Open Operator, Serverless Browsers and the Future of Computer-Using Agents
Summary
Browserbase’s wager is that the browser becomes a core AI infrastructure primitive because LLMs can adapt automation to websites that constantly change. A task that once required 100 site-specific scripts can become one script that generates the right actions in real time; meanwhile, modern sites such as Airbnb require JavaScript hydration, making an actual browser indispensable. Paul Klein calls Browserbase “the web browser for your AI.”
The moat is making a stateful, resource-heavy browser feel serverless without pretending the underlying system is serverless. Chrome exceeds Lambda’s 250 MB limit and performs poorly on its limited compute, while production workloads demand containers, regional capacity, observability, fonts, extensions and session persistence. Browserbase therefore moved below Fargate to Kubernetes and Firecracker, with predictive scaling; “thousands of browsers in milliseconds” is a best-case scenario, not a guarantee under 10,000 requests.
Stagehand is the open-source distribution layer, while Browserbase monetizes the costly infrastructure beneath it. Its natural-language APIs—act, extract and observe—let developers incorporate browser tools into their own agent loops without generating Playwright code themselves. “Stagehand isn’t a web agent. It’s a framework for building web agents,” and users may run it locally with their own model key.
OpenAI’s Operator validates the category more than it threatens Browserbase, but current computer-use UX remains too unreliable for habitual use. Both swyx and Paul tried Operator and did not return to it; Paul argues coordinate-based clicking is less dependable than Stagehand’s DOM-anchored actions. Open Operator is deliberately a reference implementation, while swyx expects API-driven operators to become meaningful in roughly five years once reliability improves.
Authentication, not CAPTCHAs, may become the durable control plane for agentic commerce and delegated work. Paul expects an OAuth-like flow in which a user approves an agent, limits its scopes and preserves a separate identity—allowing it, for example, to book an Airbnb without messaging anyone. CAPTCHA solving and proxy routing remain necessary infrastructure today, but Browserbase’s longer-term ambition is to become an “arbiter of good bots.”
Browser automation is the core workload; bulk scraping should use a cheaper waterfall before invoking a full browser. Paul recommends trying curl first, then a scraping-specific API, and only then “bring out the heavy hitter” when JavaScript hydration or near-certain execution is required. Against full virtual desktops, his economic claim is that a specialized browser can deliver “90%” of the needed functionality at “10%” of the cost, while Windows-only legacy software remains an important exception.
The larger thesis is that “the future of software is software using software,” creating new infrastructure, interfaces and potentially enormous markets. Applications will launch asynchronous work across Gmail, accounting systems and web forms, with live views and human intervention when agents encounter 2FA or other handoffs. Paul says Browserbase will become a billion-dollar company one day and suggests checking back in five years; the company was near its first birthday with a 20-person team, a Series A and hundreds of AI-company customers.
Deep dive
1. LLMs turned the browser into an AI primitive
Paul’s definition is intentionally infrastructural: Browserbase is “the web browser for your AI,” supplying headless browsers through APIs and SDKs so applications can click buttons, complete forms and retrieve dynamic web content without operating their own container fleet.
The founder-market fit is unusually literal. Paul previously built internal headless-browser infrastructure as Stream Club’s CTO; Mux wanted that technology badly enough to acquire the company, and Paul told his co-founders he would only start again if it were a browser-infrastructure business.
Two changes made the timing work. Modern pages often require JavaScript hydration—Airbnb was Paul’s example—while LLMs can interpret the resulting content and generate site-specific automation dynamically. Booking demos across 100 sites once meant maintaining 100 scripts; now one higher-level script can generate the necessary actions for each site.
Paul corrected his own early thesis on multimodality: he expected structured HTML to dominate because language models understand structured text, and “didn’t think vision would be as big of a driver.” Computer-use models advanced much faster than he expected, making browser rendering and screenshots another demand driver.
2. A serverless browser is really a difficult stateful system
Paul walked through the infrastructure escalation: a local Puppeteer, Playwright or Selenium script works until production requires Chrome in the cloud. Chrome exceeds Lambda’s 250 MB limit, lighter builds and layers only partly help, and Lambda’s constrained compute leaves a resource-intensive browser running slowly.
Moving to EC2 solves one session, not thousands. Multi-user demand brings containers, Kubernetes and a stateful distributed system whose connections must survive while each user works; then fonts, emoji rendering, extensions, ad blocking, video recording and observability turn a simple script into a “giant monster” of a project.
swyx challenged the serverless promise directly: surely instant capacity requires an expensive warm pool. Paul agreed—“how do you offer a serverless-like experience with something that is clearly not serverless?”—and cited dense browser packing, predictive scaling, multiple regions and routing for lower latency as the answer. A burst of 10,000 requests can still incur slower cold starts.
Browserbase began on ECS and Fargate and briefly became, Paul said, the largest Fargate customer in its region. It later moved lower, using Kubernetes and Firecracker for control, speed and multitenancy: infrastructure vendors cannot excuse downtime by pointing upstream, so Browserbase increasingly owns anything in its critical path.
3. Reliability extends from browser containers into the proxy supply chain
Geographic correctness requires both browser locale and network origin. Customers can select regions, while proxies make a European session appear to originate in the United States when sites route or filter by IP; Browserbase also tries to schedule sessions near their destination to reduce round-trip latency.
Alessio suspected proxying might be harder than browser orchestration; Paul’s answer was “layers of hard.” Browserbase does not own proxies—it aggregates multiple providers, audits sourcing so capacity is not secretly “running on someone’s TV,” monitors failures and reroutes traffic when a counterparty has a bad day.
The same abstraction covers CAPTCHA solvers: Browserbase integrates several vendors, maintains some capabilities internally and restricts sensitive features to plans where it can understand the customer. The product value is partly institutional—turning sketchy, poorly documented purchases into monitored infrastructure with provider diligence under Browserbase’s SOC 2 obligations.
4. Agent authentication could make CAPTCHA solving transitional
Paul’s long-term goal is to identify Browserbase traffic as legitimate and become an “arbiter of good bots,” potentially cooperating with companies such as Cloudflare. Today’s CAPTCHAs treat every bot as hostile, but agents introduce a distinction between authorized automation and abuse.
His stronger call is that authentication will block agents more often than CAPTCHAs. An agent-auth flow might notify a user that a Browserbase agent wants to access Airbnb, then proceed only after approval—without sharing a password or pretending the agent is the human.
swyx sharpened the identity model: every human token could have a paired but distinct agent token, comparable to a main social profile and its alt account. Paul mapped that onto OAuth and role-based access control: an agent might receive permission to book an apartment but not message people.
5. Human takeover is a feature, not an admission of failure
Because users initially distrust agents, Browserbase’s live view streams a cloud browser into an application iframe. Two-way control then lets a person pause automation, click or type directly and return control—a “browser within a browser, yo.”
Underneath, Browserbase uses Chrome DevTools Protocol’s
Page.startScreencastcapability, sending PNGs over the wire and relaying interaction events. Paul contrasted that with Operator’s VNC-style view, but both support the same pattern: “Pause. Can you do something in this window, human? Okay, great. Resume.”The concrete need is unresolved CAPTCHAs, 2FA codes and other handoffs where building a custom UI would be wasteful. “Web agents need human-in-the-loop type workflows still”; exposing the whole browser is often the simplest trustworthy interface.
swyx proposed forking one browser state into 100 parallel branches. Paul liked the agentic search logic but admitted the implementation is unresolved: “Serialize the state, restore state. I don’t know.” Copying a page object is easy; duplicating a half-completed form may require freezing and copying an entire container’s memory.
6. Stagehand makes natural language a browser API
Paul built Stagehand after repeatedly sending DOM content to an LLM and asking it to generate Playwright. His conclusion was that natural language belonged inside the automation framework itself, not in bespoke glue code surrounding Puppeteer, Playwright or Selenium.
Its three primitives divide browser work cleanly. Act executes instructions such as clicking or filling forms; extract returns structured data, optionally against a Zod schema; observe enumerates relevant possible actions so an external agent loop can select the next step against its higher-level goal.
The architectural boundary is deliberate: “Stagehand isn’t a web agent. It’s a framework for building web agents.” Paul believes agent loops sit near the application because goals and sequencing are application-specific; Stagehand supplies the browser tool without dictating that special sauce.
Stagehand is MIT-licensed, accepts the developer’s model and API key, and can run against a local browser. Browserbase earns money only when users choose its hosted browsers. The current optimization target is reliability over raw speed or cost, making it better suited to agents and automation than industrial-scale scraping.
7. Stagehand’s adaptability should not erase intentional test failures
swyx initially framed an instruction such as “click Quick Start” as an implementation-free integration test that survives DOM changes. Paul pushed back: when page structure changes unexpectedly, a conventional test should fail rather than let AI silently reinterpret the intended behavior.
The better testing fit is usability testing, where the question is whether a person-like agent can still complete a task. For strict front-end regression tests, conventional tests and deliberate failures preserve information that adaptive automation could conceal.
The correction exposes a wider product distinction. Stagehand can absorb harmless variation when automating external sites, but that same adaptability is not automatically desirable when a developer owns the interface and needs structural changes surfaced.
8. Operator validates demand while leaving infrastructure gaps open
swyx’s candid review—he tried Operator once, found it “okay” and never used it again—matched Paul’s experience. Paul nevertheless sees computer-use models as important because screenshots plus reasoning enable automation, even if mouse coordinates remain less reliable than actions anchored to DOM elements.
Operator is therefore not a Browserbase killer in Paul’s view; it demonstrates possibility and grows developer interest. He also doubts a major lab can comfortably own proxies and CAPTCHA solving: “OpenAI CAPTCHA solving” would be a damaging headline, while “Browserbase solves CAPTCHAs” attracts little scrutiny. Those are the “icky parts of web automation.”
Open Operator is a reference project, not a move into end-user software. It decomposes a goal into steps, sends screenshots and instructions to an LLM, executes actions through Stagehand and embeds Browserbase’s live view. It does not use a computer-use model.
swyx remained bullish on an eventual Operator API: once reliability arrives—his horizon was five years—background browsers could book restaurants and complete work without constant observation. Browserbase is not pursuing the product route yet; Open Operator is intended as a reusable reference project.
9. Automation, not commodity scraping, drives Browserbase usage
Paul corrected swyx’s assumption that scraping dominates demand: the majority is browser automation, and Browserbase is relatively expensive for bulk collection. The three broad workloads are automation, web-data retrieval and agent applications that require a browser tool.
His cost-aware scraping stack is a waterfall: first try curl, then a specialist scraping API such as ScrapingBee, and only afterward “bring out the heavy hitter.” Browserbase is justified when JavaScript must hydrate the page or the request needs to work reliably every time.
Beni supplied the best long-tail example without using AI at all. A food-stamp recipient photographs a receipt, and Beni’s maintained scripts submit the rebate claim and deposit the proceeds. For Paul, the opportunity is the “millions and millions of tedious forms”—from benefit claims to O-1 visas—whose complexity consumes human time.
10. Specialized browsers can undercut full virtual computers
swyx mapped an emerging stack of search APIs, extractors, browsers, code sandboxes and full virtual machines, then asked whether specialists coexist or converge. Paul called it non-zero-sum: the addressable workload comprises “trillions of hours” of online knowledge work, leaving room for both focused primitives and bundled agent platforms.
His argument for specialization is economic. Most early computer-use demonstrations controlled a browser, so running an entire GUI operating system is often unnecessary; efficiently orchestrated browsers can provide “90%” of the relevant functionality at “10%” of the cost.
The hedge matters: some legacy EHR and enterprise applications require Windows or Internet Explorer, making full operating systems legitimate tools. Paul expects specialists such as PIG.dev to serve those workloads while Browserbase concentrates on the browser as a sufficiently complex standalone primitive.
11. The company is organized around “software using software”
Paul’s governing thesis is that “the future of software is software using software.” An accounting product will not merely compute or transform text; one click might open Gmail, find a receipt, upload it and comment on the transaction through a mixture of APIs and browser actions.
That shift demands asynchronous interfaces because AI is slower, chat surfaces for intent and human-in-the-loop controls for exceptions. Paul considers starting a company “a means of last resort,” but believes these new software patterns require infrastructure that did not yet exist.
Browserbase was near its first birthday with 20 employees, a Series A and hundreds of AI-company customers; it had used “$0 on AI spend” in its AI Grant batch because the core business is infrastructure. Paul said Browserbase will become a billion-dollar company one day and suggested checking back in five years—“if I’m a PM at Coinbase, then something went wrong.”
As a solo founder, Paul calls the company a “benevolent dictatorship”: fewer alignment layers permit speed, while strong hires own daily decisions. The team works in person Monday through Friday, roughly 10:00 AM to 5:00 or 6:00 rather than 9/9/6; “weekends are for fun work,” when employees explore ideas outside the roadmap.