Operator transforms AI from a passive tool to an active participant in the digital ecosystem. It will streamline tasks for users and bring the benefits of agents to companies that want innovative customer experiences and desire higher rates of conversion. OpenAI are collaborating with companies like DoorDash, Instacart, OpenTable, Priceline, StubHub, Thumbtack, Uber, and others to ensure Operator addresses real-world needs while respecting established norms.
(Image Source)
GLOOpen AI today launched a research preview of Operator, an agent that can use its own browser to perform tasks for you. Operator is one of our first agents, which are AIs capable of doing work for you independently—you give it a task and it will execute it.
Operator is based on a new model we’re calling “computer-using agent” (CUA). CUA combines GPT-4o’s vision capabilities with advanced reasoning through reinforcement learning. It’s trained to control a computer in the same way a human would—it looks at the screen, and uses a mouse and keyboard.
Since this is a research preview, we are starting small—Operator will first be available to Pro users in the US at operator.chatgpt.com. Eventually, this will be part of ChatGPT and available more broadly. OpenAI plan to bring CUA to the API for developers soon.
Preview “Operator”
How Operator works
Operator is powered by a new model called Computer-Using Agent (CUA). Combining GPT-4o’s vision capabilities with advanced reasoning through reinforcement learning, CUA is trained to interact with graphical user interfaces (GUIs)—the buttons, menus, and text fields people see on a screen.
Operator can “see” (through screenshots) and “interact” (using all the actions a mouse and keyboard allow) with a browser, enabling it to take action on the web without requiring custom API integrations.
If it encounters challenges or makes mistakes, Operator can leverage its reasoning capabilities to self-correct. When it gets stuck and needs assistance, it simply hands control back to the user, ensuring a smooth and collaborative experience.
While CUA is still in early stages and has limitations, it sets new state-of-the-art benchmark results in WebArena and WebVoyager, two key browser use benchmarks. Read more about evals and the research behind Operator in research blog post..
How to use
To get started, simply describe the task you’d like done and Operator can handle the rest. Users can choose to take over control of the remote browser at any point, and Operator is trained to proactively ask the user to take over for tasks that require login, payment details, or when solving CAPTCHAs.
Users can personalize their workflows in Operator by adding custom instructions, either for all sites or for specific ones, such as setting preferences for airlines on Booking.com. Operator lets users save prompts for quick access on the homepage, ideal for repeated tasks like restocking groceries on Instacart. Similar to using multiple tabs on a browser, users can have Operator run multiple tasks simultaneously by creating new conversations, like ordering a personalized enamel mug on Etsy while booking a campsite on Hipcamp.
Ecosystem & users
Operator transforms AI from a passive tool to an active participant in the digital ecosystem. It will streamline tasks for users and bring the benefits of agents to companies that want innovative customer experiences and desire higher rates of conversion. OpenAI are collaborating with companies like DoorDash, Instacart, OpenTable, Priceline, StubHub, Thumbtack, Uber, and others to ensure Operator addresses real-world needs while respecting established norms. In addition to these collaborations, they see a lot of potential to improve the accessibility and efficiency of certain workflows, particularly in public sector applications. To explore these use cases further, we’re working with organizations like the City of Stockton to make it easier to enroll in city services and programs.
Safety and privacy
Ensuring Operator is safe to use is a top priority, with three layers of safeguards to prevent abuse and ensure users are firmly in control.
First, Operator is trained to ensure that the person using it is always in control and asks for input at critical points.
-
Takeover mode: Operator asks the user to take over when inputting sensitive information into the browser, such as login credentials or payment information. When in takeover mode, Operator does not collect or screenshot information entered by the user.
-
User confirmations: Before finalizing any significant action, such as submitting an order or sending an email, Operator should ask for approval.
-
Task limitations: Operator is trained to decline certain sensitive tasks, such as banking transactions or those requiring high-stakes decisions, like making a decision on a job application.
-
Watch mode: On particularly sensitive sites, such as email or financial services, Operator requires close supervision of its actions, allowing users to directly catch any potential mistakes.
Next, OpenAI have made it easy to manage data privacy in Operator.
-
Training opt out: Turning off ‘Improve the model for everyone’ in ChatGPT settings means data in Operator will also not be used to train our models.
-
Transparent data management: Users can delete all browsing data and log out of all sites with one click under the Privacy section of Operator settings. Past conversations in Operator can also be deleted with one click.
Lastly, OpenAI has built defenses against adversarial websites that may try to mislead Operator through hidden prompts, malicious code, or phishing attempts:
-
Cautious navigation: Operator is designed to detect and ignore prompt injections.
-
Monitoring: A dedicated “monitor model” watches for suspicious behavior and can pause the task if something seems off.
-
Detection pipeline: Automated and human review processes continuously identify new threats and quickly update safeguards.
OpenAi has designed Operator to refuse harmful requests and block disallowed content. Moderation systems can issue warnings or even revoke access for repeated violations, and they’ve integrated additional review processes to detect and address misuse. They’re also providing guidance on how to interact with Operator in compliance with our Usage Policies.
While Operator is designed with these safeguards, no system is flawless and this is still a research preview; we are committed to continuous improvement through real-world feedback and rigorous testing. For more on our approach, visit the safety section of the Operator research blog.
Limitations
Operator is currently in an early research preview, and while it’s already capable of handling a wide range of tasks, it’s still learning, evolving and may make mistakes. For instance, it currently encounters challenges with complex interfaces like creating slideshows or managing calendars. Early user feedback will play a vital role in enhancing its accuracy, reliability, and safety, helping us make Operator better for everyone.
What’s next
CUA in the API: Open AI plans to expose the model powering Operator, CUA, in the API soon so that developers can use it to build their own computer-using agents.
Enhanced Capabilities: OpenAI will continue to improve Operator’s ability to handle longer and more complex workflows.
Wider Access: OpenAI plans to expand Operator(opens in a new window) to Plus, Team, and Enterprise users and integrate its capabilities directly into ChatGPT in the future once we are confident in its safety and usability at scale, unlocking seamless real-time and asynchronous task execution.
Source: OpenAI
Disclaimer: Press release
© Press Release 2025
Send us your press releases to news@globalloyalty.org
Press releases originate from external third-party providers. This website does not have responsibility or control over its content, which is presented as is, without any alterations. Neither this website nor its affiliates guarantee the accuracy of the views or opinions expressed in the press release.
The press release is intended solely for informational purposes and does not offer tax, legal, or investment advice, nor does it express any opinion regarding the suitability, value, or profitability of specific securities, portfolios, or investment strategies. Neither this website nor its affiliates are liable for any errors or inaccuracies in the content, nor for any actions taken based on it. By using the information provided in this article, you agree to do so at your own risk.
To the maximum extent permitted by applicable law, this website, its parent company, subsidiaries, affiliates, shareholders, directors, officers, employees, agents, advertisers, content providers, and licensors shall not be liable to you for any direct, indirect, consequential, special, incidental, punitive, or exemplary damages, including but not limited to lost profits, savings, and revenues, whether in negligence, tort, contract, or any other theory of liability, even if the possibility of such damages was known or foreseeable.
The images used in press releases and articles provided by 3rd party sources belong to the respective source provider and are used for illustrative purposes in accordance with the original press releases and publications.
Disclaimer: Content
While we strive to maintain accurate and up-to-date content, Global Loyalty Organisation Ltd. makes no representations or warranties of any kind, express or implied, about the correctness accuracy, completeness, adequacy, or reliability of the information or the results derived from its use, not that the content will meet your requirements or expectations. The content is provided “as is” and “as available”. You agree that your use of the content is at your own risk. Global Loyalty Organisation Ltd. disclaims all warranties related to the content, including implied warranties of merchantability, fitness for a particular purpose, non-infringement, and title, and is not liable for a particular purpose, non-infringement, and title, and is not liable for any interruptions. Some jurisdictions do not allow the exclusion of certain warranties, so these jurisdictions may not apply to you. Global Loyalty Organisation Ltd. Reserves the right to modify, interrupt, or discontinue the content without notice and is not liable for doing so.
Global Loyalty Organisation Ltd. shall not be liable for any damages, including special, indirect, consequential, or incidental damages, or damages for lost profits, revenue, or use, arising out of or related to the content, whether in contract, negligence, tort, statute, equity, law, or otherwise, even if advised of such damages. Some jurisdictions do not allow limitations on liability for incidental or consequential damages, so this limitation may not apply to you. These disclaimers and limitations apply to Global Loyalty Organisation Ltd. and its parent, affiliates, related companies, contractors, sponsors, and their respective directors, officers, members, employees, agents, content providers, licensors, and advisors.
The content and its compilation, created by Global Loyalty Organisation Ltd, are the property of Global Loyalty Organisation Ltd. and cannot be reproduced without prior written permission.
