Topics / #bot-detection
Bot-detection projects on GitHub
Evading or detecting bots through browser fingerprinting and stealth automation.
As of , the most-starred Bot-detection projects on GitHub are CloakBrowser (32.2K stars), anubis (23.5K stars) and SafeLine (22.8K stars). GitHub.Locker tracks 17 Bot-detection repositories with 167.4K stars combined. The fastest-growing on October 16 was anubis, with +38 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
+38anubis
TecharoHQ/anubis · ★ 23.5KAnubis is a Web AI Firewall Utility that weighs the soul of incoming connections with challenges to protect upstream resources from AI scraper bots — built to defend the small internet from endless storms of AI-company requests.
+31CloakBrowser
CloakHQ/CloakBrowser · ★ 32.2KA stealth Chromium browser for web scraping and automation — a real Chromium binary with fingerprints patched at the C++ source level, wrapped as a drop-in Playwright/Puppeteer replacement so antibot systems score it as a normal browser.
+24camofox-browser
jo-inc/camofox-browser · ★ 11.6KCamofox is a stealth headless browser server for AI agents: it wraps the Camoufox engine (a C++-patched Firefox) in a REST API that bypasses Cloudflare and bot detection, acting as a drop-in replacement for Puppeteer/Playwright.
+24ovobrowser
ovobrowsersupport/ovobrowser · ★ 986This is a Chromium build whose fingerprint evasion is patched directly into the C++ source and compiled into the binary, so bot-detection scripts see a normal Chrome instead of a JS-injected stealth layer like playwright-stealth.
The all-time top
17 projects · by stars
- 32.2K
#1 · CloakHQ/CloakBrowserCloakBrowser
A stealth Chromium browser for web scraping and automation — a real Chromium binary with fingerprints patched at the C++ source level, wrapped as a drop-in Playwright/Puppeteer replacement so antibot systems score it as a normal browser.
- 23.5K
#2 · TecharoHQ/anubisanubis
Anubis is a Web AI Firewall Utility that weighs the soul of incoming connections with challenges to protect upstream resources from AI scraper bots — built to defend the small internet from endless storms of AI-company requests.
- 22.8K
#3 · chaitin/SafeLineSafeLine
SafeLine is a self-hosted web application firewall (WAF) and reverse proxy that protects your web apps from attacks and exploits by filtering and monitoring HTTP traffic.
- 4

crowdsec
15.2Kcrowdsecurity/crowdsec · GoCrowdSec is an open-source IDS/IPS and WAF that detects malicious behavior by analyzing logs and HTTP requests, blocks bad actors locally, and shares anonymized attack data with a crowdsourced network to build a real-time community blocklist.
- 5

SeleniumBase
13.1Kseleniumbase/SeleniumBase · PythonSeleniumBase is an all-in-one Python framework for browser automation — web crawling, testing, scraping, and stealth. Its CDP Mode bypasses bot-detection in Chromium-based browsers, and a Stealthy Playwright Mode extends that to Playwright.
- 6

undetected-chromedriver
12.9Kultrafunkamsterdam/undetected-chromedriver · PythonIt is a patched Selenium Chromedriver for Python that automatically downloads and modifies the chromedriver binary so it evades anti-bot systems like Distil, Imperva, DataDome and Cloudflare IUAM.
- 7

camofox-browser
11.6Kjo-inc/camofox-browser · JavaScriptCamofox is a stealth headless browser server for AI agents: it wraps the Camoufox engine (a C++-patched Firefox) in a REST API that bypasses Cloudflare and bot detection, acting as a drop-in replacement for Puppeteer/Playwright.
- 8

nopecha-extension
11KNopeCHALLC/nopecha-extensionNopeCHA is a browser extension that automatically detects and solves CAPTCHAs on any page, powered by multimodal AI running through the NopeCHA API platform.
- 9

ua-parser-js
10.2Kfaisalman/ua-parser-js · JavaScriptUAParser.js is a compact, dependency-free JavaScript library that parses user-agent strings to detect browsers, OS, devices, CPUs, rendering engines, bots and AI crawlers.
- 10

botasaurus
5.8Komkarcloud/botasaurus · PythonBotasaurus is an all-in-one Python web scraping framework built to make scrapers that pass bot-detection checks, including Cloudflare WAF, BrowserScan, Fingerprint, Datadome, and Cloudflare Turnstile CAPTCHA.
- 11

invisible_selenium
3.1Kfeder-cr/invisible_selenium · PythonA drop-in replacement for Selenium that runs on a C++-patched, anti-detect Firefox with an undetectable browser fingerprint and humanized mouse/input actions, so anti-bot systems and captchas (reCAPTCHA, hCaptcha, Cloudflare Turnstile) don't flag it as automation.
- 12
anti-mage
2.1KN4darae/anti-mage · GoAnti-Mage is a free, open-source Go project that detects anti-detect browsers and spoofed browser profiles by checking whether a browser's own reported surfaces (fonts, timezone, WebGL, screen geometry, audio, etc.) are internally consistent, instead of matching known-tool signatures.
- 13

invisible_puppeteer
1.4Kfeder-cr/invisible_puppeteer · PythonThis is a Python port of Puppeteer that runs on a patched, anti-detect Firefox build so sites using reCAPTCHA, hCaptcha or Cloudflare Turnstile can't tell it's a bot, letting you scrape and automate without hitting captchas.
- 14

ovobrowser
986ovobrowsersupport/ovobrowserThis is a Chromium build whose fingerprint evasion is patched directly into the C++ source and compiled into the binary, so bot-detection scripts see a normal Chrome instead of a JS-injected stealth layer like playwright-stealth.
- 15

cloudflare-turnstile-bypass
614henryzawadzki6542/cloudflare-turnstile-bypass · PythonA dependency-free Python library and CLI that finds the Cloudflare Turnstile sitekey on a page and solves the challenge through a third-party API, handing you a valid cf-turnstile-response token to use in your own requests.
- 16

turnstile-bypass
503Sophomoresty/turnstile-bypass · PythonA cross-platform tool that drives a real, headed Chrome browser to solve a Cloudflare Turnstile widget and get past Cloudflare's interstitial 'waiting room' page, returning a token or a cfclearance cookie as JSON.
- 17
PotHelper
488MorpheApp/PotHelper · JavaPotHelper is a simple PoToken minter written in Java. A PoToken is a token YouTube requires to prove a request comes from a legitimate client, and this tool generates one locally.
Related topics
Often tagged together
- open-source5,666
- linux4,184
- mit3,312
- windows3,403
- automation1,183
- web-scraping158
- anti-bot15
- browser-automation187
- proxy383
- python2,383
- cloudflare-bypass10
- macos3,544
- captcha30
- developer-tools2,924
- web2,447
- anti-detect9
- browser404
- cloudflare120
- cross-platform2,623
- headless-browser19
- security976
- selenium20
- anti-detection16
- antidetect-browser13