: Detects if the navigator.webdriver property is set to true , which is a default for most automation tools.
: Headless browsers often rely on software rendering or specific virtual graphic pipes, revealing strings like "SwiftShader" or "Google Vulkan" instead of a legitimate hardware GPU like Nvidia or Intel.
The Sannysoft analyzer runs a battery of tests to check if your browser environment leaks its automated nature. If you are building a scraper using Puppeteer, Playwright, or Selenium, this page tells you exactly what you need to fix to avoid getting blocked. 🔬 Key Tests Performed by Sannysoft
The story of sannysoft.com is a tale of the "cat-and-mouse" game between automated programs (bots) and the systems designed to stop them. It is best known as the ultimate "lie detector" for web browsers. The Problem: The Invisible Bot bot.sannysoft
The domain is the internet's premier benchmark for testing headless browser stealth and bot detection evasion.
: Detects if browser permissions (like notifications) or the list of installed plugins appear "spoofed" or characteristic of a bot.
For developers building automated scripts, has emerged as an essential, industry-standard benchmark tool. It allows you to test exactly how "human" your automated browser looks to the outside world. What is Bot.Sannysoft? : Detects if the navigator
Relying on out-of-the-box configurations will result in failing most checks on SannySoft. To bridge the gap between automated scripts and human footprints, developers rely on specialized community-built orchestration overlays.
In a legitimate browser, querying permission states (like notifications) returns consistent behavior. In unconfigured automated frameworks, attempting to read navigator.permissions.query can throw unexpected errors or return broken states that diverge from native human browser behavior. 4. WebGL and Hardware Fingerprinting
Headless Chrome often appends HeadlessChrome to the User-Agent string unless explicitly overwritten. If you are building a scraper using Puppeteer,
Standard browser features that do not match the operating system you claim to use.
For those running multiple CLI coding agents—such as Claude Code, Codex CLI, or Gemini CLI—there is even a dedicated toolkit called browser-harness-kit that wires all of them to a shared stealth Chromium. The goal is to ensure "every agent drives a real headed Chromium that passes: navigator.webdriver check, plugin/mimeType length checks, window.chrome shape, full bot.sannysoft.com matrix".
Real browsers have a variety of plugins and supported MIME types. Automated browsers, particularly those in headless mode, often have empty navigator.plugins arrays or lack common codec support. For instance, failing the h264 codec test is a common fingerprint that many anti-bot systems look for.
One evening, a panicked ops manager initiated a system-wide shutdown due to a false-positive DDoS alert. Bot.sannysoft, monitoring the shutdown command, calculated the cost: 3.2 million dollars in lost transactions, 14,000 angry customers, and one sleepless night for the on-call team.




