CloakBrowser

The humanize layer simulates realistic user behavior through several specialized mechanisms:

Mouse Motion

Uses a cubic Bezier curve with perpendicular control points to avoid straight lines. It includes sinusoidal wobble, cubic ease-in-out motion, and a chance of overshooting the target and correcting back.

Keyboard & Stealth

• ASCII Characters: Typed one by one with variable delays and occasional "thinking" pauses. Includes a chance for fat-finger typos (nearby QWERTY keys) that are automatically corrected.
• Stealth Path: For Shift symbols (e.g., @, #), the layer uses the Chrome DevTools Protocol (Input.dispatchKeyEvent) when a CDP session is available. This produces isTrusted = true events without an evaluate stack trace, making them harder for detectors to find.
• Non-ASCII Characters: Characters like Cyrillic or Emojis are inserted via InsertText to ensure compatibility, while ASCII characters continue using physical key simulation.

Scrolling

Simulates an accelerate -> cruise -> decelerate sequence using microsteps, with an optional overshoot and a final settle within a natural viewport band (ScrollTargetZone).

Setting humanize: true (JS) or humanize=True (Python) makes all mouse, keyboard, and scroll interactions indistinguishable from real users. This automatically replaces standard automation calls with human-like equivalents (e.g., Bézier curves for mouse movement, per-character typing with pauses, and realistic scrolling).

Presets

• default: Normal speed.
• careful: Slower, more deliberate movements with idle micro-movements between actions.

Custom Configuration

You can override specific parameters via humanConfig (JS) or human_config (Python).

Important for Playwright users: Always use selector-based methods like page.click(selector), page.type(selector, text), or the Locator API. Avoid page.query_selector() because ElementHandle objects bypass the humanization patches, causing mouse movements to teleport and keyboard events to fire without timing.

// Playwright example
import { launch } from 'cloakbrowser';
const browser = await launch({ 
  humanize: true, 
  humanPreset: 'careful',
  humanConfig: {
    mistype_chance: 0.05,
    typing_delay: 100,
    idle_between_actions: true,
    idle_between_duration: [0.3, 0.8],
  }
});

Whether you need a specialized OEM/SaaS license depends on how the browser is exposed to third parties.

Permitted Internal Use (No OEM/SaaS license required)

You can use the Binary for internal business workflows (web scraping, data extraction, automation, research) without an OEM/SaaS license, even if you run it in Docker, CI runners, or internal repositories, provided:

• You control the browsing process and execution environment.
• You do not give third parties control over the browser itself.
• You are delivering a business output (e.g., a report or dataset) rather than providing the browser capability.
• Listing CloakBrowser as a dependency in your project is permitted and does not constitute redistribution.

OEM/SaaS License Required

A separate agreement is required if the Binary is:

• Bundled, embedded, or exposed through an API.
• Used to provide browser functionality, hosted-service, or "browser-as-a-service" to third-party customers.
• Used in a way that gives third-party customers control (the ability to operate, configure, manage, or influence the Binary, its sessions, or execution settings).

For OEM/SaaS licensing inquiries, contact info@cloakbrowser.dev.

CloakBrowser is stealthy by default. It automatically generates a random fingerprint seed at startup to spoof GPU, hardware specs, screen dimensions, canvas, WebGL, audio, and fonts. This ensures every launch produces a fresh, coherent identity.

Fingerprint Modes

Platform Spoofing

The binary detects its host platform at compile time. However, the wrapper overrides this on Linux by passing --fingerprint-platform=windows to make sessions appear as Windows desktops, which are more common and harder to cluster. You can use --fingerprint-platform to manually specify the target OS.

# Pin a seed for a persistent identity
browser = launch(args=["--fingerprint=42069"])