ChatGPT Atlas Review (2026): OpenAI's Agentic Browser — Discontinued 9 August 2026

Pricing figures updated 30 September 2026: the ChatGPT plan table now carries OpenAI's own Australian-dollar prices. Earlier note, 6 September 2026: USD prices are converted at the current rate (1 USD ≈ 1.40 AUD, verified 5 September 2026) and shown ex-GST, replacing the retired 1.55 + GST basis. A GST-registered Australian business that supplies its ABN is not charged GST on an imported digital service; other buyers should allow ~10% on top (Methodology).

⚠ Discontinued — ChatGPT Atlas no longer exists. OpenAI announced the deprecation on 9 July 2026, and Atlas stopped working on 9 August 2026. Agentic browsing moved into the ChatGPT desktop app and a ChatGPT extension for Chrome. Bookmarks, history and open tabs did not transfer automatically, and the browser gets no further security updates. This page is kept as a dated post-mortem, not a buying guide. Do not install Atlas.

What an Australian reader should use instead. Gemini in Chrome (19/25) and Copilot Mode in Edge (19/25) score highest in our browser testing, and both bill in Australian dollars. Comet (16/25) is the closest like-for-like swap — a free standalone agentic browser on Mac, Windows, iOS and Android. Dia (15/25) is the other standalone option. None of the four clears our Australian-fit bar outright.

Source: OpenAI Help Centre, Evolving Atlas into ChatGPT for browser-based agentic work · Wayback. Read 20 September 2026.

The verdict (as it stood on 25 June 2026, before the shutdown): ChatGPT Atlas is the most ambitious version yet of "ChatGPT, but it can use the web for you." It is a full browser with ChatGPT built into every tab, a memory that learns from what you read, and an agent mode that will actually open tabs, fill carts and book things on your behalf. When it works, it is a glimpse of how a lot of routine web admin will get done. But three things hold it back for an Australian business owner. It is still macOS-only eight months after launch — no Windows, iOS or Android. The agent mode that is the whole point sits behind a paid ChatGPT plan (from US$20/month) and, by OpenAI's own admission, is exposed to prompt-injection attacks that "may never be fully solved." And there is nothing Australian about it — no AUD pricing of its own, no local data story, no AU support. Worth trying if you are on a Mac and curious. Not yet something to wire into a business that handles client data. Score: 15/25 — Good.

What it is

ChatGPT Atlas is a web browser with ChatGPT built into its core — not an extension bolted onto Chrome, but a standalone browser where the AI is a permanent companion in a sidebar. OpenAI launched it on 21 October 2025 for macOS, and it does three things a normal browser does not.

First, ChatGPT travels with you on every page. You can ask it about whatever you are reading, summarise a long article, or pull facts out of a page without copying and pasting into a separate window.

Second, it has browser memories — an optional feature where ChatGPT remembers context from the sites you visit and brings it back later. You can ask it to "find the job postings I looked at last week and summarise the industry trends," and it draws on what you actually browsed.

Third, and the headline, is agent mode — you can tell ChatGPT to do something, and it opens tabs, clicks, and works across multiple sites to finish the task. Plan a dinner, and it can find a grocer, add the ingredients to a cart and check out. At work, it can read past documents, run some research and compile a brief.

That is the pitch: not a browser you drive with an AI on the side, but a browser the AI can drive for you. It is OpenAI's bet that "most web use" eventually happens through agents.

What it costs in Australia

Here is the part people get wrong. The Atlas browser itself is free. You download it, sign in with any ChatGPT account — including a free one — and the browsing, the sidebar chat and browser memories all work.

What you pay for is agent mode, and it rides your existing ChatGPT plan. Agent mode is available to Plus, Pro and Business subscribers — not on the Free or Go tiers. So the real cost of "Atlas as OpenAI sells it" is the cost of a paid ChatGPT plan:

A few Australian notes. OpenAI quotes these prices in Australian dollars to Australian visitors (re-read 30 September 2026; in June this review converted US prices instead). OpenAI does charge 10% GST to Australian customers, and if you are GST-registered you can claim it back as an input tax credit; the pricing page does not say whether its A$ figures include GST, so check the total at checkout.

So: free to try the browser, A$30 a month for Plus to actually use the agent that makes it interesting.

How it works / features

You browse normally, with ChatGPT one click away the whole time. The standout pieces:

• ChatGPT in the sidebar on every page. Ask about what you are reading, summarise it, or have it draft a reply — without leaving the tab.
• Browser memories. Optional, opt-in context that ChatGPT carries between sessions, so it can pick up research where you left it. You can view, archive or delete memories in settings, and clearing your browsing history deletes the associated memories.
• Agent mode. ChatGPT opens tabs and clicks for you to finish a multi-step task across sites. It will ask before it starts acting, and you can watch it work.
• Incognito and per-site visibility controls. You can open an incognito window to temporarily log out, or flip a toggle in the address bar so ChatGPT cannot see a given page at all.
• Imports your old browser. On first run it brings across bookmarks, saved passwords and history from your existing browser.
• A fast update cadence. Since launch OpenAI has shipped Arc-style vertical tabs (November 2025), tab groups (January 2026), separate browser profiles for multiple ChatGPT logins (March 2026) and steady agent-mode improvements. This is clearly a high-priority product.

On the training question, the default is reassuring: OpenAI says it does not use the content you browse to train its models unless you opt in via the "include web browsing" data control. The caveat is that if you have already turned on training for your ChatGPT chats, that setting also applies to chats inside Atlas, including page content you attach to the sidebar.

What it does well

The agent is genuinely useful for routine web admin. This is not a demo that falls over the moment you try it. For bounded, repetitive jobs — gathering links, filling a cart, pulling details off a few pages into one summary — it does real work while you do something else. That is the first time an AI-in-a-browser has felt like more than a smarter search box.

Context is the unlock. Because ChatGPT can see the page and remember what you have browsed, you skip the endless copy-paste-into-ChatGPT dance. Asking a question about the thing in front of you is a meaningfully better workflow than tabbing back and forth.

The privacy controls are thoughtful, and on by default in the right direction. Per-site visibility toggles, opt-in (not opt-out) browser memories, incognito, and no training on browsed content unless you ask for it. For a product this invasive by design, OpenAI has clearly thought about the controls.

It is backed by the company with the best models. Atlas runs on OpenAI's frontier models, and the update pace shows it is a serious, resourced product, not a side experiment.

Where it falls short

It is still macOS-only. Eight months after launch, Windows, iOS and Android are all still "coming soon" with no confirmed date. For most Australian small businesses — which run on Windows and Android — that alone rules it out today. You cannot adopt a browser that does not run on your computer.

The agent risk is real, and OpenAI says it may never be fully fixed. This is the big one. Because the agent reads web pages and acts on logged-in sites, it is vulnerable to prompt injection — hidden malicious instructions buried in a web page or email that hijack the agent into doing something you never asked, like leaking data from a site you are signed into. This is not theoretical. Security firm LayerX demonstrated a memory-injection flaw in Atlas and reported the browser let through the large majority of the in-the-wild phishing attacks it tested. Brave published research warning that all agentic browsers share this weakness. And OpenAI's own security chief has said plainly that prompt injection is "a frontier, unsolved security problem" that is "unlikely to ever be fully solved." OpenAI has shipped hardening updates and built in safeguards — the agent cannot run code, download files, install extensions, or touch other apps, and it pauses on sensitive sites like banks. But the company is telling you, in writing, that the safeguards "will not stop every attack." Take that seriously.

The good stuff is behind a paywall, in US dollars. The browser is free, but agent mode — the reason to use Atlas over Chrome — needs a paid plan from US$20/month (A$30 in Australia). Free and Go users get a nicer ChatGPT sidebar and nothing more.

Agent mode is still preview-grade. OpenAI itself calls it "an early experience" that "may make mistakes on complex workflows." It is slower than doing the task yourself on anything intricate, and it stumbles on long or fiddly chains. It is impressive, not yet dependable.

Nothing about it is Australian. No AUD pricing at the time (OpenAI has quoted A$ since September 2026), no Australian data residency story, no local support. It is a global product you can use here, not a product built with Australians in mind.

Australian fit

Pricing: US dollars in June 2026, with no native AUD price then (OpenAI has quoted A$ to Australian visitors since at least 2 September 2026: Plus A$30 a month), but OpenAI does charge and itemise 10% GST, and GST-registered businesses can claim it back — better than many US tools that leave GST unstated. Data residency: OpenAI publishes no Australian data-residency option for consumer ChatGPT or Atlas; browsing data and memories sit in OpenAI's infrastructure with no onshore guarantee. For Privacy Act-sensitive work, and especially with an agent acting on logged-in sites, that is a material gap. Support: no Australian entity, presence or local-time support. Availability: the browser launched worldwide and Australians can download and use it freely on a Mac — but it is macOS-only, so most local users cannot run it at all, and there is nothing Australia-specific inside it. Australian Fit: 2/5.

Score

⭐⭐⭐ Good (11–15).

Australian Fit is 2/5, below the 4/5 threshold in our methodology, so ChatGPT Atlas cannot be named a category Top Pick regardless of its score.

Bottom line

If you are on a Mac and curious — you have missed it. Atlas stopped working on 9 August 2026. In June 2026 our advice was to download it and try agent mode on a low-stakes task, because the sidebar was a real upgrade on copy-pasting into ChatGPT. That advice is now void. Use the ChatGPT desktop app's browser mode, or Comet, instead.

If you run Windows or Android, there was never anything to do. Atlas never ran on your machine, the Windows build never shipped, and OpenAI discontinued the browser on 9 August 2026. Start with Gemini in Chrome or Copilot Mode in Edge instead.

If your work touches client data, money or anything regulated, be very careful with agent mode. The prompt-injection risk is real, demonstrated by outside researchers, and described by OpenAI itself as unlikely to be fully solved. Use the agent logged out where you can, never let it loose on logged-in banking or systems holding personal information, and watch what it does. The convenience is not yet worth the exposure for sensitive work.

If you just want a better ChatGPT and an honest assistant for research, you do not strictly need a whole new browser for it. The plain ChatGPT app, or a research-first tool like Perplexity, gets you most of the way with less attack surface. Atlas is for people who specifically want the agent to act in the browser — and who understand the trade-off they are making.

Frequently asked questions

Is ChatGPT Atlas still available?

No. OpenAI announced on 9 July 2026 that it was deprecating Atlas, and the browser stopped working on 9 August 2026. Agentic browsing now lives in the ChatGPT desktop app and a ChatGPT extension for Chrome. The answers below describe Atlas as it was in June 2026 and are kept as a record.

Is ChatGPT Atlas free?

The browser is free to download and use — you sign in with any ChatGPT account, including a free one, and get the AI sidebar and browser memories. The agent mode that browses and acts for you needs a paid plan (Plus, A$30/month in Australia, or higher), and is not available on the Free or Go tiers.

Can I use ChatGPT Atlas on Windows?

No, and now you never will. Atlas was macOS-only for its whole life. OpenAI announced Windows, iOS and Android versions as "coming soon" at the October 2025 launch, never shipped them, and discontinued the browser on 9 August 2026.

Is ChatGPT Atlas safe to use?

The browser is safe for ordinary browsing, but its agent mode carries a real, vendor-acknowledged risk: prompt injection, where hidden instructions in a web page or email hijack the agent. OpenAI has built in safeguards and says it cannot fully solve the problem. Use the agent logged out where possible, keep it away from banking and sensitive accounts, and watch what it does.

Does ChatGPT Atlas train on the websites I browse?

By default, no. OpenAI says it does not use browsed content to train its models unless you opt in via the "include web browsing" data control. The exception: if you have already enabled training for your ChatGPT chats, that applies to chats in Atlas too, including page content you attach to the sidebar.

Does ChatGPT charge GST in Australia?

Yes. OpenAI charges 10% GST on ChatGPT subscriptions sold to Australian customers, and if you are GST-registered you can claim it back as an input tax credit. Pricing is still quoted in US dollars, so budget for the exchange rate on top.

How is ChatGPT Atlas different from just using ChatGPT?

Atlas puts ChatGPT inside a full web browser, so it can see the page you are on, remember what you have browsed, and — in agent mode — click and act across websites for you. Regular ChatGPT can search and answer, but it does not live in your browser or take actions on the sites you are logged into.

Read next

• ChatGPT review: the default AI assistant, tested for Australia
• Perplexity review: the answer engine, tested for Australia
• ChatGPT vs Perplexity: which one for Australian work?
• How we score AI tools — our review methodology

Sources

• https://help.openai.com/en/articles/20001371-evolving-atlas-into-chatgpt-for-browser-based-agentic-work (primary; OpenAI's discontinuation notice — 9 July 2026 announcement, 9 August 2026 shutdown, replacement paths) · Wayback
• https://openai.com/index/introducing-chatgpt-atlas/ (primary; launch, macOS-only, agent mode, safeguards, training)
• https://chatgpt.com/atlas/ (primary; product page)
• https://help.openai.com/en/articles/12591856-chatgpt-atlas-release-notes (primary; release notes, vertical tabs, macOS-only status)
• https://chatgpt.com/pricing/ (primary; plan pricing and which tiers include agent mode)
• https://openai.com/index/introducing-chatgpt-go/ (primary; Go tier)
• https://openai.com/index/hardening-atlas-against-prompt-injection/ (primary; OpenAI's own hardening + "unsolved" position)
• https://en.wikipedia.org/wiki/ChatGPT_Atlas (secondary; timeline and feature cadence)
• https://techcrunch.com/2025/12/22/openai-says-ai-browsers-may-always-be-vulnerable-to-prompt-injection-attacks/ (secondary; OpenAI CISO quote)
• https://fortune.com/2025/12/23/openai-ai-browser-prompt-injections-cybersecurity-hackers/ (secondary; prompt injection "never solved")
• https://cyberscoop.com/openai-chatgpt-atlas-prompt-injection-browser-agent-security-update-head-of-preparedness/ (secondary; security update)
• https://layerxsecurity.com/blog/layerx-identifies-vulnerability-in-new-chatgpt-atlas-browser/ (secondary; LayerX memory-injection + phishing test findings)
• https://www.theregister.com/2025/10/27/atlas_vulnerability_memory_injection/ (secondary; memory injection)

Wayback Machine snapshots queued.