote desktop controlWebSocketsnetworking · low: Full-duplex message framing over one upgraded HTTP connection; the standard way to push real-time data to browsers.›Mutual TLSsecurity · low: TLS where the client also proves a certificate key, so every connection carries a verified, rotatable machine identity.›Secrets managementsecurity · low: Keep keys and passwords out of code and logs, give workloads short-lived identity instead of static keys, and make rotation routine.›Tls fingerprintingsecurity · low: JA3/JA4 fingerprints of ClientHello parameters to identify clientsGraceful drainingsystems · low: On a termination signal, stop taking new work, finish in-flight work until a deadline, tell clients to reconnect elsewhere, then exit; clients resume from a token.›+ 13 more techniques+ 66 more primitives

Similar systems

Share the most building blocks with this one.

rl-environments 46 %agent-sandbox 38 %browser-test-grid 37 %serverless 34 %cloud-dev-env 33 %