proxy/sentrysurface/io
World internet meets
agentic automation
through a secure local proxy
Browser-native fetch interception. AI agents route, inspect, and act on live web content — privately, locally, at depth.
Comparison
Why teams choose SurfaceProxy
SurfaceProxy delivers two core outcomes in one layer: safer agent browsing and lower model spend.
| Capability | SurfaceProxy | Raw Playwright | Generic Proxy |
|---|---|---|---|
| Security controls | Prompt-injection filtering and egress policy enforcement at proxy runtime | Custom app logic required | Network routing only |
| Token spend optimization | Context compression before model input | Raw DOM and screenshots by default | No model-context optimization |
| Adoption speed | Endpoint swap with existing tools | Build and maintain a custom gateway | Still need agent-specific security layer |
Benchmark
Up to 96% lower token spend on sampled flows.
Security
Session-level controls with allowlists and policy enforcement.
Integration
Keep existing agent stacks with endpoint-level adoption.
How it works
Proxy as the security middleware. Works with your existing stack.
SurfaceProxy intercepts at the Chrome DevTools Protocol layer — between your agent and the browser. No code changes, no new binaries. Real-time session control, context compression, and audit logging out of the box.
96%
HTML payload reduction
1 line
Integration change
0ms
Agent code changes
Architecture
Client
Your Agent
Middleware
SurfaceProxy
Runtime
Chrome / Firefox
Works with
One endpoint change
# raw HTML — full token cost browser = await webdriver.connect( "ws://localhost:3000") await agent.run(browser)
# optimised, firewalled, audited browser = await webdriver.connect( "ws://proxy.sentrysurface.io/v1/session")changed await agent.run(browser) # unchanged
Problems solved
Agents send 100% raw HTML
Context bloat inflates API costs and model latency — often by an order of magnitude per session.
Content pruning reduces payload by up to 96%
Unfiltered browser traffic
Raw traffic exposes agents to prompt injection, credential theft, and malicious content at runtime.
Policy enforcement at proxy runtime
Agents operate as black boxes
Can't debug failures, track compliance, or understand what content an agent actually consumed.
Full session logs & audit trail
Security layers require rewrites
Adding middleware usually means rebuilding agent logic, custom transport layers, or new binaries.
Single endpoint swap — zero code changes
Open Source
Start free in minutes. Keep your existing agent workflow.
SurfaceProxy plugs into your existing browser automation and agent tooling with a single endpoint swap. Reduce token spend, add runtime controls, and onboard your team at your own pace.
Spend
Cut payload bloat before model calls
Security
Apply policy checks during live sessions
Adoption
Keep Playwright, Puppeteer, Claude, Cursor flows
Community
Open Source
For developers and lean teams who want safer browser agents and lower model spend without re-platforming.
Included now
- Local Docker / CLI setup
- Semantic DOM pruning — smaller model payloads
- Local allowlists and blocklists
- Session-level console logging
Scale-ready path
- Multi-tenant cloud or VPC deployment
- Advanced DOM-diff caching
- Live threat intelligence feeds
- Full audit logs and SIEM export
Start local today. Expand controls as usage, governance, and compliance needs grow.
Enterprise path
For production workloads that need managed deployment, governance controls, and dedicated support.
- • SSO / SAML + role-based access
- • SLA + dedicated Slack support
- • Custom retention & data residency
Secure Your Web Agents. Stop Overpaying for Tokens.
Join the next generation of AI-native engineering teams building safe, efficient, and cost-predictive browser automation.