The only safe solution imho is to run any such tests offline.

Since these companies already have scraped the public internet, they can have a "secure" network behind proxies, and then whatever parts of a cached internet they desire on the other side of the proxies.

Then they can do the targeted tests on the "secure" net, and they can detect if the agents goes rouge.