DevTools automation
An open source tool anyone can run
How to detect DevTools automation
DevTools automation identifies itself through its own markers in the browser. Those can be faked, so it is detected by confirming them against other signals: where the traffic comes from, such as the IP address and hosting network, matches the operator; and scripted navigation with no human input.
- Detection method
- Self-declaredThe agent names itself in its user agent, and Verisoul confirms it with network, device or behavioral data. A user agent alone is never enough.
- Signals that identify it
- NetworkWhere the traffic comes from, such as the IP address and hosting network, matches the operator
- DeviceDevTools-protocol automation artifacts in the browser
- BehavioralScripted navigation with no human input
Every signal Verisoul checks for DevTools automation
DevTools automation identifies itself through its own markers in the browser. Those can be faked, so we only label a session DevTools automation when the other signals check out too.
- Not used
Cryptographic
Not needed to identify it
- Used
Network
Where the traffic comes from, such as the IP address and hosting network, matches the operator
- Used
Device
DevTools-protocol automation artifacts in the browser
- Used
Behavioral
Scripted navigation with no human input
How often you'll see it
Very common
One of the biggest sources of automated traffic on the web. Expect it on almost every site
More open source tools
Questions about DevTools automation
How do you detect DevTools automation?
DevTools automation identifies itself through its own markers in the browser. Those can be faked, so it is detected by confirming them against other signals: where the traffic comes from, such as the IP address and hosting network, matches the operator; and scripted navigation with no human input.
What is DevTools automation?
DevTools automation is a browser driven over the Chrome DevTools Protocol by Puppeteer, Playwright and similar tools.
Does DevTools automation identify itself?
Partly. DevTools automation leaves its own markers in the browser, but those can be faked, so they are checked against other signals.
Can a bot pretend to be DevTools automation?
A bot can copy DevTools automation's user agent or markers, but the network, device and behavior signals will not match, so it is not labeled DevTools automation.
How common is DevTools automation?
Very common. One of the biggest sources of automated traffic on the web. Expect it on almost every site.
What does the Verisoul API return for DevTools automation?
Every session Verisoul identifies as DevTools automation carries an agent block with id "cdp_automation", name, provider, type "headless_automation", detection_method "self_declared" and the detection_signals used (network, device, behavioral). Build rules on the id, type and detection method.