Steel is an open-source browser API and managed cloud runtime for AI agents, offering sessions, browser tools, proxies, CAPTCHA handling, persistent identity, and credential injection.
Direct verdict
Steel earns a pilot for browser-agent teams that need observable, persistent cloud sessions and do not want to manage Chromium infrastructure. Start with read-only tasks, isolate one profile and identity per account, keep spending and domain allowlists tight, and treat credential injection as secret protection—not permission to let an agent act without review.
What to verify
Run 500 approved tasks across public, authenticated, file-download, CAPTCHA, multi-tab, and failure-recovery cases. Use separate least-privilege test accounts and approval-gate every write. Measure completion, wrong-action and duplicate-action rates, credential exposure, tenant isolation, replay usefulness, profile corruption, blocked pages, proxy bandwidth, CAPTCHA solves, browser minutes, cold starts, p95 latency, and total cost per safely completed task. Inject prompt attacks and provider outages before production approval.