BrowseSafe++: 38,675 paired web pages with prompt injections mostly seen in the wild, plus small detectors for browser agents
- Why it matters: paired clean and attacked pages let you measure false positives on the same page. The adaptive results show that defenses scored only against static, replayed injections overstate how well they hold up.
- If you run browser agents: test the guard against every view your agent consumes (DOM, accessibility tree, screenshot), not just text, and re-test after attacks are adapted.
- These are the authors' own results and haven't been independently reproduced.
Sources: arXiv 2610.17457: BrowseSafe++: Benchmarking Prompt Injection Detection Across Web Contexts, Languages, and Browser Views · Perplexity blog: BrowseSafe++