Browser agents: it isn't the password that exposes you, it's the session 30 Aug 2026 7 min read Agent Security The agent never has to steal a credential. It works inside a session that is already open, and your IAM cannot see it.