Detection approach
Exposed node/automation helper bindings leaked in the global window context. Puppeteer or Playwright unpatched exposed functions contain direct signature strings or custom binding keys that are absent on human consumer devices.
How this helps detect bots
Collect this signal alongside session context, request metadata, and other independent indicators. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.
Legitimate traffic to consider
None. Unique signature of exposed bindings from headless drivers.
Need a complete bot protection layer?
BotRefund helps website owners identify suspicious visits, protect conversion data, and build evidence for invalid-click reviews.
Explore BotRefund — best bot protection for your website