How can we help you?

Co-Browse

Co-Browse lets an agent see what a visitor sees on their own screen, live, from inside an active conversation. It's built into the chat widget your visitors already have loaded, so there's nothing for the visitor or the agent to download, and no browser extension to install. When a session starts, Velaro's own recording library loads automatically. There's nothing for you to add to your site or configure to get started.

How it works

  1. Agent requests it. From inside an active conversation, the agent clicks Request Co-Browse.
  2. Visitor accepts. A consent prompt appears in the visitor's chat widget. Nothing streams until they click Allow. This happens every session.
  3. Agent views live. The agent's viewer opens showing a real-time view of the visitor's page, including canvas elements, custom fonts and dynamic content. If the visitor moves to another page on your site, the session carries on and the agent's view follows without asking again.

Co-Browse is never remote control. An agent can't click, type, scroll, navigate or run anything on the visitor's page, on any plan. Co-Browse Plus adds pointing and visitor-approved form fill, described below, and both are designed so the visitor stays in control.

Screen share in video chat is a separate feature. It is a video share the visitor starts from their own browser, and it is not Co-Browse.

Plans

Co-Browse is a per-agent-seat add-on, available on Starter plans and above. Enterprise plans include base Co-Browse for every agent, with no seats to buy. Plus features come from the Co-Browse Plus add-on.

Co-Browse Pro: $29/agent/moCo-Browse Plus: $49/agent/mo
View-only live replay of the visitor's page, consent every sessionIncludedIncluded
Visitor Pause, Resume and Stop (always on)IncludedIncluded
Privacy masking: all inputs masked, plus the sensitive and no-record classesIncludedIncluded
Auto-redaction: card numbers, SSNsIncludedIncluded
Per-site settings, protected pages, session limits, session historyIncludedIncluded
Auto-redaction: email addresses, phone numbersNot includedIncluded
Agent cues: pointer, highlight and annotate on the visitor's pageNot includedIncluded
Guided form fill, approved by the visitor for every fieldNot includedIncluded

Seats are purchased for your account and then assigned to specific agents (or to your whole team). An agent without an assigned seat can't start a Co-Browse session.

What agents can and cannot do

QuestionAnswer
See the visitor's live page?Yes, once the visitor clicks Allow. Every session asks again.
See what the visitor types into forms?No. Every input is masked and the agent never sees real input values.
Point, highlight or annotate on the page?Plus only. It is drawn on the visitor's real page, the visitor sees an "agent is pointing" notice, and the drawing can't be clicked.
Suggest a value for a form field?Plus only, and only if you turn on guided form fill (it is off by default). The visitor sees the field name and the full value and must approve each fill. A request expires after 60 seconds.
Fill a password, card, one-time-code, hidden, disabled, read-only or file field?Never. These are always blocked, along with anything inside an area you tagged sensitive or no-record.
Click, scroll, navigate or run anything on the visitor's page?Never.
Keep a recording?Never. Session history shows who ran each session, when, for how long and how it ended. It holds no page content.
Can the visitor pause or stop?Yes, at any time, on every plan. These controls are always on.

Privacy and security

  • No installation required. Co-Browse is part of the chat widget you already have on your site.
  • Consent required every time. Sharing never starts until the visitor clicks Allow. The visitor can pause, resume or stop from their own chat window.
  • Masked and redacted before it leaves the browser. Every form input is masked. Elements you mark sensitive or no-record, and automatically detected card numbers and SSNs (plus email addresses and phone numbers on Co-Browse Plus), are removed or replaced before anything is sent to the agent.
  • Protected pages. Capture pauses automatically on checkout, payment, billing, account, login and password pages. The agent sees "Visitor is on a protected page" until the visitor leaves it.
  • Only the assigned agent can view a session. Enforced on Velaro's servers, not just hidden in the interface.
  • Every session is logged. Request, accept, decline, stop and each guided fill event are recorded in the conversation transcript. Field names are logged, never the values.

How to tag sensitive content on your page

Every input is already masked, and card numbers and SSNs are redacted automatically. For anything else, such as account numbers, names, addresses or health details, add one of these CSS classes to the element on your own page. Nothing to install, and the Velaro snippet doesn't change.

ClassWhat the agent seesUse it for
sensitiveThe text shown as stars. The layout stays visible.One value inside an otherwise useful page: an account number, balance, name or address.
no-record (or the data-no-record attribute)The element blanked out. Nothing inside it is sent.A whole area: a payment form, ID upload or medical panel.
ignore-recordThe element as it was when sharing started. Later changes are not sent.Noisy live areas such as tickers and counters. This is not a privacy control.
<!-- the agent sees the label but only stars for the number -->
<p>Account: <span class="sensitive">8841-22-9017</span></p>

<!-- the whole payment area is blank to the agent and can never be filled -->
<div class="no-record" id="payment-form"> ... </div>

<!-- also accepted -->
<section data-no-record> ... </section>

<!-- shown at the start, later changes not streamed -->
<div class="ignore-record">Live price ticker</div>

If you display regulated data (healthcare, financial) as plain text, tag it. For a blanket approach, turn on strict mask mode below.

Settings for your site

Go to Admin > Co-Browse. What your plan includes and what you switch on are separate, and both must agree. Each on/off setting can be Platform default, On or Off. Administrators and managers can change settings, and every change is logged. Moshky can change them for you too.

SettingDefaultWhat it does
Agent pointer, highlight and annotation (Plus)OnLets agents draw on the visitor's page.
Guided form fill (Plus)OffLets agents suggest a value. The visitor still approves each one.
Strict mask modeOffMasks all text and hides images and media. The agent sees layout only.
Turn off on mobileOffVisitors on phones and narrow screens are not offered Co-Browse.
Protected pages/checkout /payment /payments /billing /account /login /signin /sign-in /password /secureOne path per line, starting with /. Use * as a wildcard. /account also covers /account/settings. Leave empty for none.
Maximum session length120 minutesBetween 5 and 240 minutes. The session ends automatically.
Stop after inactivity15 minutesBetween 2 and 60 minutes with no visitor or agent activity.
Consent title, message and buttonVelaro wordingYour own text, plain text only (80, 400 and 30 characters).
Who can startEveryone with a seatLimit to certain teams or roles. Administrators are never locked out.

The Session history tab shows who ran each session, when, how long and how it ended (Completed, Declined or Abandoned), with search and filters. No screen content is stored.

Troubleshooting

  • No Co-Browse button, or a "no seat" message: the agent needs a seat, and if "Who can start" is limited they must be on a listed team or role.
  • Pointer or form-fill tools are greyed out: your site needs Co-Browse Plus, and the setting must not be Off.
  • Form fill refused a field: it is a payment, password or one-time-code field, hidden or read-only, or inside a tagged area. This is intentional.
  • The agent sees "Visitor is on a protected page": the visitor's page matches your protected pages list. Sharing resumes on its own when they leave.
  • A session ended by itself: it reached the maximum length or sat idle. Session history shows which.

Related

  • Live Chat Training
  • Compliance & Redaction (server-side transcript redaction, a separate system from Co-Browse's in-browser redaction)
Share: Email

Was this article helpful?