198 tools no other browser has. Zero telemetry by default — the only outbound path is the opt-in, default-off, narrated Bella context sync. Your passwords never seen by AI. Trusted input events (isTrusted: true) for reliable AI automation.
Built into the browser itself — not an extension you install, a cloud you connect to, or a policy you hope they keep. Eight domains of capability. Zero compromise.
See who tracks you in plain English. Every tracker named, counted, and explained — not just a number in a shield.
Save anything. GPS stripped. Camera data removed. Encrypted before it touches your disk. Crypto-shred any category in an instant.
Connect Claude, Cursor, or any MCP-compatible AI to 198 native browser tools — no model download. For total network isolation, enable the optional local LLM (~1.1 GB, off by default).
Your bank writes a certain way. Phishing pages get the visual design right but the writing wrong. We catch what URL checkers miss.
Six dialects. RTL override attack detection. Homoglyph identification. Mixed-script domain warnings. The only browser built for Arabic speakers.
Your browsing rhythm becomes your encryption key. Even with stolen credentials, an attacker cannot match your keystroke timing.
Save passwords, import from Chrome/Firefox/Safari, sync with 1Password and Bitwarden. When AI fills a login form, it never sees the password — a single-use token handles the injection. Crypto-shred any category instantly.
Route any tab through Saj Loop VPN with one click. Each tab gets its own SOCKS5 tunnel — your banking tab uses a VPN while your news tab doesn't. Same exit IP across all navigation. DNS leak proof.
AI agents can navigate, click, fill forms, audit security, extract data, run accessibility checks, detect dark patterns, analyse commerce flows, and capture design sessions. 8 domain categories. Each agent gets its own tab. Zero cross-session interference.
Browser automation dispatched as trusted input (isTrusted: true), so AI agents can reliably drive apps that ignore synthetic events. Dispatch runs in-process through the engine's own input path — no remote debugging port, no CDP.
AI co-browsing with full audio and video. Stream what you see. Speak commands. Receive spoken responses. The AI can hear the page, describe what it sees, and guide you — without any cloud relay.
1Password, Bitwarden, Proton Pass, Dashlane, LastPass, Keeper, KeePass, NordPass, Apple Keychain, Google Passwords, pass/gopass, and Generic CSV import. Your passwords stay in your manager. AI fills forms using a one-time token. The password is never seen.
Paddle, Stripe, PayPal, Braintree, Square, Razorpay, and 9 more — all allowlisted so checkout flows work perfectly even with aggressive tracker blocking active. Privacy and commerce, together.
Saj Browse organises its 198 MCP tools into eight capability domains — giving AI agents full-spectrum control over what happens in the browser and on the web.
Screen reader simulation, cognitive load index, colour blindness simulation, WCAG compliance checks, contrast analysis, focus management audit, keyboard nav testing, ARIA validation.
Supply chain audit, fingerprint exposure report, API key scanner, prompt injection detection, sub-resource integrity checks, CORS policy audit, leaked credential detection, dependency vulnerability scan.
Entity extraction, table intelligence, schema inference, grid extraction, paginated scraping, semantic content analysis, structured data export. Turn any page into structured data, instantly.
Performance flame graph, bundle analyser, API mock injection, SPA route mapping, cascade trace, render bottleneck detection, network waterfall export. Debug production sites from inside the browser.
Visual regression testing, journey recording, journey replay, cross-page assertion, multi-step form automation, screenshot comparison. Record once, replay across a thousand pages.
Real user monitoring simulation, carbon footprint estimation, render bottleneck isolation, Core Web Vitals root cause, layout shift attribution. Optimise before your users notice.
Checkout flow auditor, price tracker, ad fraud detection, dark pattern scanner, payment SDK allowlist enforcement. Know what a checkout page is really doing before you pay.
AI-generated content detection, synthetic media detection, prompt leak detection, model fingerprinting, LLM output watermark scan, AI policy analyser, synthetic image detection, AI-assisted dark pattern report.
Saj Browse's AI runs in an isolated process on your device with no network access. This isn't a privacy setting you can toggle — it's how the software is built. The AI component physically cannot reach the internet.
When you ask the AI to analyse a page, it reads the DOM in memory, processes it locally, and returns a result. Nothing leaves your machine. There is no request, no response, no log.
Saj Browse ships an MCP (Model Context Protocol) server that lets AI assistants like Claude, Cursor, and Windsurf control the browser programmatically. 198 tools across 8 domains — navigation, trusted input, security auditing, accessibility, data extraction, developer diagnostics, performance, commerce, and AI/ML analysis. Per-session tab isolation means multiple agents work simultaneously without any interference. Bidirectional audio and video let the AI hear the page and speak responses back.
We didn't invent the category. We completed it.
| Feature | Saj Browse | Chrome | Firefox | Brave | Tor Browser |
|---|---|---|---|---|---|
| Built-in ad/tracker blocking | YES | — | ✓ | ✓ | ✓ |
| On-device AI assistant | YES | — | — | — | — |
| Writing style phishing detection | YES | — | — | — | — |
| Arabic phishing protection (6 dialects) | YES | — | — | — | — |
| Encrypted vault with crypto-shred | YES | — | — | — | — |
| Behavioral authentication | YES | — | — | — | — |
| Built-in E2E messaging | YES | — | — | — | — |
| Zero telemetry | YES | — | — | Partial | ✓ |
| Per-category key isolation | YES | — | — | — | — |
| Zero-knowledge password fill | YES | — | — | — | — |
| Per-tab VPN tunneling | YES | — | — | — | — |
| MCP agent protocol (198 tools) | YES | — | — | — | — |
| Trusted events (isTrusted:true automation) | YES | — | — | — | — |
| Bidirectional audio/video AI co-browsing | YES | — | — | — | — |
| 12 password manager adapters | YES | — | Import only | Import only | — |
| Payment SDK allowlist (checkout compatible) | YES | ✓ | — | Partial | — |
| Passkey/WebAuthn vault | YES | ✓ | — | — | — |
This is what you'd see clicking the Saj Browse shield on a typical news website. Every tracker explained, not anonymised.
Saj Browse is one piece of a sovereign technology ecosystem. Every product shares the same principle: your data belongs to you.
End-to-end encrypted messaging. Your conversations stay on your device.
Privacy-first voice AI. Zero cloud dependency.
On-device visual AI. See everything. Share nothing.
Post-quantum encryption architecture. Built for what comes next.
Executive intelligence that connects to your browser and understands your world.
The platform. Where all of it connects.
The most important protections are free — because security that only wealthy people can afford isn't security at all.
Silent deployment (pre-configured MSI/pkg). SSO (SAML/OIDC). Compliance audit logs. Custom brand phishing profiles. Managed update control.
No account required. No telemetry. No catch. Verify every download against the signed release manifest before running it.
Once Saj Browse is open, it automatically starts an MCP server at
http://localhost:57822/mcp
— copy that URL and paste it into any MCP-compatible AI.
http://localhost:57822/mcp
claude mcp add --transport http saj-browse http://localhost:57822/mcp
"url": "http://localhost:57822/mcp" under mcpServers.
http://localhost:57822/mcp
Works with any MCP-compatible tool running on the same machine
Add this to ~/Library/Application Support/Claude/claude_desktop_config.json then restart Claude Desktop:
{"mcpServers":{"saj-browse":{"url":"http://localhost:57822/mcp"}}}
Saj Browse must be running for the MCP server to respond. The proxy starts automatically when you open the browser.