Comet AI Browser: November Update
In the last two weeks, there have been significant developments with Perplexity's Comet AI Browser. Alongside the official Android release, new features of the Comet Assistant, a security debate surrounding a hidden MCP API, and a conflict with Amazon have been in focus.
Source: Own Presentation
Introduction
Comet is a Perplexity entwickelter Webbrowser, , which integrates artificial intelligence centrally into its interface. Instead of just displaying tabs, a built-in assistant accompanies every session. This assistant answers questions about the currently open page, summarizes content, plans trips, compares products, or organizes emails and calendars – all within the same interface. Examples of the functionality of the Comet Assistant show its versatility Technically, Comet is based on Chromium, enabling support for common web standards and many extensions. Perplexity positions the Comet AI Browser as an "agentic" browser: the AI should not only provide answers but also act actively, for example, by filling out forms or preparing bookings. Since October, Comet has been
available free of charge to all users . Additional features such as a "Background Assistant" or extended quotas are tied to Perplexity's paid plans, including a "Comet Plus" offering. The last two weeks have been shaped by three key developments: the official launch on Android, an upgraded Comet Assistant with more control, and an intense security discussion around a hidden MCP API.
Current Developments
Comet AI Browser Officially Launches on Android
Comet AI Browser Officially Launches on Android
On November 20th, Perplexity officially released Comet for Android. The app is available free on the Google Play Store . Media outlets like The Verge and TechCrunch confirm the launch, positioning Comet as one of the first AI-centric browsers on mobile devices. The Android version brings the built-in assistant directly into the mobile browser: users can summarize any open page with a click, ask follow-up questions, and let the assistant handle tasks like price comparisons or travel planning. Perplexity emphasizes that Comet for Android is not a scaled-down desktop UI, but rather a custom design for mobile use , including quick access to the assistant and an interface that combines answers, citations, and web pages on one screen.
Two points are particularly important for everyday use:
- Voice mode and extended justifications: According to the Play Store description, the Comet Assistant in the Android app can be controlled by voice. At the same time, it explicitly shows which actions it is currently performing, so that the user can intervene at any time. No sync yet, password manager in development:
- The Android version currently synchronizes neither history nor bookmarks with the desktop version. However, Perplexity confirms that this feature "is expected to follow in the coming weeks" . An integrated password manager is also under development; until then, Perplexity recommends using Android's native password manager. Thus, the Comet AI Browser is now officially available on Windows, macOS, and Android, while an iOS version is reportedly
"in the works" The new Comet Assistant and more control.
Already in the first half of November, Perplexity fundamentally revised the Comet Assistant and introduced additional controls. In the official release notes, Perplexity describes a
significantly more powerful Assistant , capable of performing complex tasks across multiple tabs and working on a problem for longer. The changelog and reports like that from TechRadar speak of an internal performance improvement of about 23% in success rates for complex tasks, especially in multi-stage workflows across different websites. In parallel, Perplexity is introducing a new
Privacy Snapshot widget at the top of the Comet homepage. This allows ad and tracker blocking, as well as the assistant's permissions, to be viewed and controlled centrally. Users can now specify in detail on which pages the Comet Assistant is allowed to act, which tasks it can automate, and in which cases it must explicitly ask for confirmation. As a result, the Comet AI Browser appears significantly more "agentic" in recent weeks than classic browsers with chatbot extensions, but also more transparent regarding AI actions and data privacy. Quer – Perplexity introduces Comet: A smarter AI browser that thinks along.
Source: mygreatlearning.com
Security Analysis
While Perplexity's product page highlights convenience, automation, and productivity, several security firms have recently made a critical vulnerability in the Comet AI Browser public.
Security vulnerability surrounding the MCP API: How risky is the Comet AI Browser?
At its core is a hidden interface called MCP API (chrome.perplexity.mcp.addStdioServer), through which embedded extensions can execute local system commands – something classic browsers deliberately prevent. The security firm SquareX and other researchers show that this API can be addressed via the agentic extensions used by Comet, which are connected to the perplexity.ai page in the background. TechRadar and other media report on proof-of-concept attacks where a manipulated extension setup and a compromised or prepared page on perplexity.ai are used to execute malware like WannaCry via the MCP API.
SecurityWeek notes that while Perplexity has taken measures to block the specific attack chain demonstrated by SquareX, it publicly denies the severity of the vulnerability. Help Net Security and other industry publications emphasize that the existence of such a powerful API in the browser context is in itself a breach of established security principles, regardless of whether the exploit path now described has been fully closed. What is primarily relevant in practice is that a successful attack can lead to complete device takeover, according to reports, if a victim uses a prepared page or a manipulated extension setup.
For everyday use, this means: users of Comet should consistently install browser updates, set assistant permissions restrictively, and currently, it is better to perform security-critical tasks such as online banking or administrative activities on company computers using a more conservatively configured standard browser. This precaution arises directly from the described attack possibilities and is recommended by several security commentators.
Quer – The homepage of Perplexity's Comet AI Browser.
The homepage of Perplexity's Comet AI Browser.
Source: beebom.com
Parallel to the technical discussion, a legal dispute is underway that is directly related to the agentic capabilities of the Comet AI Browser.
Amazon vs. Comet AI Browser: Agentic Shopping Tools Under Fire
Amazon has warned Perplexity over the automated shopping feature in Comet and subsequently filed a lawsuit. Amazon accuses Perplexity of using Amazon accounts without sufficient disclosure, masking automated browsing as human behavior, and thus violating both terms of service and US laws such as the Computer Fraud and Abuse Act. Perplexity responds with the blog post
"Bullying is Not Innovation"
and calls Amazon's actions an attempt to block AI-powered shopping assistants and protect its own advertising-funded business model. Reports from Business Insider and other media paint a picture of a fundamental dispute over whether users should have the right to use their own AI agents on large platforms, as long as their login credentials remain local. For Comet users, this dispute is relevant for two reasons: on the one hand, it shows how far the browser intervenes in established business models with its shopping agent; on the other hand, it clarifies that agentic AI functions will increasingly be tied to platform rules, lawsuits, and compliance requirements in the future. Quer – Registration for the Comet AI Browser waiting list.
Registration for the Comet AI Browser waiting list.
Source: testingcatalog.com
The Comet AI Browser offers a range of features that can make everyday life easier, but also carries specific risks.
FAQ about the Comet AI Browser (as of this week)
Is the Comet AI Browser free?
Downloading Comet for Windows, macOS, and Android is free. Perplexity lifted the previous restriction to higher-priced plans and invitations in October. The company generates revenue through Perplexity Pro and Max subscriptions, as well as options like "Comet Plus," which unlock additional features such as background assistants and higher usage quotas.
On which platforms does Comet currently run?
Comet is officially available for Windows and macOS. As of this week, the Comet AI Browser is also available on the Google Play Store, running on current Android devices. TechCrunch reports that an iOS version is "in the works" but has no release date yet.
What exactly does the Comet Assistant do?
The Comet Assistant is integrated into the browser interface and can perform tasks such as summarizing web pages, structuring research topics, creating shopping lists, preparing emails, and scheduling appointments directly within the browser. Current tests show that Comet is particularly effective for structured tasks like budget templates, shopping lists, appointment organization, and summarizing news articles, while creative tasks like training plans or very personal emails still tend to be generic. With the latest updates, the assistant can execute complex workflows across multiple tabs in parallel and explicitly asks for permission before acting on sensitive actions – such as forms or bookings.
How secure is the Comet AI Browser in practical use?
Comet comes with an ad and tracker blocker by default, which is active from the moment the browser starts; these options can be controlled via settings and the new Privacy Snapshot widget. Perplexity emphasizes that central data processing, such as passwords, remains local on the device, and the assistant only accesses personal services with explicit permissions. On the other hand, there are the reports published this week about the MCP API, which can allow embedded extensions system access if an attack is successfully exploited. According to SecurityWeek, Perplexity has taken countermeasures against the specific exploit chain, but disputes the claim that Comet fundamentally breaks the security models of classic browsers.
For everyday research, reading, and organization tasks, Comet is thus well usable, as long as users install updates promptly and grant the assistant far-reaching rights only where they are truly needed – especially not on security-critical pages like banking portals or internal admin interfaces. This recommendation follows directly from the nature of the described attacks and the comments of security researchers.
Who is the Comet AI Browser currently worth it for?
Anyone who does a lot of research, structures texts and web pages, summarizes emails, or works through to-do lists in the browser will benefit greatly from the close integration of the surfing window and AI assistant – especially in conjunction with the desktop and new Android app. On the other hand, those who work in strictly regulated environments or have particularly high security requirements will currently tend to use Comet in addition to classic browsers until Perplexity shows in detail and transparently how the MCP issue will be resolved in the long term.
Conclusion & Outlook
Over these two weeks, the Comet AI Browser clearly shows where browsing can evolve – and what tensions that creates. On the one hand, with the Android app and the upgraded Comet Assistant, a tool is emerging that can significantly shorten traditional tab work, research, and daily routine tasks. On the other hand, there is serious security debate around the MCP API and a prominent legal dispute with Amazon that is renegotiating the boundaries of agentic AI tools in e-commerce.