Estimated read time: 8 minutes
Google made two announcements this week that, taken together, mark the moment AI agents stopped being a demo and started being a coworker with your passwords. First, the Gemini Enterprise Agent Platform, the rebuilt successor to Vertex AI, hit general availability. Second, and more viscerally: Gemini Spark, Google’s consumer-facing agent, can now operate the desktop version of Chrome. Not a sandboxed copy of Chrome. Yours. The one where you are logged into your bank, your payroll provider, and that vendor portal you have not thought about since March. If your reaction is equal parts “finally” and “absolutely not,” you have understood the announcement perfectly. Let’s do the math on both halves.
Table of Contents
What Google Actually Announced
Two things, aimed at two audiences. The Gemini Enterprise Agent Platform going GA is the infrastructure story: it is Google’s unified system for building, deploying, and governing AI agents, evolved out of Vertex AI, with access to a long menu of foundation models. The headline capability is Agent Runtime, now generally available, which supports agents running continuously for up to seven days. Not seven minutes. Seven days. That is Google telling businesses that agents are no longer a chat window you babysit; they are processes you delegate to and check in on.
The second announcement is the one you will feel first. Gemini Spark can now use desktop Chrome to complete tasks, including on sites where you are already signed in. The auto-browse capability first appeared at the end of July; this week’s update makes it broadly available and notably more capable. Spark clicks, types, navigates, fills forms, and moves through multi-step workflows the way you would, except it does not get bored on step four and open a tab about fantasy football.
If this sounds familiar, it should. We flagged this direction in our AI agent rundown earlier this year: every major lab has been racing to move agents from “answers questions” to “does the task.” Google just moved the finish line into your browser.
What an Agent in Your Browser Can Actually Do
Strip away the keynote language and the small business use cases are the boring, expensive ones. Boring and expensive is exactly where automation pays.
Data entry between systems that refuse to talk to each other. Pulling order details from your e-commerce dashboard into your bookkeeping software. Copying invoice line items into a client’s procurement portal that was clearly designed in 2011. The connective tissue work that eats hours precisely because no integration exists.
Vendor and admin errands. Checking shipment status across three carrier sites. Downloading monthly statements from every account for your accountant. Renewing the business license on the county website that logs you out every eight minutes.
Research with receipts. Comparing supplier pricing across catalogs, compiling competitor changes, filling in a spreadsheet as it goes. An agent that browses like a person can gather what an API-only tool cannot reach.
The honest caveat: agents still fumble. They misread ambiguous buttons, they get stuck on CAPTCHAs (by design), and a seven-day runtime is also seven days of opportunities to do the wrong thing consistently. The productivity is real, and so is the babysitting, at least for now. If you want the broader tool landscape, our guide to AI agent tools for small business covers what is actually usable today.
The Catch: Your Logins Are the Product
Here is the part to sit with. The entire value proposition of Spark’s Chrome integration is that it inherits your sessions. Logged into your bank? So is the agent. Saved passwords in Chrome? Available to the workflow. That is what makes it useful, and it is also a brand-new category of risk that most small businesses have never had to think about: software that acts as you, with your authority, at machine speed.
The failure modes are not hypothetical. An agent that misreads a page can submit the wrong form with real consequences. A malicious website can attempt prompt injection, planting instructions in page content that the agent reads and, if defenses fail, obeys. And an attacker who compromises the machine running a trusted agent inherits everything the agent can touch. This week’s Uber Freight incident, which Google’s own researchers tied to a group known for voice phishing, is a reminder that attackers go wherever trust is concentrated. Browser agents concentrate a lot of trust in one place.
None of this means “do not use it.” It means treat an agent like a new employee with admin access on day one, which is to say: do not give it admin access on day one.
The Industry Is Building Guardrails Mid-Flight
The tell that agent risk is real: the day before Google’s GA announcement, more than 120 organizations, including Nvidia, Cisco, and CrowdStrike, backed a proposal for a Shared AI Findings Exchange, a common system for reporting security incidents involving autonomous AI agents. Read that twice. The industry is standing up an incident-reporting system for AI agents before most businesses have deployed one. That is either admirable foresight or a preview of the incident reports, and realistically it is both.
For small business owners the takeaway is not to wait for the standards bodies. It is that the vendors building this stuff expect things to go wrong sometimes, which means your deployment plan should too. The same week Google is shipping agents that browse as you, the security industry is agreeing on how to report what happens when that goes sideways. Plan accordingly.
The Smart Small Business Rollout
1. Start with a separate browser profile. Give the agent a Chrome profile that is logged into exactly the accounts the task needs and nothing else. Not your everything-profile. Session inheritance is the feature; scope it deliberately.
2. Keep money out of scope. No banking, no payment portals, no payroll in the agent’s profile. Let it draft, gather, and fill; keep the final click on anything that moves money in human hands. You lose five seconds per task and eliminate the worst failure mode.
3. Pick one workflow and measure it. The statement-downloading errand or the order-to-bookkeeping copy job. Time it manually for a week, then let the agent run it supervised. If it does not clearly win, park it for a quarter. The platforms are improving monthly; your pilot can wait for them.
4. Turn on activity review. Use whatever logging the tool offers and skim it weekly. You are looking for the agent doing unexpected things confidently, which is the agent equivalent of a new hire who never asks questions.
5. Revisit your password hygiene. If everything lives in one Chrome profile guarded by one reused password, the agent is not your biggest problem. Fix that first; the agent can wait a week.
Google’s model strategy is moving fast underneath all this too; the pricing and capability math we ran on Gemini 3.5 Pro for small business shows how quickly the cost side keeps dropping. Agents will get cheaper and more capable. Your logins will always be your logins.
FAQ
Is Gemini Spark’s Chrome integration available to everyone?
Google says the capability is rolling out broadly following this week’s general availability announcements, after a limited release that began July 30. Availability may vary by account type and region, so check your Gemini settings.
Can the agent access my saved passwords?
The integration works with your existing Chrome sessions and sign-ins, which is what makes it useful and what makes scoping it important. Use a dedicated browser profile for agent work and keep financial accounts out of it.
Do I need the Enterprise Agent Platform as a small business?
Probably not directly. The platform targets companies building and governing their own agents. Small businesses will mostly feel it through products built on top of it, the same way you use apps without touching the cloud infrastructure underneath.
What is the single most important precaution?
Keep anything that moves money outside the agent’s reach. Draft yes, submit no. Every other safeguard builds on that one.
Related Coverage
- AI Agents Explained: The 2026 Rundown: the primer on what agents are and why every lab is racing to build them
- Best AI Agent Tools for Small Business: the agent tools worth actually deploying today
- Google’s AI Search Transformation: how Google’s AI push is rewriting the rest of your traffic math
Faceted Media Magazine covers business, AI, and entrepreneurship for the people building what’s next.