For years, the workday looked remarkably consistent. Employees logged into devices, opened browsers and toggled across a dozen disconnected applications. Users acted as the bridge between apps, copying from one tab and pasting into another. Now, agentic workflows that are faster and allow employees to be even more productive are on the rise. Employees take the lead in defining outcomes of workflows, and autonomous AI agents can execute multi-step business processes end-to-end. This saves time spent on manual redundant tasks and allows the workforce to focus on more complex and strategic work.

Employees’ endpoints require an updated approach and architecture to enable the productivity benefits of this new way of working while ensuring security. Our collection of Google Intelligent Endpoints support this evolution by offering secure end-user computing solutions across our enterprise browser, operating systems, and hardware, all unified by built-in contextual intelligence, powerful AI models, and flexible management options for enforcing policies. An intelligent endpoint strategy transforms workforce productivity, reduces security risks, and prepares enterprises for the agentic AI era and beyond.

Scaling daily workflows for time savings

Supercharging productivity by embedding intelligence directly into the platforms and apps where work naturally happens is at the core of Google’s end user computing strategy, making the browser a critical intelligent endpoint.

Earlier this year, we brought agentic capabilities directly to the browser in Chrome to allow employees to automate complex, multi-step tasks across multiple tabs natively. Whether it’s automating lead tracking in CRM tools or orchestrating workflows in tools like Asana, task automation built into the browser gives employees time back from repeated tasks that take place across the web.

The new enterprise Skills library also helps Gemini in Chrome offer business users more help for repeatable tasks. Through our trusted tester program, IT teams can now also publish pre-configured, IT-vetted AI Skills directly to a dedicated library, giving managed users a central hub to discover and deploy standardized, company-approved workflows. This makes it easier for employees to get help with everyday tasks, without having to write prompts from scratch.

Moving to modern, secure endpoints doesn't mean compromising on your core business tools or existing systems. Chrome Enterprise Premium provides a seamless, highly secure foundation for your legacy applications as well. Cameyo by Google allows organizations to stream any legacy application directly inside a Chrome tab.

This powerful combination ensures your legacy apps inherit browser-based security protections through Chrome Enterprise Premium, alongside the productivity-boosting AI and agentic capabilities of Gemini in Chrome, breathing new life into older tools without forcing employees to leave the browser.

Strengthening proactive security and visibility

Today, a new threat vector has emerged. Employees who want to get work done, but accidentally leak sensitive data into public AI tools. In fact, nearly 80% of workers are bringing their own AI tools to work, and over half report pasting sensitive intellectual property and corporate data directly into public systems.* Google Intelligent Endpoints help keep organizations more secure by protecting data across the operating system, browser, and user levels, offering a scaled defense against modern threat vectors, without slowing down employees.

Using Chrome Enterprise Premium, IT and security teams can already enforce strict, granular data loss prevention rules to protect corporate data within the browser. While native third-party LLM applications may offer basic data privacy settings, they lack the active DLP controls needed to prevent data exfiltration. Without Chrome Enterprise Premium, enterprises are forced to use complex security solutions, and even those solutions often fail to cover unmanaged or personal devices.

IT departments can soon deploy DLP rules that actively detect and block attempts to copy sensitive records at the copy trigger level in the browser, ensuring that sensitive data is prevented from even reaching the system clipboard. This capability is even more critical in protecting company intellectual property across AI services. Many more browser-based DLP capabilities have also been extended to mobile devices, including file downloads, pasted content and screenshot blocking and sharing, further closing the security gap across devices.

We’ve also made improvements to Chrome Enterprise’s GenAI reporting capabilities. IT and security teams can view comprehensive, real-time breakdown of AI and SaaS usage across the web, and now they can also take corrective action right from the report. With a few clicks, IT can block access to risky apps, update security policies, or redirect users to company-approved AI alternatives.

Powering your workforce with next-gen devices

Google Intelligent Endpoints deliver continuity for employees across a wide variety of modern devices designed for the next-generation workloads. They bring together the benefits of proactive and consistent experiences as people work across different devices throughout their work day.

Chromebook Plus already offers the performance and integrated Gemini capabilities on managed devices to assist users within their existing workflows today, bringing more help to employees right in the app, file or tab they are working in. And earlier this week, we announced the Googlebook, the perfect companion for those building and working at the frontier. They will be available in October, with enterprise capabilities coming in the second half of 2027.

Googlebooks will bring even more interoperability benefits across our Android ecosystem, including mobile devices. The latest Google Pixel 11, Pixel 11 Pro, Pixel 11 Pro XL, Pixel 11 Pro Fold and Samsung Galaxy S26 Ultra, Samsung Galaxy Z Fold 8, Samsung Galaxy Z Fold 8 Ultra, and Samsung Galaxy XCover7 Pro are all devices that increase productivity and allow for seamless work. With Android Enterprise, IT teams can manage the AI capabilities on all of these devices to ensure that while their company is advancing, data remains secure and protected.

Android continues to expand its multi-form factor offerings to help employees extend their work effortlessly across different device types. Our Android XR platform transforms lightweight enterprise-grade smart headsets and wired glasses into private, multi-monitor workstations anywhere employees go. IT departments can seamlessly provision, secure, and deploy these spatial computing devices using the exact same mobile enterprise controls they already use to manage corporate smartphones and tablets. Check out our blog for more news on Android Enterprise.

Intelligent endpoints can also drive more human-to-human connection. To bridge the distance for distributed teams, Google Beam, our true-to-life 3D video communication platform powered by Google AI, delivers an immersive meeting experience that makes employees feel as if they are together in the same room. These devices are expanding to more countries through a wider partner network to help more organizations elevate their virtual meeting experiences.

How to get started with Google Intelligent Endpoints

There are several ways to learn more about Google Intelligent Endpoints.

• Learn more about how our platforms and devices come together as Google Intelligent endpoints here.
• Ready to get started? Start your Chrome Enterprise Premium trial to get advanced in-browser protections.
• Lenovo Digital Workplace Solutions with Google is also bringing the entire workplace together as one secure, modular solution. You can simplify IT and govern AI with confidence, extending at your own pace, with one accountable partner doing the heavy lifting.

*Forbes 2026 "BYO AI" Workplace Report & Airia Shadow AI Statistics Report

Editor's Note: Our Future Mode series will give businesses insight into how Chrome Enterprise is approaching AI in the browser. Stay tuned for more blogs in this series.

Future Mode Part 2: The foundation for securing agentic browsing

Today, autonomous AI agents aren't just drafting emails. They’re navigating SaaS applications, synthesizing data across multiple tabs, and completing multi-step tasks on our behalf. Because the majority of enterprise work continues to happen on the web, the browser has naturally become a primary operating ground for these autonomous workflows.

But this raises a critical mandate for IT leaders: as the line between human action and automated execution blurs, organizations need robust data protections in place for both users and agents. When an AI agent acts dynamically on an employee's behalf, both the user's identity and enterprise data must be secured. At Google, when we think about efficient workflows, we see the browser as one of the easiest and safest places for employees and agents to collaborate. In this blog we’ll take a look at how Chrome Enterprise is evolving its security for the agentic era.

The browser advantage

The browser is uniquely positioned to underpin this next wave of productivity workflows because it holds the context of an employee’s workday. Employees signed into Chrome are already getting the access and policy requirements set by their organization. As employees use task automation capabilities like auto browse, Chrome understands the shared tabs, open documents, and the SaaS applications the employee is currently using. By anchoring employees’ agentic workflows inside the browser, they benefit from real-time situational awareness and their corporate identity.

Let’s look at some examples. An agent can source top talent for recruiters by scanning public profiles on professional networking sites and automatically creating candidate files in their web-based Applicant Tracking System. Finance and operations teams can offload the tedious "portal hopping" required for monthly vendor management by having a browser-based agent securely log into multiple billing platforms, retrieve and reconcile PDF invoices.

Enterprise-grade controls with Chrome Enterprise

Empowering employees with AI agents means balancing security and automation. As an agent navigates between corporate CRMs, internal cloud docs, and public web apps to synthesize information, it creates new, complex vectors for potential data exposure.

Chrome Enterprise Premium brings advanced Data Loss Prevention (DLP) directly into the browser workspace so IT and security teams can enforce strict data governance on agentic behaviors in the same way they are enforced on risky user actions.

• Chrome Enterprise Premium inspects agentic data flows in real time across multiple defense layers. While built-in DLP policies block unauthorized attempts to transfer sensitive IP, PII, or financial data to public LLMs, comprehensive extension controls also let organizations manage permissions and highlight risk signals to prevent unauthorized DOM scraping.
• The browser extends context aware access controls from a user to their agentic activity. If an employee doesn't have authorization to access or export specific data, their AI agents won't either.

Continuous momentum in browser security

Chrome is doing a variety of things to make secure agentic collaboration possible, building on a long history of advancing web safety. We are actively launching capabilities to give IT leaders the visibility they need for this new era. For example, we launched analogous extension visibility earlier this year—giving organizations deep visibility into how software agents access and handle sensitive data—and we have many more enterprise guardrails in the works.

As we extend these protections to agentic browsing, we’ve designed a robust, layered architecture built on three core pillars to protect users and agents alike from emerging threats like indirect prompt injection:

1. Partially inspired by Google DeepMind’s CaMeL research, the User Alignment Critic with Chrome auto browse is an isolated, high-trust system model that acts as a secure gatekeeper. It analyzes only the metadata of a proposed action to ensure it aligns with the user’s original goal. If an injection attack tries to hijack the agent, the Critic vetoes the action instantly.
2. Site Isolation is the bedrock of Chrome’s security. We are extending this by architecturally limiting an agent's playground to origins strictly relevant to the immediate task. The browser prevents a compromised agent from acting arbitrarily on unrelated, logged-in sites.
3. As the agent operates, it logs its exact logic in a work log in the browser tab, allowing the employee to intercede at any moment and keeping the employee in the loop. For example, Chrome’s auto browse intentionally stops at critical junctures, like finalizing a contract, submitting a financial transaction, or executing a mass email. Chrome acts as the enforcement mechanism, requiring explicit human approval before any high-stakes action is committed. Employees also get visibility into agent’s actions via Chrome History, where background pages navigated by the agent are explicitly tagged as agent actions.

This philosophy of transparent, human-centric AI assistance is also what drives our broader ecosystem innovation, including Gemini Spark. To make the Gemini Spark experience even more powerful, we've just launched a new direct Chrome integration.

Our commitment to agentic security and looking forward

To ensure our defenses are ironclad, we have deployed automated machine-learning red-teaming systems to continuously test Chrome against synthetic threats. We have also expanded our Vulnerability Rewards Program (VRP) to include Chrome's agentic capabilities, offering up to $20,000 for researchers who identify verified breaches in our agent security boundaries.

The future of productivity is about secure, seamless collaboration. By extending core browser isolation principles, launching foundational visibility controls, and bringing DLP to agentic workflows, Chrome Enterprise ensures that enterprises can embrace the next generation of AI productivity without compromising on security, visibility, or control—allowing enterprises to innovate safely.