Microsoft flipped the switch on agentic browsing inside Edge for Business, dropping a limited preview on May 20, 2026 that turns Copilot from a chatty sidekick into an autonomous digital assistant. The new capability allows the AI to navigate approved websites, punch data into forms, and chain together multi-step workflows—all while respecting the guardrails set by IT administrators through Microsoft Purview.

For the first time, enterprise users can hand off repetitive web-based chores directly to the browser. Copilot isn’t just explaining how to submit an expense report. It’s actually logging into the portal, pulling the required fields, filling them out with information from a chat prompt or connected data source, and clicking submit. The assistant operates within a locked-down session, so every click, keystroke, and form field is auditable.

IT departments configure exactly which domains Copilot may visit and what types of interactions it can perform. The tight integration with Purview means policies can be as granular as allowing auto-fill for a specific SaaS app’s form but blocking any attempts to download files. Admins get a full activity log, turning the browser into an auditable automation endpoint.

Agentic browsing builds on the existing Copilot foundation in Edge, but with a crucial shift: it’s not just side-panel chat anymore. The assistant takes control of a new, isolated browser tab that’s purpose-built for agent actions. This sandboxed tab runs without access to the user’s personal cookies, bookmarks, or saved passwords, preventing accidental data leakage. Instead, it relies on enterprise-managed credentials and policy-defined authentication flows.

Microsoft’s move answers a drumbeat of demand from large organizations that have already woven Microsoft 365 Copilot into productivity apps. Those customers wanted the same large-language-model smarts to handle the legion of web-based tasks that still consume hours of knowledge work—booking travel in a corporate portal, pulling inventory data from a supplier’s site, or populating a regulatory filing form.

The timing also puts pressure on standalone robotic process automation (RPA) vendors and rivals like Google, which has teased similar agentic features for Chrome Enterprise. By baking agentic capabilities directly into the browser—one that already manages millions of corporate identities via Entra ID—Microsoft eliminates the need for third-party RPA plugins and simplifies the compliance puzzle.

During the preview, agentic browsing supports a curated list of approved actions. Form filling covers both text fields and dropdowns, while navigation actions include clicking links, submitting forms, and waiting for page loads. Multi-step tasks can combine these primitives into sequential workflows. Copilot understands natural-language instructions like, “Go to the Acme portal, pull the latest sales forecast from the Q2 dashboard, and paste it into this Excel sheet,” and executes each step with the user’s confirmation when required by policy.

Governance is the headline feature. Through the Microsoft Purview compliance portal, admins define agent policies that map to site lists, sensitivity labels, and risk levels. A policy might allow auto-submission for low-risk sites but require a manager’s approval for actions on sites tagged “Confidential.” Every agent session generates a tamper-proof audit trail that ties the AI’s actions back to the requesting user’s identity, making the system eligible for internal and external audits.

The preview requires an Edge for Business build 126 or later, which includes a dedicated Agentic Browser profile. IT admins enable the feature via group policy or Microsoft Intune, after which users see a “Start agent task” option in the Copilot side panel. The service is initially available in English, with support for French, German, Spanish, and Japanese promised within the calendar year.

Security researchers who’ve seen early builds highlight the isolation techniques used. Each agent session spawns a fresh virtual browser context that discards all state when the task completes. Should a site try to serve malicious script, the sandbox limits the blast radius. Microsoft says it has baked in protections against prompt injection attacks, so a malicious website can’t trick Copilot into executing unintended actions. Continuous monitoring by Microsoft Defender for Cloud Apps flags unusual agent behavior.

Practical use cases abound in finance, HR, and supply chain management. A controller can instruct Copilot to retrieve daily transaction reports from a bank’s business portal and format them into a Power BI dataset. An HR specialist can have the agent pre-fill employee onboarding documents across multiple government sites, pulling candidate details from the ERP system. Logistics planners can monitor shipping carrier portals for tracking updates and automatically log exceptions into a central dashboard. Each use case eliminates manual copy-pasting and minimizes the errors that come with repetitive data entry.

One beta customer, a large European manufacturer, reported that a pilot group reduced time spent on monthly compliance filings from three hours to fifteen minutes. The group’s IT director noted that the audit logs actually improved their compliance posture because every field populated by the agent came with a verifiable timestamp and policy evaluation.

Microsoft has been careful to position agentic browsing as an enterprise-only feature, at least for now. Consumer versions of Edge aren’t getting these powers, which sidesteps a potential privacy firestorm around a bot that can shop or interact with personal banking sites. That restraint also allows the company to iterate on safety and compliance in a controlled B2B environment before any broader consumer rollout.

For IT architects, the challenge shifts from blocking shadow IT to configuring thoughtful agent policies. The Purview integration offers fine-grained controls, but organizations will need to map their web application portfolios and decide which workflows should be automated. Microsoft provides a new workbook in the Endpoint Manager admin center that analyzes browser usage telemetry to suggest high-value automation targets. Admins can simulate agent actions before rolling them out to users.

Pricing details haven’t been finalized, but Microsoft says agentic browsing will be included for customers with both Edge for Business and Microsoft 365 Copilot licenses. Standalone add-on licenses may appear for organizations that only need browser automation without the broader Copilot suite. General availability is pegged for the second half of 2026, depending on preview feedback.

The move solidifies Edge for Business as more than just a secure browser. It’s evolving into a platform for enterprise task automation, closing the gap between desktop productivity tools and the vast array of web applications that still run in silos. As Copilot graduates from answering questions to taking action, the browser becomes the canvas where AI executes on users’ intent. Microsoft’s bet is that tightly governed agents, not open-ended autonomy, will win over risk-averse enterprise buyers. The limited preview that launched this week is the first real test of that thesis.