The browser wars ended in 2017. The agent OS war started this week.

In the span of 60 days: OpenAI embedded agent mode into every ChatGPT subscription. Perplexity launched an AI-native browser that places orders, books appointments, and manages email. Anthropic shipped Claude Cowork — Claude Code for the rest of your work, sitting inside your filesystem. And at GTC this week, NVIDIA announced that every company needs an “OpenClaw strategy,” calling it “definitely the next ChatGPT.”

These are not features. They are bids for the same position: the privileged layer between your employees and every application they use.

This is a platform war

The browser war ran from 1995 to 2017. Microsoft won the first round not by building a better browser, but by bundling Internet Explorer with Windows 95. Netscape went from 80% market share to irrelevant without Microsoft shipping anything technically superior. Google won the second round with developer tools and ecosystem integration.

That’s the pattern. And it’s repeating.

The question for every company in 2026 is the same one enterprises faced in 1998: which layer do you let in? Whoever becomes the default action layer in your software stack will see everything your employees do, act on their behalf, and generate switching costs the moment they’re embedded.

Gartner predicts 40% of enterprise applications will embed task-specific AI agents by 2026, up from under 5% last year. The agents are coming regardless. The question is whose agents, running on whose infrastructure, with whose trust model.

Three architectures, three bets

The contenders aren’t building the same thing. They’re making fundamentally different architectural bets.

Perplexity Comet runs entirely in the cloud. No local access — the argument is that cloud-native is cleaner, more portable, less risky. That argument just got tested in federal court. Amazon sued Perplexity under the Computer Fraud and Abuse Act after Comet circumvented a technical block within 24 hours of it being deployed, disguising automated sessions as regular Chrome traffic. A federal judge issued a preliminary injunction on March 10 — though Perplexity won a stay from the 9th Circuit this week while the case continues.

The central legal question matters for every company building on agents: when an agent acts on behalf of a user, who authorized it? User permission is not the same as platform authorization. That distinction will define the legal surface of agentic commerce for the next decade.

Claude Cowork is local and broad. It sits inside a folder on your machine with access to your files, browser, and connected applications. It runs on a schedule. TIME called it “what’s next after chatbots” — and enterprise software stocks lost $285 billion in a single day when Anthropic announced plugin integrations, with markets repricing the entire SaaS sector.

OpenClaw + NemoClaw is local and sandboxed. Open source at the base, with NVIDIA’s enterprise security layer on top. NemoClaw adds what raw OpenClaw lacks: a policy engine defining what agents can access and execute, a privacy router keeping sensitive data on-device, and OpenShell — a sandboxed runtime NVIDIA is embedding into Cisco, CrowdStrike, Google, and Microsoft security stacks. NVIDIA’s product is trust as infrastructure, not compute.

Three bets: cloud-native and portable, local and broad, local and sandboxed. They cannot all be right about security. The market will decide — but probably not before you’ve already committed to one.

What picking wrong costs

57% of IT leaders spent more than $1 million on platform migrations last year. That’s traditional software. Agents are stickier — they learn your workflows, your file structures, your application integrations. Switching an embedded agent platform is not a licensing decision. It’s a rearchitecting decision.

The companies that avoided the worst lock-in in the cloud era built to abstractions: containers, cloud-agnostic APIs, infrastructure-as-code. The same instinct applies here. Build agents that are modular and interoperable. Don’t hardwire your workflows to a single platform’s API, access model, or trust architecture.

The winner of this war isn’t decided yet. Netscape was first. That didn’t help.

If your team is navigating agent platform decisions and needs a framework that doesn’t change every quarter, talk to us at jfsi.io.

Sources: CNBC — Jensen Huang: OpenClaw Is ‘Definitely the Next ChatGPT’ · NVIDIA Newsroom — NemoClaw · TechCrunch — NVIDIA’s NemoClaw Could Solve Its Biggest Problem: Security · CNBC — Amazon Wins Court Order to Block Perplexity’s AI Shopping Agent · GeekWire — Judge Blocks Perplexity’s AI Bot · ResultSense — Perplexity Wins Stay on Amazon Injunction · TIME — Claude Cowork Shows What’s Next · VentureBeat — NemoClaw Brings Security, Scale to the Agent Platform · Landbase — 39 Agentic AI Statistics · CTO Magazine — The Great AI Vendor Lock-In