Alternatives
Products that do what Fingerprinting browser-impersonating bots w/o JavaScript (open spec) does
I've published an open specification for a detection method I'm calling RQ4 (Request Context Fingerprinting). It analyzes whether HTTP request headers are logically consistent with real browser behavior - not just what headers are present, but whether they make sense together given the request context.
- 1
- 2
- 3CB
Not new but quite cool. Note: https://creepjs.org/ is NOT official the repo is https://github.com/abrahamjuliot/creepjs Anyone knows how fingerprinting works mathematically? what do they use? when the signals may vary even slightly, your final hash should be sufficiently accurate and stable. A simple hash won't do it. Changing IP, missing cookies/session, resizing window, TLS/SSL browser handshake, screen depth, font rendering, MTR, network latency if you want to measure, etc... any signal alone means little but as a whole mathematically what is…
Apr 2026 · abrahamjuliot.github.io
- 4
- 5
- 6
- 7
- 8
- 9
- 10
- 11
- 12
- 13BB
2021 · filter.mot.omg.lol
- 14
- 15
- 16SO
2015 · scriptobservatory.org
- 17IH
A simple Go-based HTTP proxy designed for detailed inspection of requests and responses. It logs traffic to the console with colorization, automatic decompression, and formatting for common content types, while remaining transparent to the client application. Ideal for debugging API interactions, understanding middleware behavior, or simply getting a clear view of HTTP traffic flow with jq-like pretty-printing & colorization of request/response. Automatically redacts parts of Authorization header to avoid token leakage.
2025 · github.com
- 18BP
I've been researching the bot & proxies space for years. I slowly incubated a service to protect public forms, contents and APIs. It recenty reached a few million daily requests and I now dare to bring it to light. Truesign detects bots, proxies/vpns and fake emails, through a single request from the browser, without challenges or user interaction. It can block the request based on rules you choose, or grant a token with encrypted information about the visitor for you to decide. I created a few pages to showcase how it works: - https:/demo.truesign.ai/protected-form : a form…
Oct 2025 · truesign.ai
- 19DC
2018 · github.com
- 20WS
http://webscanner.tk/quickscan/ Hi! I made this project over the couse of a week to help teach myself more about Django and web app development. I am studying computer security in school and web security is one of my passions. It is a tool that helps web developers ensure that they have implemented helpful security mechanisms like HTTPOnly flags, X-Frame-Options, etc. There are hundreds of tools that offer to scan websites for things like cross-site scripting, mySQL injection, etc. This tool simply looks for information that is available via one or two GET requests (the headers, protocols,…
2013
- 21OO
We're building an open source implementation for Web Bot Auth, which is an IETF draft for signed agent authentication over HTTP, without CDN lock-in. We've built a social registry, using Github login, where you can host your Signature Agent card/JWKS over a dedicated link. This saves you buying a domain and self-hosting your card. Please try it out : https://openbotauth.org/login We've also built a Wordpress plugin, which works in signed and unsigned mode. Unsigned mode gives you a preview and Signed mode gives you all access. Websites can point their origin server to our…
Nov 2025 · github.com
- 22CH
There is a growing number of companies offering anti-bot protection SaaS to protect websites from scraping by automated bots based on Puppeteer/Selenium. Most of them rely on browser properties such as headers, javascript properties (window., navigator.), behavior analysis, to build device/user fingerprints and match it against a database of "whitelisted" fingerprints (typical user behavior/settings/device props etc). For the past few months, together with two other devs I have worked on a customized Puppeteer/Playwright scraping backend. It's essentially a drop-in…
2021
- 23CP
Hi HN, I built CountermarkAI, a lightweight anti-scraping & bot-detection tool for content creators and website owners. It’s designed to help protect your work from unauthorized scraping and AI training, that repurposed your work without permission. How It Works: Use Hashtag – Creators add a unique hashtag to their content as a declaration of ownership. Protect Website – For those running your own sites, simply add a small snippet to your . The protect.js script works asynchronously by sending metadata from every page load back to our servers, logging requests, and flagging known AI-training…
2025 · countermarkai.com
- 24TS
Hi HN, I’m Guillaume, the cofounder of Bearer, an Open Source SAST solution. After launching a few weeks ago here on Hacker News with support for Ruby and JavaScript stacks, I’m happy to report we’ve just released a new version (v1.2) with TypeScript support! In terms of code coverage, we use the same rules already implemented for vanilla JavaScript, but as usual, you can build your own. The rules list is here: https://docs.bearer.com/reference/rules/ It’s a first version for TS, but we believe that thanks to the pre-existing JavaScript support it should already…
2023
Ranked by how close each launch is in meaning, then by votes. Refine with a description →