Perplexity Comet: Testing the AI Agent Browser in Practice

From Search Engine to Digital Team Mate  

Perplexity has taken a fundamental step with Comet: the browser evolves from a passive information tool into a proactive AI agent. The central innovation lies in the ability to understand context across multiple browser tabs and execute complex, multi-step tasks autonomously. Instead of processing isolated queries, Comet acts as a coherent assistant overseeing the entire workspace.

In this article, we present 10 specialised use cases, analyse the underlying technology, and evaluate the risks from an EU data protection perspective.

Video Tutorial: 10 AI Agents at a Glance  

The complete tutorial shows all 10 agents in practice. For the individual use cases, you will find the video with the appropriate timestamp for direct access.

Table of Contents  

10 Specialised Use Cases for Everyday Work  

1. Live Marketing Intelligence Agent  

Core function: Real-time competitor analysis across multiple simultaneously open websites with automated generation of professional market analysis reports.

The Live Marketing Intelligence Agent revolutionises how companies implement competitor analyses. Instead of days of manual research and documentation, this agent captures and evaluates all relevant competitor information fully automatically – in a fraction of the time.

Business Impact:

• Time savings: Reduced from 8-12 hours of manual work to 15-20 minutes (96% time savings)
• Consistency: Standardised analysis framework ensures comparable results over time
• Scalability: Monitoring of 10+ competitors without proportional resource expenditure
• Timeliness: Option for scheduled, regular updates for continuous market observation

2. Research Agent: Structure Instead of Chaos  

Core function: Transformation of dozens of cluttered tabs into a structured knowledge base with intelligent source management.

Anyone who researches intensively knows the problem: after a short time, 30, 40, or more browser tabs pile up, the overview is lost, and valuable information disappears into digital chaos. Comet's Research Agent is the solution to this universal problem.

Transformative Value: The Research Agent turns research from a chaotic data collection into a structured knowledge acquisition process. The combination of organisation, synthesis, and verification creates a professional research workflow that is both more efficient and of higher quality than traditional manual approaches.

3. News Synthesiser: Automated Information Curation  

Core function: Continuous aggregation of industry-relevant news into a central knowledge base with automated qualification and categorisation.

For professionals and executives, it is essential to always be informed about the latest developments in their industry. The News Synthesiser agent fully automates this workflow and creates a central, constantly updated knowledge hub.

Strategic Benefit: This agent transforms information overload into curated insights. Instead of spending time daily manually sifting through news, you receive an automatically updated, relevance-filtered news feed. The result: you stay informed without being overwhelmed, and important developments are never overlooked.

4. Lead Monitoring Agent: From Information to Opportunity  

Core function: Automatic identification of qualified leads in online communities through AI-supported analysis of purchase intent signals.

This agent marks the shift from passive information consumption to active opportunity generation. It specialises in systematically searching online forums and identifying discussions in which users signal a high purchase intent for your product category.

Business Value: An autonomous "mini lead engine" that works 24/7. Instead of manually scouring thousands of posts, you only receive highly qualified opportunities. This is particularly valuable for: B2B SaaS companies, agencies with a clearly defined ICP, product launches (monitoring market demand), and community-led growth strategies.

5. Sales Prospecting Agent: Personalisation at the Touch of a Button  

Core function: Automated identification of target companies and creation of highly personalised outreach emails based on real company signals.

Effective sales work is based on two pillars: the identification of the right target customers and a personalised approach that demonstrates relevance. This agent automates both steps and accelerates the outreach process by a factor of 10-20x.

ROI Calculation:

• Time savings: Manual research + drafting: 20-30 min/prospect. With agent: 2-3 min review time. For 50 prospects/week: 15-20 hours saved
• Quality increase: Consistently high personalisation quality instead of fluctuating quality with manual mass work
• Response rate: Genuine personalisation can increase response rates from under 5% to 15-25%
• Scalability: Sales teams can triple or quintuple output per employee

6. Target Audience Research: Authentic Customer Voice  

Core function: Systematic extraction of authentic customer voices from social media and community platforms for data-driven product and marketing decisions.

A deep understanding of the true "pain points" of customers is the foundation for successful products and persuasive marketing. Traditional methods (interviews, surveys), however, are time-consuming and often subject to response bias. The Target Audience Research agent automates the collection of unfiltered, authentic customer voices from organic online discussions.

Practical Use Cases:

• Product Development: Feature prioritisation based on real demand instead of assumptions
• Messaging & Positioning: Copy that speaks in the language of the target audience
• Competitive Intelligence: Understanding why customers switch to/from competitors
• Content Strategy: Deriving blog topics and FAQ content directly from customer questions
• ICP Validation: Checking whether your assumptions about pain points are correct

Gold Standard Data: These organic customer voices are significantly more valuable than survey responses because they are: unfiltered and honest (no social desirability bias), embedded in a real context, reflect the language actually used, and are accessible free of charge (no incentivisation necessary).

7. SEO Content Brief Agent: Reverse Engineering AI Overviews  

Core function: Direct analysis of Google's AI search results (SGE/AI Overviews) – a capability that most tools lack.

Workflow:

1. Analyse AI search: Agent is instructed to examine Google's AI Overview for a search query
2. Pattern recognition: Systematic review including cited sources ("Citations"), identification of preferred patterns
3. Content brief: Detailed SEO brief for optimal positioning for AI search results

Competitive advantage: Even paid agents like ChatGPT do not have direct access to Google AI Overviews. This is a strategic edge.

8. Conversion Optimisation Agent: Automating Your Own SOPs  

Core function: Systematic identification of conversion friction points by executing your own documented workflows.

Innovative Approach:

Revolution: You are not limited to built-in AI capabilities – every documented SOP becomes an automated task.

9. Talent Sourcing Agent: Automated Pre-selection  

Core function: Automated searching of job platforms and filtering of qualified candidates.

Steps:

1. Requirement profile: Detailed criteria (experience, tools, salary), platform selection (e.g., onlinejobs.ph)
2. Search & filtering: Agent does the heavy lifting of pre-selection
3. Result: Ranked table of 10 qualified profiles including links

Recommendation: Handle the first step of outreach manually and personally.

10. Executive Assistant Agent: Administrative Efficiency  

Core function: Personal assistant via Google Workspace integration for everyday administrative tasks.

Practical Use Cases:

• Meeting preparation: Calendar check for external appointments, research on participating people and companies (background, current news, key personnel), automatic creation of a briefing in a Google Doc with conversation starters
• Calendar organisation: Search for relevant events (e.g., top 10 marketing conferences of the next 6 months), automatic entry with all details (title, location, link, description)
• Research briefings: Compilation of information on topics, people, or companies in a structured, presentation-ready format
• Email management: Analysis of emails, answering questions about email content, extraction of action items
• Document management: Search within Google Drive, summaries of documents, organisation by projects

Technological Context: Multi-Agent Architecture  

Comet's performance is based on four established design patterns of generative autonomous agents:

These patterns make Comet powerful. However, they are also the primary attack surface for security risks.

Security Risk: Indirect Prompt Injection  

How does the attack work?  

With indirect prompt injection, attackers place hidden commands in websites, emails, or social media comments. When the AI agent processes this content (e.g., for summarisation), it reads and executes the hidden instructions – without the user noticing.

The fundamental problem: the agent treats untrusted content provided by third parties with the same authority as direct user commands.

Proven Attacks in Testing  

Guardio successfully tricked the Comet agent into performing the following actions:

The New Threat Landscape  

"In the age of AI versus AI, scammers no longer have to deceive millions of people, but only crack an AI model. Once they succeed, the same exploit can be scaled endlessly."

— Guardio Security Research Team

A successful attack could lead to the theft of extensive personal data from emails or calendars – with severe GDPR consequences.

GDPR Analysis: Data Protection and Compliance  

Data Processing by Perplexity  

According to the official privacy policy, Perplexity processes the following personal data:

Crucial: Interaction data is explicitly used to improve AI models. Users can object to this use in the settings (opt-out).

Legal Assessment According to the HmbBfDI Discussion Paper  

The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) clearly distinguishes between the LLM model and the AI system:

Technical reasoning: Through tokenisation and embedding creation, the direct link to identifiable persons is lost. Embeddings represent statistical language relationships, not original texts.

Practical consequence: Users do not have the right to rectify or delete information "in the model", but they certainly do regarding the interaction data (input/output) stored by Perplexity.

International Data Transfer  

Perplexity uses servers in the US and relies on the following for data transfers from the EU:

• EU-U.S. Data Privacy Framework (DPF)
• Standard Contractual Clauses (SCCs)

Risk Minimisation: Practical Recommendations  

Additional Protective Measures  

Conclusion: Potential with Responsibility  

Perplexity Comet represents the dual nature of modern AI agents:

Potential:

• Fundamental transformation of workflows through intelligent automation
• Autonomous handling of repetitive tasks
• Focus on strategic, creative, and interpersonal tasks

Risks:

• Proven security vulnerabilities through indirect prompt injection
• Complex data protection situation, particularly for EU users
• Need for a GRC-centric approach (Governance, Risk, Compliance)

Strategic Outlook  

The success of AI agents like Comet does not depend solely on technological capabilities. The ability of providers to build trust through robust security architectures and transparent, GDPR-compliant data processing practices is crucial.

The future of knowledge work lies in the strategic orchestration of a portfolio of AI agents as digital specialists – under the premise that governance, risk, and compliance are considered from the very beginning.