headless-detection

Privacy-first browser attestation framework for anti-bot and anti-AI scraping. Stateless, cryptographic, and Unix-native. Uses Ed25519 heartbeat chains, WASM attestation, and behavioral continuity validation without tracking users, storing IPs, or collecting telemetry.

Detect bots, verify humans.

Agent Skills for browser fingerprint testing: run liarjs from Claude Code, Codex, Cursor or Copilot to score a browser against itself - 40 consistency checks over canvas, WebGL, WebGPU, audio, fonts and WebRTC, cross-checked against the TLS/HTTP layer. Playwright and Puppeteer harness QA, CI regression gates, headless detection triage.

Client-side HTML mutation engine — rewrites the live DOM every load so scrapers, headless browsers, and AI vision models see a hostile, ever-changing document, with zero change for real users.

Deep in-browser detector for Chrome DevTools Protocol traces and browser-automation artifacts. 31 probes: CDP side-channels, input-event forensics, behavioural biometrics, framework artifacts, cross-realm consistency, anti-detect tamper forensics.

Browser tamper detection for hostile environments. Detects and blocks DevTools, automation drivers, extension injection and environment spoofing. Surfaces findings as structured risk signals, not just boolean flags.