Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More<\/em><\/p>\n\n\n\n It was a big week for AI announcements following events from Microsoft, Google, and Anthropic. But OpenAI is finishing things out with news of its own. And no, we\u2019re not just talking about its $6.5 billion acquisition of Jony Ive\u2019s design team to lead a new hardware effort, \u201cio\u201d at OpenAI. <\/p>\n\n\n\n Today, the company upgraded its Operator autonomous web browsing and cursor controlling agent within ChatGPT from using the prior GPT-4o multimodal large language model to the newer and more powerful o3 reasoning model. <\/p>\n\n\n\n The update, released globally today, May 23, 2025, is available as a \u201cresearch preview\u201d to paying subscribers of OpenAI\u2019s $200 USD-monthly ChatGPT Pro plan. <\/p>\n\n\n\n Basically, that is OpenAI\u2019s way of saying it\u2019s not a fully \u201csanded down\u201d or perfected product yet \u2014 it may still have kinks and issues.<\/p>\n\n\n\n But with rival Google offering its own top tier AI subscription bundle for a price of nearly $250 USD regularly (currently running a discount down to $125 for the first three months) to access its latest Gemini multimodal, Imagen image generation, and Veo video generation models, suddenly OpenAI\u2019s ChatGPT Pro plan seems more affordable by comparison. <\/p>\n\n\n\n Operator first debuted in January 2025 as OpenAI\u2019s initial step into semi-autonomous agents, specifically Computer Using Agents (CUAs). The idea is to go beyond the chatbot interface of ChatGPT and allow OpenAI\u2019s powerful AI models to start taking more actions on behalf of the user.<\/p>\n\n\n\n Thus, Operator was designed to autonomously point, click, scroll, and type to complete web-based tasks such as booking dinner reservations, compiling shopping lists, or ordering event tickets. This agentic capability allows it to complete user tasks directly through a browser interface, from booking reservations to gathering online data.<\/p>\n\n\n\n For safety, privacy and security purposes, Operator didn\u2019t use any existing web browser on a user\u2019s PC or Mac. Instead, it ran in a cloud-hosted virtual browser accessible via a standalone site\u2014operator.chatgpt.com\u2014where users could input requests and observe the agent perform tasks in real time. <\/p>\n\n\n\n It combined vision, reasoning, and interaction capabilities based on GPT-4o, marking a new direction for OpenAI in agentic AI. <\/p>\n\n\n\n The product was launched as a research preview for ChatGPT Pro subscribers and featured built-in safety measures like user confirmations, Watch Mode, and restrictions on high-risk web platforms. <\/p>\n\n\n\n It was also being tested in enterprise contexts, including travel planning and civic services, demonstrating its potential across both consumer and business environments.<\/p>\n\n\n\n With this update, OpenAI aims to enhance performance across several key dimensions. The new o3-based Operator demonstrates improved persistence and accuracy during browser interactions. <\/p>\n\n\n\n In practical terms, this means it is more likely to complete user tasks successfully and with less need for correction or repetition. Moreover, users can expect responses that are clearer, more structured, and more comprehensive.<\/p>\n\n\n\n In comparative evaluations, the new model shows a distinct preference advantage over its predecessor. Human preference studies reveal that users favor the o3 model for its style, comprehensiveness, and clarity. It also performs strongly in instruction following and efficiency, though results for factual correctness are more balanced between versions.<\/p>\n\n\n\n Performance on third-party evaluation benchmarks reflects these enhancements. On the OSWorld benchmark that measures completion of browser-based tasks, the o3 model scores 42.9 compared to 38.1 for the previous version.<\/p>\n\n\n\n However, OpenAI notes that due to limitations in the automated grading system, the actual performance gain could be closer to 20 percentage points! <\/p>\n\n\n\n On WebArena, the new model achieved a score of 62.9, up from 48.1. The most dramatic improvement appears on the GAIA benchmark, where the o3 model scores 62.2, vastly surpassing the prior model\u2019s 12.3.<\/p>\n\n\n\n Side-by-side task comparisons further illustrate these gains. In one example involving a restaurant booking request, the new model provided a clearer and more detailed list of available reservations, including locations, Michelin ratings, and seating notes, presented in a well-formatted table. The previous version, while functional, delivered less information in a less organized manner, according to an image included with the new o3 Operator release notes:<\/p>\n\n\n\n The o3 model also inherits the safety measures introduced with earlier versions, with further fine-tuning for its role as an agentic system. <\/p>\n\n\n\n OpenAI has integrated enhanced training against harmful task execution, prompt injection vulnerabilities, and mistakes involving user intent. <\/p>\n\n\n\n Evaluations show that the model now confirms 94% of sensitive actions before executing them, with 100% confirmation in financial transactions. Prompt injection susceptibility has also decreased from 23% to 20%.<\/p>\n\n\n\n Notably, the o3 Operator maintains a cautious boundary on certain high-risk web interactions, such as email or financial platforms, where it may require user supervision via Watch Mode or explicitly refuse to proceed. These measures are part of a layered approach to safety that combines model-level robustness with real-time monitoring.<\/p>\n\n\n\n While the upgrade to Operator marks a technical improvement, it also reflects OpenAI\u2019s ongoing commitment to responsible AI deployment. <\/p>\n\n\n\n The system\u2019s ability to take real-world actions introduces new risks, and the development team continues to refine its safety protocols accordingly.<\/p>\n\n\n\n According to OpenAI\u2019s updated o3 system card documentation, the model remains below high-risk capability thresholds in categories such as biological and chemical misuse and has no native coding environment or terminal access, further reducing potential misuse vectors.<\/p>\n\n\n\n Operator remains a research preview and is accessible only to ChatGPT Pro users. The Responses API version of Operator will continue to be based on the GPT-4o model, at least for now.<\/p>\n\n\n\n The upgraded Operator stands to significantly enhance the workflows of professionals in AI engineering, orchestration, data management, and IT security. <\/p>\n\n\n\n For those building or maintaining machine learning models, the model\u2019s improved accuracy and structured outputs reduce the overhead of test validation and troubleshooting. <\/p>\n\n\n\n In orchestration contexts, it offers a practical, reliable tool for automating browser-based components of complex pipelines. <\/p>\n\n\n\n Data engineers can delegate manual web interactions\u2014such as data verification and scraping\u2014with more confidence, freeing time for higher-level optimization work. <\/p>\n\n\n\n Security professionals, meanwhile, gain a safer way to simulate user behavior in audits and incident response exercises, thanks to the model\u2019s layered safety mechanisms. <\/p>\n\n\n\n Across these disciplines, the o3-based Operator introduces both a capability upgrade and a risk mitigation framework, making it a practical addition to the modern technical toolkit.<\/p>\n Daily insights on business use cases with VB Daily<\/strong><\/p>\n If you want to impress your boss, VB Daily has you covered. We give you the inside scoop on what companies are doing with generative AI, from regulatory shifts to practical deployments, so you can share insights for maximum ROI.<\/p>\n \n\t\t\t\t\tThanks for subscribing. Check out more VB newsletters here.\n\t\t\t\t<\/p>\n An error occured.<\/p>\n<\/p><\/div>\n
\n<\/div>What is OpenAI\u2019s Operator and what is it for?<\/h2>\n\n\n\n
o3 offers improved accuracy, structure, and success rates<\/h2>\n\n\n\n
![\"\"](\"https:\/\/venturebeat.com\/wp-content\/uploads\/2025\/05\/AD_4nXdMZBvoyTu6KtTasbZ-kDBwpJY3ObMxr8cn_TxJXsw95Ns4sjAU0462k2Ne7ODxJkN9CHDxPCXCfSLz0oXvxVBhc1LLfZvlW7OLOz7npBouuHWmkFHAJXb52WxizTMSfCkqG_JxKQ.png?w=800\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/venturebeat.com\/wp-content\/uploads\/2025\/05\/AD_4nXfU1aOEs3fXJjKQ3TMvRl7bTQQMpdET8ms3r9hZ0QgPwArByaWEvCxcvs6YCnbtY83rlCvr8yzo4mWStgNcwUf9YZ0KvalUeb_WOy_n-XL4U1rUqqTihgcXrZHknXgZbAJ5X_8aNw-2.png?w=800\")
<\/figure>\n\n\n\n![\"\"](\"https:\/\/venturebeat.com\/wp-content\/uploads\/2025\/05\/Screenshot-2025-05-23-at-4.21.07%E2%80%AFPM.png?w=690\")
<\/figure>\n\n\n\nSafeguards remain, as do general cautionary notes about usage on sensitive, financial transactions and account access<\/h2>\n\n\n\n
Implications for enterprise technical decision-makers <\/h2>\n\n\n\n
![\"\"\/](\"https:\/\/venturebeat.com\/wp-content\/themes\/vb-news\/brand\/img\/vb-daily-phone.png\")
\n\t\t\t\t<\/div>\n<\/p><\/div>\n<\/div>\t\t\t<\/div>\r\n