Headless Chrome
An open source tool anyone can run
How to detect Headless Chrome
Headless Chrome names itself in its user agent, but anyone can copy a user agent, so it is detected by confirming the user agent against other signals: where the traffic comes from, such as the IP address and hosting network, matches the operator; and scripted navigation with no human input.
- Detection method
- Self-declaredThe agent names itself in its user agent, and Verisoul confirms it with network, device or behavioral data. A user agent alone is never enough.
- Signals that identify it
- NetworkWhere the traffic comes from, such as the IP address and hosting network, matches the operator
- DeviceHeadless browser markers in the device fingerprint
- BehavioralScripted navigation with no human input
Every signal Verisoul checks for Headless Chrome
Headless Chrome names itself in its user agent. Anyone can copy that, so we only label a session Headless Chrome when the other signals check out too.
- Not used
Cryptographic
Not needed to identify it
- Used
Network
Where the traffic comes from, such as the IP address and hosting network, matches the operator
- Used
Device
Headless browser markers in the device fingerprint
- Used
Behavioral
Scripted navigation with no human input
How often you'll see it
Very common
One of the biggest sources of automated traffic on the web. Expect it on almost every site
More open source tools
Questions about Headless Chrome
How do you detect Headless Chrome?
Headless Chrome names itself in its user agent, but anyone can copy a user agent, so it is detected by confirming the user agent against other signals: where the traffic comes from, such as the IP address and hosting network, matches the operator; and scripted navigation with no human input.
What is Headless Chrome?
Headless Chrome is Chrome running with no visible window, the default for scripted browsing and scraping.
Does Headless Chrome identify itself?
Partly. Headless Chrome names itself in its user agent, but user agents are easy to copy, so the name alone is not proof.
Can a bot pretend to be Headless Chrome?
A bot can copy Headless Chrome's user agent or markers, but the network, device and behavior signals will not match, so it is not labeled Headless Chrome.
How common is Headless Chrome?
Very common. One of the biggest sources of automated traffic on the web. Expect it on almost every site.
What does the Verisoul API return for Headless Chrome?
Every session Verisoul identifies as Headless Chrome carries an agent block with id "headless_chrome", name, provider, type "headless_automation", detection_method "self_declared" and the detection_signals used (network, device, behavioral). Build rules on the id, type and detection method.