Perplexity

Conversational-search and browser-agent vendor; operates a production browser-agent that fetches and reasons over web content on behalf of the user. In the context of this wiki, Perplexity appears as the operator of BrowseSafe — a fine-tuned in-line classifier that defends the production browser-agent against prompt injection.

BrowseSafe

Presented at [[unprompted-conference-march-2026|[un]prompted March 2026]] by Kyle Polley — “Training BrowseSafe: Lessons from Detecting Prompt Injection in Production Browser Agents” (Day 2 / Stage 1 / 14:20). Reported numbers: F1 ~0.91 at sub-100ms latency, fine-tuned MoE Qwen-30B base; companion benchmark BrowseSafe-Bench with high-entropy realistic HTML; data flywheel from production user feedback.

The talk is a primary practitioner case study on production-scale indirect prompt injection detection at the browser-agent boundary.

See also

  • [[unprompted-conference-march-2026|[un]prompted March 2026]] — talk venue
  • Indirect Prompt Injection — the threat class BrowseSafe targets