Open source bot-detection projects

Every project in the registry tagged bot-detection, ranked by real GitHub adoption.

projects 14 combined stars ★ 94K refresh nightly
01 CloakBrowser ★ 33K

Stealth Chromium that passes every bot detection test. Drop-in Playwright replacement with source-level fingerprint patches. 30/30 tests passed.

last push23 hours ago languagePython licenseMIT
02 crowdsec ★ 15K

Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

last push8 hours ago languageGo licenseMIT
03 SeleniumBase ★ 13K

APIs for browser automation, testing, and bypassing bot-detection. Includes CDP Mode: A stealthy configuration for chromium that passes every bot detection test

last push5 days ago languagePython licenseMIT
04 camofox-browser ★ 12K

Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.

last push18 hours ago languageJavaScript licenseMIT
05 ua-parser-js ★ 10K

UAParser.js - The Essential Web Development Tool for User-Agent Detection. Detect Browsers, OS, Devices, Bots, Apps, AI Crawlers, and more. Run in Browser (clie

last push1 months ago languageJavaScript licenseAGPL-3.0
06 invisible_playwright ★ 2.5K

Free antidetect browser stealth for Playwright: undetected headless Firefox fingerprint. Python scraping, recaptcha and bot detection bypass. Open source

last push15 hours ago languagePython licenseMIT
07 Tirreno ★ 1.6K

Security framework that protects from within your product

last push9 days ago languagePHP licenseAGPL-3.0
08 zendriver ★ 1.5K

A blazing fast, async-first, undetectable webscraping/web automation framework based on ultrafunkamsterdam/nodriver. Now with Docker support!

last push1 months ago languagePython licenseAGPL-3.0
09 rebrowser-patches ★ 1.5K

Collection of patches for puppeteer and playwright to avoid automation detection and leaks. Helps to avoid Cloudflare and DataDome CAPTCHA pages. Easy to patch/

last push14 days ago languageJavaScript licenseMIT
10 httpcloak ★ 1.4K

Go HTTP client with browser-identical TLS/HTTP2 fingerprinting. Bypass bot detection by perfectly mimicking Chrome, Firefox, and Safari at the cryptographic lev

last push20 days ago languageGo licenseMIT
11 ovobrowser ★ 1.1K

源码级 Chromium 指纹内核,检测站按普通 Chrome 评分。Source-level Chromium fingerprint kernel that passes bot detection tests. Not JS injection — C++ patches compiled into the bi

last push7 days ago language— licenseMIT
12 arcjet-js ★ 698

Runtime security for AI apps and agents: prompt injection detection, tool-call authorization, sensitive-data redaction, bot protection, and rate limiting. Drop

last push4 days ago languageTypeScript licenseApache-2.0
13 Procaptcha ★ 303

Decentralized CAPTCHA for enhanced web security

last push3 hours ago languageTypeScript licenseApache-2.0
14 invisible_selenium ★ 270

Selenium that anti-bots cannot see, so no captchas: same API, anti-detect stealth headless Firefox, undetected fingerprint, bypass bot detection, Python web scr

last push12 days ago languagePython licenseMIT

Related tags

← all tags

Frequently asked questions

How many open source bot-detection projects are there?

This registry tracks 14 projects tagged bot-detection, with 94,387 GitHub stars between them. The most-adopted is CloakBrowser at 32,693 stars.

Are these bot-detection projects free to use?

Yes — 14 of the 14 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.

Which bot-detection project should I choose?

The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.

Are these bot-detection projects still maintained?

14 of the 14 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.