nearfi
Field notes from a little way ahead Week 45 · 4 Nov 2026 · Still early
Agent Index › Browser › Fellou
Browser · general · Standalone · live

Fellou

Quick answer

Fellou is a standalone general AI agent from Fellou. An agentic browser that plans and runs multi-step tasks across websites and, with permission, local apps, including on a schedule. Nearfi's Agent Index rates its autonomy 3/5 (multi-step, with approval): it plans and runs multi-step web and desktop tasks, and Fellou says it shows a plan you can edit or approve before it runs and lets you intervene. It is not 4 because that approval step is the default design, and not 2 because it chains many steps. Status: live; 1 incident(s) logged.

By Fellou · launched unknown · last checked 2026-11-04

At a glance
Autonomy
3/5
Multi-step, with approval

Why 3: it plans and runs multi-step web and desktop tasks, and Fellou says it shows a plan you can edit or approve before it runs and lets you intervene. It is not 4 because that approval step is the default design, and not 2 because it chains many steps.

The findings

What it does. Fellou calls itself the first agentic browser. It does web research across logged-in accounts, fills forms and enters data, can operate local apps and files with permission, and can run workflows at set times. It shows an editable plan before running and keeps an 'agentic memory' of browsing history and notes.

Where it falls short. Usage is metered, and an independent listing says visual automation is brittle on layout changes, two-factor prompts and CAPTCHAs. Fellou's pages name no company details or platforms. Its memory and logged-in access widen the privacy risk, and Fellou had not publicly responded to the security finding below in the sources opened.

What it can do

browsecomputer usefilesschedulingmemoryyour accounts

Price: Free tier (1,000 starter 'Sparks', about four tasks); a third-party listing gives Plus $19, Pro $39.90 and Ultra $199.90 a month. Fellou's own page lists no prices. · Where: Not stated on the pages opened. · Surfaces: browser

Incidents

  • 2025-10-21 Brave publicly disclosed (reported to Fellou on 20 August 2025) that Fellou treated visible webpage text as trusted input, so a page could redirect the agent; The Register reproduced it, with Fellou opening Gmail and sending an email subject line to a researcher-controlled URL. Source

Related browser agents

History

  • 2026-11-04 Added to the index.

Sources

  1. Fellou: The World's First Agentic Browser Fellou
  2. Unseeable prompt injections in screenshots: more vulnerabilities in Comet and other AI browsers Brave, 2025-10-21
  3. AI browsers prompt injection The Register, 2025-10-28
  4. Fellou Browser AI Tools Atlas

← All agents in the index · Autonomy is rated on what the product does today, on a 1–5 scale. Every fact links to a source.