Browser in Explore

Some answers live behind a web portal that no integration can read. The browser in Explore opens a remote, recorded browser session so you can sign in and the agent can inspect the site on your behalf. The first supported target is the Azure portal, but any public HTTPS site works.

The browser is included on all paid plans.

How It Works

1. Ask a question that needs a website. Explore opens a browser and shows a card with the site, the status Waiting for sign-in, and the buttons Sign in, View browser, and Pop out. The card also shows how long the browser stays available.
2. Sign in. Clicking Sign in opens a live view of the remote browser inside Junto. Enter your credentials and complete MFA there. Passwords and MFA codes go only into the browser, never into the chat.
3. Continue. Click I'm signed in, continue. Explore starts an inspection and the Browser side panel opens in view-only mode so you can watch the agent work.
4. Read the result. The inspection card reports Inspection complete, Inspection partly complete, Inspection blocked, or Needs input with a question for you, along with a screenshot. Explore's reply summarizes the findings, sources, when they were checked, and any limitations.
5. Ask follow-ups. Later questions reuse the same browser while it is open. To inspect a different application, end the session first.

Sign-in and the inspection request are separate messages: sign in first, then ask Explore to continue.

Controlling the Browser

• View browser / Watch -- open the live view at any time.
• Take control -- switch the side panel from view-only to interactive so you can click and type yourself. Each new inspection returns the panel to view-only.
• Expand and Pop out -- enlarge the panel or open the browser in its own tab. The pop-out page says "Sign in here, then return to Explore and ask it to continue."
• End browser session -- signs you out and closes the browser. Reopening later requires a fresh sign-in.

Where It Is Available

• Explore in the Junto web app, in your own private conversations.
• Not available in Slack or Teams conversations, shared ticket chats, or customer-facing assistants. Those surfaces show browser steps as status text only.
• On mobile, the browser opens as a full-screen view when you tap Watch rather than opening automatically.

Session Limits

Limit	Value
Browsers per conversation	One at a time, one application at a time
Maximum session length	30 minutes
Idle timeout	10 minutes
Inspection length	Up to 3 minutes or 40 steps
Sites	Public HTTPS sites only
Saved logins	None -- every session starts signed out

The browser also closes when Explore finishes with it, when you stop a turn, when an inspection times out, or when the conversation is deleted. Ended cards read Browser closed or Browser expired and offer View audit record.

Use a read-only account

The agent is instructed to only read, not change, anything in the portal. This is not technically enforced, so sign in with an account whose permissions do not allow changes.

Audit Trail

Every browser session is recorded and kept as an audit record.

What Is Recorded

• A session video of the whole session, including the sign-in screens. Usernames, tenant names, and on-screen MFA codes may appear in the video.
• A timeline of events: browser opened, each inspection started and finished, browser closed, and how the session ended.
• Each inspection: the task, the agent's summary, a screenshot, and details of its observations, sources, and limitations.
• A summary: who ran it, when, the entry URL, visited domains, the end reason, and links to the conversation and request.

The video is moved to Junto's private encrypted storage and the browser provider's copy is deleted. Playback links are short-lived, generated on demand, and logged.

Who Can See It

• Technicians see their own records through View audit record on ended browser cards.
• Admins and Owners see every session under Settings > Audit log > Browser sessions, with filters for user, date range, and end reason. Columns show the user, the request, when it opened, duration, end reason, inspection count, and video status.
• Owners can delete a record with Delete record. This permanently removes the video and timeline but leaves the conversation and screenshot untouched. A record cannot be deleted while its session is still open. Deletions and video plays are logged under Admin Actions.

Records are kept indefinitely and survive deletion of the conversation or the user. Deleting the organization deletes its videos.

Troubleshooting

• "The browser couldn't be opened" -- The remote browser could not start. Try again in a moment.
• "Sign in through the browser link, then ask again in a new message" -- Explore needs you to finish signing in before it inspects. Complete sign-in, then click I'm signed in, continue or send a new message.
• "Another browser action is running" -- Wait for the current inspection to finish before asking for another.
• "Close the current browser before opening a different application" -- Click End browser session, then ask again.
• "This browser session has ended" -- Sessions expire after 10 idle minutes or 30 minutes total. Ask Explore to start a new one.
• "The browser couldn't be confirmed closed" -- Click Try ending again. New inspections are blocked until the close is confirmed or the session expires on its own.
• Video shows "Video processing" -- Videos are stored shortly after a session ends. If a video still shows processing after a couple of hours it is marked unavailable.
• The sign-in page uses a popup -- Some sign-in flows open popups that the embedded view may block. Use Pop out and sign in from the full-tab view.