---
description: Bifrost is the AI gateway and policy engine for governing AI in the browser, with Bifrost Edge extending those controls to ChatGPT web, Claude.ai, and beyond.
title: "Governing AI in the Browser: ChatGPT, Claude.ai, and Beyond"
image: https://storage.ghost.io/c/84/03/8403f2f6-141c-411a-8f55-a32d4291533e/content/images/2026/07/Governing-AI-in-the-Browser-ChatGPT--Claude.ai--and-Beyond.optimized.png
---

Try Bifrost Enterprise free for 14 days. [Request access](https://www.getmaxim.ai/#enterprise-trial)

[**Bifrost**](https://www.getmaxim.ai)** is the AI gateway and policy engine for governing AI in the browser, with Bifrost Edge extending those controls to ChatGPT web,** [**Claude.ai**](http://Claude.ai)**, and beyond.**

Most enterprise access to generative AI now happens inside the browser. Menlo Security's 2025 research found that roughly [80% of generative AI usage](https://www.menlosecurity.com/press-releases/menlo-securitys-2025-report-uncovers-68-surge-in-shadow-generative-ai-usage-in-the-modern-enterprise) reaches tools like ChatGPT through a web browser, which is also where sensitive data most often leaves the company. Governing AI in the browser is the part of an AI governance program that is hardest to reach: a security team can route its own applications through a gateway, but it has no control over what an employee types into [chatgpt.com](http://chatgpt.com) or [claude.ai](http://claude.ai) on a managed laptop. [Bifrost](https://www.getmaxim.ai), the [open-source AI gateway](https://github.com/maximhq/bifrost) built in Go by Maxim AI, is the control plane where AI policy is defined and enforced, and Bifrost Edge extends that same governance to the browser on every machine. This post explains why browser AI is so difficult to govern and how the AI gateway and Bifrost Edge bring ChatGPT web, [Claude.ai](http://Claude.ai), and other browser AI surfaces under the policies you already run.

## Why Browser AI Is the Hardest Surface to Govern

Browser AI is hard to govern because the traffic never touches the systems a security team controls. When an employee opens [claude.ai](http://claude.ai) or [chatgpt.com](http://chatgpt.com) and pastes in a contract, a customer record, or a block of source code, that request goes straight from the browser to the model provider. No gateway sees it, no audit log records it, and no guardrail inspects it.

This is the core of the shadow AI problem, and the numbers show how widespread it is. A 2025 report covered by [eSecurity Planet](https://www.esecurityplanet.com/news/shadow-ai-chatgpt-dlp/) found that 77% of employees paste data into generative AI prompts, and more than half of those paste events include corporate information. IBM's 2025 Cost of a Data Breach Report, [summarized by Forcepoint](https://www.forcepoint.com/blog/insights/what-is-shadow-ai), found that breaches involving shadow AI cost organizations an average of $670,000 more than other incidents.

Three properties make the browser the most difficult AI surface for traditional controls:

- **Personal accounts bypass corporate identity.** Employees sign in to consumer AI tools with personal accounts, so the usage never appears in enterprise SSO or sanctioned-app inventories.
- **The data exfiltration vector is a paste, not a file.** A pasted prompt is not a download or an email attachment, so file-based data loss tooling does not see it.
- **The surface keeps changing.** New browser AI tools appear constantly, and an allow-list written one quarter is incomplete the next.

The result is a governance gap that sits in the center of the organization, not at its edge. Closing it requires bringing browser AI under the same [endpoint AI governance](https://docs.getbifrost.ai/edge/overview) that already protects sanctioned traffic.

## How Teams Try to Govern Browser AI Today

Most organizations reach for one of three existing approaches, and each leaves a meaningful gap when applied to AI in the browser.

- **Network proxies and DLP.** Inspecting traffic at the network layer can flag some AI domains, but it struggles with encrypted sessions and cannot reason about prompt content. It also breaks down for remote employees who are not on the corporate network.
- **Browser extensions.** Extension-based controls can watch a specific browser, but they only cover the browsers and profiles they are installed on, and determined users can switch to an unmanaged browser.
- **Blunt blocking.** Some teams block consumer AI domains outright. This pushes usage to personal devices and removes any chance of visibility, trading a governance problem for a larger blind spot.

The pattern across all three is the same: they try to intercept browser AI from the outside without a central place to define and enforce policy. A more durable model puts an [AI gateway](https://www.getmaxim.ai/articles/top-5-llm-gateways-in-2026-a-production-ready-comparison/) at the center as the policy engine and extends it to the endpoint, so the controls that already govern sanctioned traffic also reach the browser. This is the [AI governance](https://www.getmaxim.ai/resources/governance) model that the Bifrost AI gateway and Bifrost Edge are built around.

## How the AI Gateway and Bifrost Edge Govern AI in the Browser

Governing AI in the browser works in two layers: [Bifrost](https://www.getmaxim.ai), the AI gateway, defines and enforces policy as the control plane, and Bifrost Edge carries that policy out to the browser on each machine. The gateway is where you configure who can use which models, with what budget, under which guardrails, and with what audit trail. Bifrost Edge is the layer that makes sure browser AI traffic actually routes through that control plane instead of going directly to a provider.

On the gateway, the controls are the ones enterprise teams already run:

- [Virtual keys](https://docs.getbifrost.ai/features/governance/virtual-keys) assign identity, permissions, and policy to each user or team, so every request is attributable.
- [Budgets and rate limits](https://docs.getbifrost.ai/features/governance/budget-and-limits) cap spend and request volume per key, team, or customer.
- [Guardrails](https://docs.getbifrost.ai/enterprise/guardrails) inspect prompts and responses for secrets, PII, and unsafe content before they reach a model.
- [Audit logs](https://docs.getbifrost.ai/enterprise/audit-logs) record every governed request for SOC 2, GDPR, HIPAA, and ISO 27001 reporting.

Bifrost Edge runs on each computer and routes all AI traffic, including browser AI, through the gateway automatically. After a [one-time browser sign-in](https://docs.getbifrost.ai/edge/how-it-works) through the organization's existing single sign-on, an always-on agent in the menu bar or system tray keeps that machine connected to the company's Bifrost. There are no base URLs to change and no SDKs to swap. A prompt typed into ChatGPT web or [claude.ai](http://claude.ai) is routed through Bifrost Edge, evaluated against the same policies, and only then forwarded to the provider. The governance follows the user instead of waiting for the user to opt in.

## Applying Guardrails to ChatGPT Web, [Claude.ai](http://Claude.ai), and Beyond

The guardrails you configure on the gateway apply to browser AI with no additional setup on the endpoint. Because [Bifrost Edge](https://docs.getbifrost.ai/edge/security) routes browser traffic through Bifrost, the same profiles and rules that protect sanctioned traffic now inspect prompts and responses from the browser. A guardrail is applied before the prompt reaches a model and before the response returns, so sensitive content such as an API key or a customer record is caught before it leaves the machine.

A prompt typed into ChatGPT in the browser, for example, is evaluated against your guardrails the moment it is submitted. The same protection covers conversations on [claude.ai](http://claude.ai). Guardrail coverage is configured once on the gateway using reusable profiles and rules, with provider options that include native Secrets Detection (Gitleaks-backed), native Custom Regex with a built-in PII Detection template, AWS Bedrock Guardrails, Azure Content Safety, Google Model Armor, CrowdStrike AIDR, GraySwan Cygnal, and Patronus AI.

Alongside guardrails, the gateway and Bifrost Edge add two more controls for browser AI:

- **App governance.** Administrators decide which AI applications are permitted, and [Bifrost Edge enforces that decision](https://docs.getbifrost.ai/edge/app-governance) on each device. Allowed surfaces run normally and fully governed; disallowed ones are blocked before any data leaves the machine.
- **MCP governance.** For browser-adjacent coding agents that connect to external tools, Bifrost Edge inventories the [MCP servers configured inside each app](https://docs.getbifrost.ai/edge/mcp-governance) and lets admins allow or deny each one, enforced on the device rather than advisory.

The list of browser surfaces Bifrost Edge governs is growing. The [supported applications](https://docs.getbifrost.ai/edge/supported-applications) today include ChatGPT web on [chatgpt.com](http://chatgpt.com) and Claude web on [claude.ai](http://claude.ai), and Bifrost Edge governs traffic to every provider the gateway supports, including OpenAI, Anthropic, and Google Gemini. Teams can request support for a missing browser AI tool in one click, which is what "and beyond" means in practice: coverage expands to the surfaces your organization actually uses.

## Rolling Out Browser AI Governance Across the Fleet

Browser AI governance only works if it reaches every machine, which is why Bifrost Edge is built for fleet-wide deployment. Rather than asking users to download and configure anything, organizations push Bifrost Edge to every computer through an existing device management platform with a managed configuration that points it at the company's Bifrost.

- **MDM-native rollout.** [Deploy with MDM](https://docs.getbifrost.ai/edge/deployment-mdm) supports Jamf, Microsoft Intune, Kandji, Omnissa Workspace ONE, and JumpCloud across macOS, Windows, and Linux.
- **No secrets on the device.** The managed configuration delivers only non-sensitive connection settings, so machines arrive pre-pointed at the right Bifrost. Identity and keys come from the user's SSO sign-in.
- **Central visibility and control.** A fleet dashboard lists every machine running the agent, the AI apps and browser surfaces in use, and the approval status of each, so an organization can finally answer which AI tools are running and where.

This visibility matters because Cisco's 2025 AI Readiness Index, [as reported by industry analysts](https://www.employee-monitoring.net/blog/employee-monitoring-chatgpt-ai-usage-tracking), found that 81% of organizations lack visibility into how employees use AI tools. Bringing browser AI under [the Bifrost platform](https://www.getmaxim.ai/enterprise) turns that blind spot into a governed, auditable surface. Bifrost Edge is currently in alpha; teams register to be onboarded.

### Common Questions About Governing AI in the Browser

**Does governing AI in the browser require employees to change how they work?** No. After a one-time SSO sign-in, Bifrost Edge routes browser AI traffic through the gateway in the background. People keep using ChatGPT web and [claude.ai](http://claude.ai) exactly as before, now under policy.

**How does this differ from blocking AI websites?** Blocking removes visibility and pushes usage to personal devices. The [governance approach](https://www.getmaxim.ai/resources/governance) keeps approved browser AI usable while applying guardrails, budgets, and audit logging to every request.

**What about AI usage on personal accounts?** Because Bifrost Edge governs at the machine level, browser AI traffic is routed through the gateway regardless of which account the user signs in with, closing the personal-account gap that network and identity controls miss.

## Start Governing AI in the Browser with Bifrost

Governing AI in the browser does not require a new policy framework or a separate tool to learn. The AI gateway is the control plane where virtual keys, budgets, guardrails, and audit logs are defined, and Bifrost Edge extends those exact controls to ChatGPT web, [Claude.ai](http://Claude.ai), and the other browser AI surfaces your teams use. Together they turn the browser from the least governed AI surface into one that inherits the same compliance and security posture as the rest of your infrastructure. Explore the [Bifrost resources hub](https://www.getmaxim.ai/resources) for the full picture, or [book a demo](https://www.getmaxim.ai/book-a-demo) to see how the Bifrost AI gateway and Bifrost Edge govern AI in the browser across your fleet.

## Read next

[![Top 5 Tools to Govern Browser AI and AI Browser Extensions in 2026](https://storage.ghost.io/c/84/03/8403f2f6-141c-411a-8f55-a32d4291533e/content/images/size/w720/2026/10/top-5-tools-to-govern-browser-ai-and-ai-browser-extensions-i-bifrost-1920x1080@2x.png) An AI browser extension can read every page an employee opens and send it to a model outside company policy. This guide compares five tools for governing browser AI and AI browser extensions, including Bifrost, Chrome Enterprise Premium, Microsoft Purview, and Prisma Browser.](https://www.getmaxim.ai/articles/ai-browser-extension-governance/)

[![Govern Enterprise LLM and MCP Usage with Bifrost Edge and Gateway](https://storage.ghost.io/c/84/03/8403f2f6-141c-411a-8f55-a32d4291533e/content/images/size/w720/2026/07/govern-enterprise-llm-and-mcp-usage-with-bifrost-edge-and-ga-bifrost-isometric.optimized.png) TL;DR \* Enterprise AI governance has two gaps: shallow controls on provisioned LLM and MCP traffic, and no coverage at all for the AI tools employees run on their own machines. \* Bifrost, the AI gateway, closes the first gap with virtual keys, guardrails, MCP authentication, tool filtering, request logs, and](https://www.getmaxim.ai/articles/govern-enterprise-llm-and-mcp-usage-with-bifrost-edge-and-gateway/)

[![AI Agent Security: Top 5 Platforms Compared in 2026](https://storage.ghost.io/c/84/03/8403f2f6-141c-411a-8f55-a32d4291533e/content/images/size/w720/2026/09/ai-agent-security-top-5-platforms-compared-in-2026-bifrost-isometric.png) AI agents call tools, touch sensitive data, and increasingly run on employee laptops. This guide compares five AI agent security platforms and shows how the Bifrost AI gateway and Bifrost Edge apply one set of policies to agent traffic and every machine.](https://www.getmaxim.ai/articles/ai-agent-security-top-5-platforms-compared-in-2026/)

## More in Bifrost Edge

[![Governing Claude Desktop in Enterprises](https://storage.ghost.io/c/84/03/8403f2f6-141c-411a-8f55-a32d4291533e/content/images/size/w720/2026/07/Governing-Claude-Desktop-in-Enterprises.optimized.png) Governing Claude Desktop in enterprises means routing its AI traffic through Bifrost. The gateway sets policy; Bifrost Edge enforces it on every machine. Claude Desktop is installed on engineering and knowledge-worker laptops across most enterprises, and in many of those organizations nothing sits between the app and the model](https://www.getmaxim.ai/articles/governing-claude-desktop-in-enterprises/)

[![Governing AI Coding Agents at Scale: Claude Code, Cursor, and Codex](https://storage.ghost.io/c/84/03/8403f2f6-141c-411a-8f55-a32d4291533e/content/images/size/w720/2026/07/governing-ai-coding-agents-at-scale-claude-code-cursor-and-c-bifrost-circuit.optimized.png) Bifrost is one control plane for governing AI coding agents like Claude Code, Cursor, and Codex, with Bifrost Edge extending it to every machine. AI coding agents like Claude Code, Cursor, and Codex now run across hundreds or thousands of developer machines in a typical engineering organization, and most of](https://www.getmaxim.ai/articles/governing-ai-coding-agents-at-scale-claude-code-cursor-and-codex/)

```json
{
    "@context": "https://schema.org",
    "@type": "Article",
    "publisher": {
        "@type": "Organization",
        "name": "Maxim Articles",
        "url": "https://www.getmaxim.ai/articles/",
        "logo": {
            "@type": "ImageObject",
            "url": "https://storage.ghost.io/c/84/03/8403f2f6-141c-411a-8f55-a32d4291533e/content/images/size/w256h256/2025/08/thumbnail.png",
            "width": 60,
            "height": 60
        }
    },
    "author": {
        "@type": "Person",
        "name": "Kuldeep Paul",
        "image": {
            "@type": "ImageObject",
            "url": "https://storage.ghost.io/c/84/03/8403f2f6-141c-411a-8f55-a32d4291533e/content/images/2025/08/1727978381919.jpeg",
            "width": 800,
            "height": 800
        },
        "url": "https://www.getmaxim.ai/articles/author/kuldeep/",
        "sameAs": []
    },
    "headline": "Governing AI in the Browser: ChatGPT, Claude.ai, and Beyond",
    "url": "https://www.getmaxim.ai/articles/governing-ai-in-the-browser-chatgpt-claude-ai-and-beyond/",
    "datePublished": "2026-06-16T18:52:00.000Z",
    "dateModified": "2026-10-13T11:02:32.000Z",
    "image": {
        "@type": "ImageObject",
        "url": "https://storage.ghost.io/c/84/03/8403f2f6-141c-411a-8f55-a32d4291533e/content/images/size/w1200/2026/07/Governing-AI-in-the-Browser-ChatGPT--Claude.ai--and-Beyond.optimized.png",
        "width": 1200,
        "height": 675
    },
    "keywords": "Bifrost Edge",
    "description": "Bifrost is the AI gateway and policy engine for governing AI in the browser, with Bifrost Edge extending those controls to ChatGPT web, Claude.ai, and beyond.\n\nMost enterprise access to generative AI now happens inside the browser. Menlo Security's 2025 research found that roughly 80% of generative AI usage reaches tools like ChatGPT through a web browser, which is also where sensitive data most often leaves the company. Governing AI in the browser is the part of an AI governance program that is",
    "mainEntityOfPage": "https://www.getmaxim.ai/articles/governing-ai-in-the-browser-chatgpt-claude-ai-and-beyond/"
}
```