Citrix adds AI browser session insights for agents

Citrix has launched Session Insights for Citrix SecurAccess with Chrome Enterprise, a tool designed to help organisations review browser activity by employees and autonomous agents.

The addition brings AI-based analysis, visual session records and policy recommendations to Citrix's browser security offering, as companies seek more oversight of work carried out through web applications.

Security teams have long been able to track discrete events such as application access, file uploads and blocked copy attempts. But those records often do not show the sequence of actions behind a risky outcome. That gap is becoming more pronounced as autonomous agents carry out tasks across several applications on behalf of workers.

The new feature creates a visual record of browser sessions for both human users and AI agents. It then applies AI analysis to identify behaviour that may warrant further investigation and flag moments administrators may need to review.

The product sits within Citrix SecurAccess with Chrome Enterprise, which is aimed at organisations that want tighter controls over browser-based work. By linking session capture with analysis, Citrix is positioning it as a way to support incident investigations, audit processes and governance reviews.

One of the central issues for security teams is attribution. When automated tools and autonomous agents interact with browser-based applications, companies may struggle to determine whether an action was taken directly by an employee or delegated to software acting on that employee's behalf.

Session Insights is intended to help reconstruct those workflows without forcing teams to piece together multiple application logs. Administrators can examine how authority was used, whether security controls were applied during a workflow and whether an agent had been given more access than a task required.

Broader oversight

The feature set includes automatic session recording for configured users and autonomous agents, AI-led risk detection and reviews of browser activity linked to internal application use. The software can also recommend changes to security policies or to the level of authority given to agents, although administrators remain responsible for assessing the evidence and deciding any response.

That reflects a wider shift in workplace software, where browser sessions are becoming a key source of evidence as more business systems move to web interfaces. For companies introducing AI tools into daily operations, the browser can also become the point where human instructions, agent actions and sensitive data intersect.

Citrix also said the software could help internal development teams understand how employees use applications. In that context, session data may show repeated obstacles in workflows or indicate where tasks are commonly repeated and may be suitable for automation.

Those operational uses sit alongside the security function, giving the product a dual role in investigation and workflow analysis. Even so, the main focus of the launch is oversight of potentially risky behaviour and creating an auditable trail for activity involving AI-assisted and autonomous work.

Hector Lima, Co-President at Citrix, said the product responds to changing concerns around the use of AI in the workplace. "The conversation around enterprise AI is shifting from access to accountability," Lima said.

"As employees increasingly use agents to accelerate work, organizations need comprehensive context to investigate unexpected outcomes, assess risky behavior and adapt security policies. Citrix Session Insights uses AI analysis to provide the powerful security intelligence organizations need to strengthen governance and guardrails as human and AI agent workflows become increasingly intertwined," he added.

Growing pressure

The launch comes as software suppliers across security and workplace infrastructure try to address the governance issues raised by generative AI and agent-based systems. While much of the earlier market focus centred on enabling access to AI tools, newer products are increasingly aimed at monitoring usage, tracing decisions and documenting how automated tasks unfold.

For organisations with strict compliance requirements, the ability to retain a visual account of browser activity may be especially relevant where employees and software agents both handle sensitive information. The challenge is not only spotting an event, but understanding the path that led to it.

Citrix said Session Insights is intended to shorten the time needed to investigate incidents by allowing administrators to focus on moments identified by AI analysis rather than reviewing entire recordings manually. The software can also help teams decide whether existing security policies are adequate or need adjustment after an incident.

The launch expands SecurAccess with Chrome Enterprise by combining browser visibility, AI analysis and policy guidance in one workflow.