VerisoulAgent Atlas
All agents

Kernel

Run by Kernel

Type: Headless automationSignedHow common: Very uncommon

How to detect Kernel

Kernel signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from Kernel; a copied user agent without the signature does not.

Detection method
SignedThe agent signs its requests, so its identity is verified cryptographically.
Signals that identify it
  • CryptographicA signed request verified cryptographically
  • DeviceHeadless or automated browser markers in the device fingerprint
  • BehavioralScripted navigation with no human input

Every signal Verisoul checks for Kernel

Kernel signs its requests, so we verify who it is cryptographically, then check the rest of the session.

  • Used

    Cryptographic

    A signed request verified cryptographically

  • Not used

    Network

    Not needed to identify it

  • Used

    Device

    Headless or automated browser markers in the device fingerprint

  • Used

    Behavioral

    Scripted navigation with no human input

How often you'll see it

Very uncommon

Rare, brand new, or not seen on Verisoul traffic yet

Questions about Kernel

How do you detect Kernel?

Kernel signs its requests, so you detect it by verifying the cryptographic signature on each request. A valid signature proves the request came from Kernel; a copied user agent without the signature does not.

What is Kernel?

Kernel is Hosted browser automation from Kernel that signs its requests.

Does Kernel identify itself?

Yes. Kernel signs its requests cryptographically, which is the strongest way an agent can identify itself.

Can a bot pretend to be Kernel?

Not convincingly. A bot can copy Kernel's user agent, but without Kernel signing keys its requests fail verification and it is not labeled Kernel.

How common is Kernel?

Very uncommon. Rare, brand new, or not seen on Verisoul traffic yet.

What does the Verisoul API return for Kernel?

Every session Verisoul identifies as Kernel carries an agent block with id "kernel", name, provider, type "headless_automation", detection_method "signed" and the detection_signals used (cryptographic, device, behavioral). Build rules on the id, type and detection method.