Whole Antidetect Catalog Donut Browser

Catalogue · Section 03 · Entry

Rebrowser bot detector

ACTIVE

Rebrowser bot detector is a live page catalogued in section 03 of this register. CDP-leak-focused tests — Runtime.enable and friends — rather than the usual navigator property grid. At the last field check its address answered, which is the whole of what ACTIVE means for an entry with no repository behind it.

https://bot-detector.rebrowser.net/

Address printed, not linked — the register's linking policy.


The fields this state was derived from

FieldValue at this printing
http_status 200
fetched_at 2026-08-14T09:12:00Z
endpoint HEAD https://bot-detector.rebrowser.net/
rubric_edition 2nd, in force since 2026-08-14

This entry has no repository, so there is no API field a browser can re-read across origins. Its state comes from the register's own link check, printed above with the instant it was made.

Why it reads ACTIVE

No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

Shipping. Safe to build on today.

Under the superseded first edition

UNSTATED ACTIVE
No repository. The first edition had no link liveness sweep and therefore no field to read here.

The rubric in force · The superseded first edition · Errata leaf


What Rebrowser bot detector actually does

Tests specifically for the CDP-level leaks that driving a browser through the DevTools protocol introduces, rather than for the navigator-property tells that the older grids cover.

What can and cannot be measured about Rebrowser bot detector

This entry has no repository, so none of the usual repository fields exist for it — no push date, no release tag, no archive flag, no licence identifier. Its state comes from one measurement only: the register requested the address and recorded what came back. Anything in the range 200 to 399 makes a non-repository entry ACTIVE, and that clause is the one the first edition of the rubric did not have at all, which is why live page entries carried no state under it.

Read that for exactly what it is. It says the thing is reachable. It does not say the page still works correctly, because no HTTP status can carry that. Where a stronger signal exists — a repository, a version, a dated revision — this register prefers it, and where one does not, it prints the weaker signal and names it as weak rather than dressing it up.

Where Rebrowser bot detector sits in this catalogue

Rebrowser bot detector is filed in section 03, detection test pages & fingerprint scanners, whose scope is this: Pages you point a browser at to see what it gives away. This section is where a link register earns its keep: test pages rot faster than repositories. An entry sits in exactly one section here. Where a project could defensibly go in two, it is placed where a reader would look for it first rather than where it fits most tidily, and that is an editorial decision rather than a measured one.

Filed beside it in the same section: Device and Browser Info (ACTIVE), TrackMe / peet.ws (ACTIVE), nowsecure.nl (ACTIVE). Comparing an entry against its own section-mates is more informative than comparing it against the catalogue as a whole, because everything in a section is answering roughly the same question and the differences left over are the ones that matter.

There is no licence field, because there is no source to licence — this is a live page rather than a code repository. It is grouped instead with every other entry the rubric marks ACTIVE, which is the axis that actually distinguishes entries of this kind from one another.

Substitutes for the same job, with no claim that either is better: Are You Headless, bot.sannysoft. The alternative relation is symmetric and carries no ranking, because this register publishes no ranking of any kind. The full Rebrowser bot detector comparison table sets all of them side by side on licence, push date, release cadence and state.

What to settle before you adopt Rebrowser bot detector

This is the complement to the classic grid, not a replacement for it: a stack can pass one and fail the other. Run both, and read a failure here as pointing at your driver rather than at your fingerprint.


See also

Relation Entry State Last push
alternative to Are You Headless DEAD —
alternative to bot.sannysoft ACTIVE —

Full comparison of Rebrowser bot detector and its alternatives


Questions readers ask about Rebrowser bot detector

Answered from this entry's own fields, at the field check printed above and at no other instant.

Is Rebrowser bot detector still maintained?

Rebrowser bot detector has no repository, so this register cannot answer that from a commit history. What it can do is request the address and record the result, which is what produced ACTIVE. Shipping. Safe to build on today.

What are the alternatives to Rebrowser bot detector?

Are You Headless, bot.sannysoft are recorded as substitutes for the same job. The relation carries no ranking — this register publishes none — so read them side by side on the comparison table, which prints licence, last push, release cadence and state for each.

What licence is Rebrowser bot detector under?

The question does not apply — Rebrowser bot detector is a live page rather than source code, so this register records the licence field as not applicable rather than inventing one. Terms of use, where they exist, are the publisher's to state at the address above.

Why did the state recorded for Rebrowser bot detector change?

Because the rules changed, not because the world did. The same field data reads UNSTATED under the superseded first edition and ACTIVE under the edition in force. Both derivations are printed on this page, and the entry appears on this printing's errata leaf with the superseded value struck rather than deleted.


A test page tells you that something is inconsistent. It does not tell you which layer produced the inconsistency, and it will not fix it. Donut Browser is an open-source anti-detect browser under AGPL-3.0 that addresses the layer most of these pages are reading: engine-level fingerprint overrides through CDP rather than injected script, with a pre-launch gate that refuses to start a profile when the proxy's exit geography contradicts the profile's own fingerprint.

Download Donut Browser

curl -fsSL https://donutbrowser.com/install.sh | sh

macOS (DMG, Homebrew cask donut), Windows (installer and portable), Linux (deb, rpm, AppImage, with APT and RPM repositories at repo.donutbrowser.com), and a Nix flake. Desktop only — there is no mobile build target. Ten shipped languages. Source, AGPL-3.0 · its own entry, judged by the same rubric · the keepers' disclosure.