Roundup
ChatGPT Atlas Is Gone: The Best AI Browsers to Use Instead
Best AI Tools Editorial·Updated November 7, 2026·5 min read
Roundup
ChatGPT Atlas Is Gone: The Best AI Browsers to Use Instead
The short answer
Perplexity Comet is the most practical replacement for ChatGPT Atlas, which OpenAI shut down on 9 August 2026: it is a free download for Mac, Windows, iOS and Android. Dia suits focused desktop work, and Brave Leo is the privacy pick if you want an assistant without an agent driving your tabs. Prompt injection remains unsolved across every agentic browser.
How we chose
- —Platforms covered
- —Price of the browser and any paid tier
- —Whether an agent acts on your behalf or only assists
- —The vendor’s published data and training stance
- —Public security research against it
Checked: Vendor product and pricing pages, reporting on the Atlas shutdown, and published security research Not done: No hands-on testing or benchmarks. We did not install or run these browsers for this article; descriptions come from vendor pages and the cited research.
Facts as of November 7, 2026 · Nobody paid to be included
What happened to ChatGPT Atlas?
OpenAI confirmed in July 2026 that it was discontinuing ChatGPT Atlas, its standalone browser, and set 9 August 2026 as the date it would stop working. Rather than maintain a separate browser, OpenAI moved Atlas’s ideas into its desktop app, which merges ChatGPT and Codex and gains a built-in browser that can visit sites and log into accounts, and into a cloud browser where agents complete tasks on OpenAI’s servers. There was no one-to-one recreation, so anyone who built a workflow around Atlas has had to move.
That makes Atlas the second OpenAI product retired in 2026, after the Sora app closed in April. It is worth keeping in mind when you pick a replacement: this category is young, and the companies in it are still deciding what an AI browser is for.
The three real alternatives
| Comet | Dia | Brave Leo | |
|---|---|---|---|
| Made by | Perplexity | The Browser Company | Brave |
| Platforms | Mac, Windows, iOS, Android | macOS, Windows | macOS, Windows, Linux, Android, iOS |
| Price | Free download; Pro $17/mo billed annually | Free; Dia for Work price not published | Free; Premium $14.99/mo |
| Agent that acts for you | Yes, multi-step tasks | Work-focused synthesis | No — assistant only |
| Best for | Replacing Atlas outright | Knowledge work on desktop | Privacy without an agent |
Perplexity Comet
Comet is the closest thing to a drop-in Atlas replacement. Perplexity pitches its assistant as something that takes tasks off your hands — researching a question across sources, drafting an email reply, building a study plan from a syllabus or buying a product — with a control to pause it at any point. It ships for Mac, Windows, iOS and Android, the broadest coverage in the category now that Atlas is gone. The browser has been a free download since October 2025; Perplexity Pro, at $17 a month billed annually, raises model access and usage limits, and Max sits above it at $167 a month billed annually.
It is also a browser with a public record of security research against it, including the CometJacking proof-of-concept described below. Read the warning before you let it near a logged-in bank or email tab.
Dia
Dia comes from The Browser Company of New York, and it is aimed at the working day rather than at general browsing. It works across Slack, Notion, Microsoft Teams, Google Workspace and GitHub, and its Morning Brief summarises your calendar, inbox and key links before the day starts. It is a free download for macOS and Windows with no consumer paid tier published; Dia for Work adds team guardrails such as SSO and admin tools, with no public price.
Pick Dia if
Your work lives in documents and team tools on a desktop, and you want help synthesising across them rather than an agent clicking through sites on your behalf.
Brave Leo
Brave Leo is the conservative option, and deliberately so. It is an assistant built into the Brave browser, usable without an account on the free tier, with models from Mixtral, Anthropic’s Claude and Meta’s Llama, and a Bring Your Own Model option for local or remote endpoints. Brave says conversations are not kept for model training and that no personal data is retained. The free tier has usage limits; Leo Premium costs $14.99 a month or $149.99 a year.
Because Leo does not drive the browser for you, it sidesteps most of the risk described below. That is the trade: less capability, far less attack surface.
The security problem nobody has solved
Every agentic browser shares one structural weakness: the agent cannot reliably tell the difference between your instructions and text it reads on a web page. Hide instructions in a page, an email or a calendar invite, and the agent may follow them. This is called prompt injection, and it is not a bug awaiting a patch — OpenAI wrote in December 2025 that prompt injection is unlikely ever to be fully solved, and the UK’s National Cyber Security Centre has warned that such attacks may never be totally mitigated.
Researchers have demonstrated this repeatedly. A University of Washington study published in June 2026 examined seven agentic browsers and found that four — ChatGPT Atlas, Chrome with Gemini, Claude for Chrome and Perplexity Comet — create ways around the same-origin policy that normally stops one site reading another’s data; the team’s proof-of-concept attack succeeded against Atlas. Separately, LayerX’s 2025 CometJacking research showed that a single crafted link could smuggle instructions to Comet’s assistant through URL parameters.
Use an AI browser safely
Keep the agent signed out of anything that matters — banking, primary email, admin consoles. Use a separate browser profile for agent work. Require confirmation before any action that sends a message, moves money or changes a setting. And treat any page the agent visited as untrusted input, not as instructions.
Which should you install?
- 01Replacing Atlas directly, on any platform → Comet.
- 02Desktop knowledge work across Slack, Notion and Workspace → Dia.
- 03You want AI help but no agent acting for you → Brave Leo.
- 04Handling sensitive accounts → keep a normal browser for those, always.
Sources
- 01The Next Web: OpenAI is killing its ChatGPT Atlas browser
- 02Perplexity: Comet
- 03Perplexity: Pricing
- 04Engadget: Perplexity’s Comet AI browser is now free for everyone
- 05Dia browser
- 06Brave: Leo AI assistant
- 07Brave: Premium plans
- 08TechCrunch: OpenAI says AI browsers may always be vulnerable to prompt injection
- 09University of Washington: Some agentic AI browsers come with major cybersecurity risks
- 10Akamai (LayerX): CometJacking
Update log
- November 7, 2026Added sources and a How we chose box. Corrected where Atlas features went (the ChatGPT and Codex desktop app with a built-in browser, plus a cloud browser, per The Next Web) and the University of Washington findings (four of seven browsers; the proof-of-concept succeeded against Atlas). Added Comet’s Max price. Removed unverified claims about Dia profiles, Leo chat history being stored locally and Leo address-bar access.
- October 19, 2026First published.
Spotted an error? Email us. Fixes are listed on our corrections page.
Frequently asked
- Why did OpenAI shut down ChatGPT Atlas?
- OpenAI confirmed the discontinuation in July 2026 and set 9 August 2026 as the shutdown date. Rather than maintain a standalone browser, it moved Atlas’s ideas into its desktop app, which combines ChatGPT and Codex and includes a built-in browser, and into a cloud browser for agents. It did not recreate Atlas feature-for-feature.
- What is the best free replacement for ChatGPT Atlas?
- Perplexity Comet is the most direct replacement and is a free download covering Mac, Windows, iOS and Android. Dia is also free on macOS and Windows but is aimed at work tasks rather than general agentic browsing. Brave Leo is free inside the Brave browser if you want an assistant rather than an agent.
- Are AI browsers safe to use?
- They carry a risk ordinary browsers do not. Prompt injection — hidden instructions in a page that the agent follows — has no complete fix, and OpenAI has said it is unlikely to be fully solved. They are reasonable for low-stakes browsing and research. Do not give an agentic browser access to banking, primary email or admin accounts.
- Does Brave Leo train on my conversations?
- Brave says Leo conversations are not kept for model training and that no personal data is retained. The free tier needs no account; Premium subscribers create an account only to verify their subscription.
Compare head-to-head