OpenAI just put an agent inside the world’s biggest browser. On October 15, 2026, the ChatGPT extension for Google Chrome started reading users’ open tabs and, in Work mode, acting inside them: sending messages, filling out forms, downloading files and grouping tabs. OpenAI’s post called it “bringing the power of computer use to anyone who uses Chrome.”
What actually changed
OpenAI split the update by mode. In Chat, the extension can look across open tabs and gather context. In Work, it can click, type and submit on pages where the user is already signed in. A redesigned in-browser panel keeps chat history next to the page.
The launch post drew 1.2 million views, 866 reposts and 8,300 likes. OpenAI says the extension is “Available for all ChatGPT plans,” though the source notes it is not clear whether the Work tab-control features are included on free plans. ChatGPT Work launched July 9 to Pro, Enterprise and Edu subscribers first.
Why marketers should pay attention
The sample prompts published by 9to5Google are the real signal. They include comparing pricing pages against requirements, pulling vendor details into a comparison sheet, and filling out an event registration form. That means a lead form or B2B pricing table may be read and ranked by an assistant, not a human buyer.
This matters for measurement, too. A form submitted by ChatGPT from a user’s own Chrome profile arrives with that user’s cookies and fingerprint. It looks like a person, but it is software. There is no agreed way yet to treat that traffic.
- Pricing and comparison pages become machine-read interfaces as much as human ones.
- Form fills may be completed by an agent acting for a signed-in customer.
- Publishers face a new attention gap: the article loads, but the reading may happen in a side panel summary.
The risks nobody answered
Neither OpenAI’s thread nor 9to5Google’s report specifies confirmation prompts before the assistant sends a message or submits a form. One example prompt asks ChatGPT to fill a registration form “and stop before submitting,” which suggests the pause is user-requested, not automatic.
That matters because browser agents inherit the access of the logged-in user. PPC Land’s timeline notes Anthropic’s Claude for Chrome research preview disclosed a 23.6% prompt injection success rate without mitigations, dropping to 11.2% with them. OpenAI published no comparable figure for this release.
What to do now
Start by making your key commercial pages legible to both humans and agents. The prompts show what gets compared: dimensions, material, delivery time, return policy, pricing tiers and plan fit. If those details are buried in imagery or PDFs, an assistant may skip you or misread the offer.
Also decide how you’ll handle agent-assisted form fills. If the submission comes from a real customer who asked an assistant to act, blocking it may turn away demand you actually wanted. Flagging it separately is the safer first step while analytics catches up.
This is not a browser switch story anymore. OpenAI closed Atlas in July 2026 and moved into Chrome, where it now competes side-by-side with Google’s Gemini features for the same tab. The extension is free to download; the strategic cost is getting real very quickly.
Source: PPC Land
