diff --git a/frontend-modern/browser-tests/patrol-rule-help.cjs b/frontend-modern/browser-tests/patrol-rule-help.cjs
index 3df7bb9bc2..1f5ff4f0fe 100644
--- a/frontend-modern/browser-tests/patrol-rule-help.cjs
+++ b/frontend-modern/browser-tests/patrol-rule-help.cjs
@@ -32,7 +32,10 @@ const server = http.createServer((request, response) => {
       <pre style="white-space:pre-wrap;max-width:1000px">${escape(snippet)}</pre>`);
     return;
   }
-  assert.ok(request.url.startsWith('/api/ai/patrol/suppressions'));
+  if (!request.url.startsWith('/api/ai/patrol/suppressions')) {
+    response.writeHead(404).end();
+    return;
+  }
   const hasSession = (request.headers.cookie || '').includes('pulse_session=synthetic-session');
   const expectedOrg = request.headers['x-pulse-org-id'] === 'org-a';
   const validCSRF = request.headers['x-csrf-token'] === 'synthetic-csrf';
diff --git a/internal/api/patrol_suppression_management_test.go b/internal/api/patrol_suppression_management_test.go
index 9d2575b31d..1add39ed89 100644
--- a/internal/api/patrol_suppression_management_test.go
+++ b/internal/api/patrol_suppression_management_test.go
@@ -31,6 +31,7 @@ func TestPatrolSuppressionManagementBrowserSession(t *testing.T) {
 		t.Helper()
 		req := httptest.NewRequest(method, path, nil)
 		req.RemoteAddr = "127.0.0.1:12345"
+		req.Header.Set("User-Agent", "test-agent")
 		req.Header.Set("X-Requested-With", "XMLHttpRequest")
 		req.Header.Set("X-Pulse-Org-ID", "default")
 		if authenticated {