Bypass of anti-bot protections that block scrapers, headless browsers and AI browsing agents.
Limits of standard tools
Vanilla Selenium, standard Puppeteer and Playwright get flagged.
Protections bypassed
CAPTCHAs (reCAPTCHA, Cloudflare Turnstile, Proton CAPTCHA, Tuta CAPTCHA) are solved locally: see local CAPTCHA solving.
Detection techniques handled
- TLS fingerprinting (JA3/JA4)
- HTTP/2 frames
- Canvas/WebGL fingerprinting
- Behavioral analysis / mouse moves
Case studies
PerimeterX: car insurance quotes
A client in the insurance sector needed to collect competitors’ prices from car insurance quotes, but was blocked while using an AI browsing agent. The site is protected by PerimeterX detection.
I delivered bypass PoCs that go all the way through the quote request funnels. The solution was then adapted to all of its sites. The bypass requires spoofing credible fingerprints.
If you are in the same situation, feel free to ask me for a PoC.
DataDome: Leboncoin for a real estate client
A client in the real estate sector needed to interact with Leboncoin.fr, but was blocked by its technical stack (Puppeteer). The site is protected by DataDome detection.
I delivered a bypass PoC in one day. The bypass requires spoofing credible fingerprints. The solution has been in production since 2025 without failing.
If you are in the same situation, feel free to ask me for a PoC.
How it works
- PoC on your target site: proof that the protection can be bypassed, all the way to the data you need.
- Production: the solution is adapted to all your target sites.
Blocked by a 403 / Cloudflare Turnstile on your target? Ask for a PoC via the email link in the footer.