Scalebrowser Blog
Detection · Sep 25, 2026 · 5 min readCanvas fingerprinting: why profiles on one machine match
What canvas fingerprinting reads, which parts of a machine decide the hash, and why browser profiles on one computer share it without looking fake.
Challenges · Sep 25, 2026 · 7 min readCaptcha solving without a service: 18 types measured
18 challenge types an AI agent solved in its own browser on live widgets with real keys, no solving service, with run counts and the 2 that stay open.
Infrastructure · Sep 25, 2026 · 5 min readChrome DevTools MCP: 393,149 tokens per Wikipedia page
Chrome DevTools MCP measured as an agent's browser: tokens per page and per step on 3 live pages, the context window it fills and what it is built for.
Stealth tools · Sep 25, 2026 · 5 min readIs CloakBrowser good for AI agents? Fix the seed and noise
CloakBrowser reviewed: what its 87 Chromium patches cover, its 26 of 31 benchmark result, the free and Pro builds, and which 2 defaults to change on day one.
Challenges · Sep 25, 2026 · 5 min readCloudflare Turnstile: can an AI agent pass it?
Cloudflare Turnstile measured with an AI agent on 3 live pages with production keys: tokens in 1.7 and 2.9 seconds, one variant that failed twice, and why.
Challenges · Sep 25, 2026 · 5 min readhCaptcha and AI agents: 4 of 4 solved, 0 on its own demo
How an AI agent solved hCaptcha's growing-shape task by measuring frames, 4 of 4 on one site, and why hCaptcha's own demo refused the same correct answers.
Detection · Sep 25, 2026 · 7 min readJA4 fingerprint: 1 TLS extension tells Chrome from a fork
What the JA4 TLS fingerprint reads before any script runs, why JA3 cannot follow Chrome, and the one extension that split our Chromium build from real Chrome.
Stealth tools · Sep 25, 2026 · 5 min readnodriver vs undetected-chromedriver: which one to use
nodriver against undetected-chromedriver: releases, licences, a 31 target benchmark, and the 3 things nodriver leaves to your code: profile, input, licence.
Stealth tools · Sep 25, 2026 · 5 min readPatchright: Playwright minus its CDP leaks, and what remains
Patchright swaps one import and hides Playwright's Runtime.enable and Console.enable leaks. What a detector still sees, and its score in a 31-site benchmark.
Infrastructure · Sep 25, 2026 · 5 min readPlaywright MCP token usage: 604,785 tokens to see 1 page
Playwright MCP measured in tokens per page and per step against 5 other browser tools, with the cost curve of a session and what cuts it.
Stealth tools · Sep 25, 2026 · 5 min readPlaywright stealth for Python and Node: what it patches
What playwright-stealth (Python) and playwright-extra (Node) patch, what a detector still sees, and what Playwright's own typing looks like to a page.
Stealth tools · Sep 25, 2026 · 5 min readIs puppeteer-extra-plugin-stealth still maintained?
The Puppeteer stealth plugin read on 22 September 2026: maintenance, what its 17 evasions change, where they stop, and which maintained tools replace it.