Recommended setup
List the domains the agent can visit, the secrets it may need, and the browser actions that require approval. Then route browser commands through Acira before execution.
Acira
Docs
Secure browser-use Agents
Use Acira to control what a browser-use agent can do before browser commands execute.
Use this page when adding policy enforcement to browser-use workflows.
Direct answers
Policy examples
Typical policies block unknown domains, prevent credential exfiltration, restrict downloads and uploads, and require approval for purchases or destructive admin actions.
Operational checks
Log every policy decision, review blocked actions, and update rules as the agent's workflow expands.
FAQ
What should browser-use teams protect first?
Protect credentials, navigation scope, destructive actions, downloads, uploads, and payment or purchasing workflows first.