Steel Review 2026: Browser Infrastructure for AI Agents and Pricing

Steel is a strong infrastructure candidate for developers who need browsers that agents can connect to through Playwright, Selenium, or computer-use models without operating the browser fleet themselves. Persistent profiles, replays, proxies, and credential injection address real production gaps. They also create a high-risk control surface: authenticated browser state can authorize money movement, messages, downloads, and data exposure, so tenant isolation and action policy matter as much as browser uptime.

• Developers deploying browser and computer-use agents
• Automations requiring persistent authenticated sessions
• Teams needing replayable managed browsers

• Unauthorized automation or terms violations
• Consequential writes without human approval
• Simple HTTP extraction that does not need a browser

Steel provides managed browser sessions, Chrome DevTools connections, one-shot scrape, screenshot, and PDF endpoints, session replays, files, extensions, residential proxies, CAPTCHA solving, persistent profiles, dedicated IPs, and a beta credentials API that injects passwords and TOTP codes without returning secrets to the agent. SDKs cover TypeScript, Python, Rust, and Go, while integrations include common browser libraries and computer-use models. The core sessions product is open source and self-hostable.

A working browser does not make an agent authorized, correct, or compliant with a site's terms. Persistent profiles store cookies, local state, extensions, and potentially credentials; compromised prompts or tools can still perform harmful actions after login even if the raw secret is hidden. Costs span browser minutes, proxy traffic, CAPTCHA solves, tool calls, dedicated IPs, and the $250 Scale base. Launch retention is seven days, and sessions are limited to 15 minutes.

Steel Launch is $0 plus usage with $30 in one-time credits valid for 90 days, ten concurrent sessions, and 15-minute sessions. Listed Launch rates include $0.10 per browser hour, $10 per GB of proxy bandwidth, $3 per 1,000 CAPTCHA solves, and $5 per 1,000 one-shot browser-tool calls. Scale is $250 monthly plus usage with $100 monthly credits, 100 concurrent sessions, one-hour sessions, and lower browser, proxy, and CAPTCHA rates. Enterprise is custom. Browser time is billed by the minute and rounded up. Reviewed September 9, 2026.

Run 500 approved tasks across public, authenticated, file-download, CAPTCHA, multi-tab, and failure-recovery cases. Use separate least-privilege test accounts and approval-gate every write. Measure completion, wrong-action and duplicate-action rates, credential exposure, tenant isolation, replay usefulness, profile corruption, blocked pages, proxy bandwidth, CAPTCHA solves, browser minutes, cold starts, p95 latency, and total cost per safely completed task. Inject prompt attacks and provider outages before production approval.

Steel earns a pilot for browser-agent teams that need observable, persistent cloud sessions and do not want to manage Chromium infrastructure. Start with read-only tasks, isolate one profile and identity per account, keep spending and domain allowlists tight, and treat credential injection as secret protection—not permission to let an agent act without review.

This is a research-based product assessment, not a claim of hands-on long-term testing. Product, pricing, privacy, security, ownership, and usage claims were checked against the first-party sources below on September 9, 2026. Verify current terms and run the proposed test with approved data before adoption.