[cdpfleet](https://cdpfleet.com/) / [Bot protection](https://cdpfleet.com/bot-protection) / Scoreboard Measured, dated # Which browser *got in*, per vendor. Every setup against every vendor on real sites, from this lab week's measurements: one sticky residential exit per site, one load per setup, five runs. Use it to pick the browser to start with — then measure your own site, because each site tunes its vendor differently. [What gets through where](https://cdpfleet.com/bot-protection)[All cases](https://cdpfleet.com/docs/cases) - **6**vendors - **13**setups - **1030**measured loads ## The scoreboard | Setup | Cloudflare (2026-10-26) | DataDome (2026-10-27) | Akamai (2026-10-28) | HUMAN (2026-10-29) | Kasada (2026-10-30) | AWS WAF (2026-10-30) | | --- | --- | --- | --- | --- | --- | --- | | Chrome, headful | 14/14 | 15/15 | 9/14 | 9/14 | 1/10 | 9/9 | | Chrome, headless | 5/15 | 4/14 | 5/15 | 5/15 | 0/10 | 5/10 | | Edge, headful | 15/15 | 11/15 | 10/15 | 7/14 | 0/10 | 10/10 | | Brave, headful | 15/15 | 10/15 | 15/15 | 6/15 | 1/10 | 10/10 | | Opera, headful | 15/15 | 11/15 | 15/15 | 8/15 | 0/10 | 10/10 | | Yandex, headful | 15/15 | 6/15 | 5/15 | 13/15 | 0/10 | 10/10 | | Whale, headful | 15/15 | 11/15 | 10/15 | 14/15 | 0/10 | 10/10 | | Chromium, headless | 5/15 | 5/15 | 5/15 | 5/15 | 0/10 | 5/10 | | Patchright, headful | 10/15 | 10/15 | 10/15 | 6/15 | 0/10 | 10/10 | | Firefox, headful | 10/15 | 11/15 | 10/15 | 5/15 | 0/10 | 9/10 | | WebKit, headful | 5/15 | 8/15 | 10/15 | 12/15 | 0/10 | 8/10 | | Camoufox, headful | 15/15 | 7/15 | 12/15 | 13/15 | 6/10 | 10/10 | | Camoufox, returning profile (2nd visit) | 15/15 | 7/15 | 15/15 | 1/15 | 7/7 | 9/9 | Each cell: loads that got the real page (directly, or after an automatic check that cleared by itself) out of loads measured, pooled over the case's sites and its five runs (one per language); network errors are left out. Sites are real and unnamed; the date is when the case was measured. Results are snapshots: sites retune their vendor settings and vendors change weekly. ## Where to start, per vendor - **Cloudflare** — [case 70](https://cdpfleet.com/docs/cases/cloudflare-real-sites-by-browser), 3 sites, 2026-10-26: start with Edge, headful (15/15), Brave, headful (15/15), Opera, headful (15/15), Yandex, headful (15/15). - **DataDome** — [case 71](https://cdpfleet.com/docs/cases/datadome-real-sites-by-browser), 3 sites, 2026-10-27: start with Chrome, headful (15/15). - **Akamai** — [case 73](https://cdpfleet.com/docs/cases/akamai-real-sites-by-browser), 3 sites, 2026-10-28: start with Brave, headful (15/15), Opera, headful (15/15), Camoufox, returning profile (2nd visit) (15/15). - **HUMAN** — [case 75](https://cdpfleet.com/docs/cases/human-real-sites-by-browser), 3 sites, 2026-10-29: start with Whale, headful (14/15). - **Kasada** — [case 77](https://cdpfleet.com/docs/cases/kasada-and-aws-waf-by-browser), 2 sites, 2026-10-30: start with Camoufox, returning profile (2nd visit) (7/7). Never got in: Chrome, headless, Edge, headful, Opera, headful, Yandex, headful, Whale, headful, Chromium, headless, Patchright, headful, Firefox, headful, WebKit, headful. - **AWS WAF** — [case 77](https://cdpfleet.com/docs/cases/kasada-and-aws-waf-by-browser), 2 sites, 2026-10-30: start with Edge, headful (10/10), Brave, headful (10/10), Opera, headful (10/10), Yandex, headful (10/10). ## How to read it - **Per vendor, not per site:** a vendor's column pools easy and hard sites, so a setup that got in everywhere but one site shows that site's refusals. The cases show each site separately. - **A returning profile is a separate row:** the same Camoufox loading the site a second time with a saved [profile](https://cdpfleet.com/profiles). It helped on some vendors and hurt on others. - **On the vendors' own pages** (2026-10-20 to 10-23, four setups and two networks): [Cloudflare](https://cdpfleet.com/docs/cases/cloudflare-what-gets-through), [DataDome](https://cdpfleet.com/docs/cases/datadome-what-gets-through), [Akamai and HUMAN](https://cdpfleet.com/docs/cases/akamai-and-human-what-gets-through), and which vendor a site uses: [case 62](https://cdpfleet.com/docs/cases/which-bot-protection-is-this). - **This is measurement, not a bypass recipe:** public pages only, one session at a time per site, nothing clicked and no CAPTCHA solved. When a site says no, the right move is usually to slow down, honour `Retry-After` and ask the site ([web scraping](https://cdpfleet.com/web-scraping)). ## Related Cases, recipes, posts and comparisons about this — updated as new ones are published. ### Reference docs The details, options and errors. - [Fingerprinting](https://cdpfleet.com/docs/fingerprinting)What a page can read about the browser. - [Browsers](https://cdpfleet.com/docs/browsers)Every browser and its options. ### Cases 13 Real problems solved end to end, run on production in five languages. - [Case 84: Does the TLS fingerprint (JA4) explain which browsers got in? Twelve browsers against six vendors](https://cdpfleet.com/docs/cases/ja4-vs-vendor-verdicts)Each of the twelve browsers from the real-site lab week loads a TLS echo page once, so we know the JA4, peetprint and HTTP/2 fingerprint it sends. Grouped by…[Code on GitHub](https://github.com/cdpfleet/cdpfleet/tree/main/cases/84-ja4-vs-vendor-verdicts) - [Case 81: Behaviour scoring: Camoufox humanize on and off vs plain Chrome clicks on a public bot-test form](https://cdpfleet.com/docs/cases/behaviour-scoring-humanize)A public behavioural bot-test page scores how a demo login form was filled in: clicks, keystrokes, timing. Camoufox with `humanize` off, on and slowed down, and…[Code on GitHub](https://github.com/cdpfleet/cdpfleet/tree/main/cases/81-behaviour-scoring-humanize) - [Case 77: Kasada and AWS WAF on real sites: twelve browsers, four sites, one exit each](https://cdpfleet.com/docs/cases/kasada-and-aws-waf-by-browser)Two real sites behind Kasada and two behind AWS WAF, loaded once by each of twelve browsers and by a returning Camoufox profile, through one sticky residential exit…[Code on GitHub](https://github.com/cdpfleet/cdpfleet/tree/main/cases/77-kasada-and-aws-waf-by-browser) - [Case 75: HUMAN on real sites: twelve browsers, three sites, one exit each](https://cdpfleet.com/docs/cases/human-real-sites-by-browser)Three real sites behind HUMAN (formerly PerimeterX), chosen from our sweep as easy, medium and hard, loaded once by each of twelve browsers and by a returning…[Code on GitHub](https://github.com/cdpfleet/cdpfleet/tree/main/cases/75-human-real-sites-by-browser) - [Case 73: Akamai on real sites: twelve browsers, three sites, one exit each](https://cdpfleet.com/docs/cases/akamai-real-sites-by-browser)Three real sites behind Akamai Bot Manager, chosen from our sweep as easy, medium and hard, loaded once by each of twelve browsers and by a returning Camoufox…[Code on GitHub](https://github.com/cdpfleet/cdpfleet/tree/main/cases/73-akamai-real-sites-by-browser) - [Case 71: DataDome on real sites: twelve browsers, three sites, one exit each](https://cdpfleet.com/docs/cases/datadome-real-sites-by-browser)Three real sites behind DataDome, chosen from our sweep as easy, medium and hard, loaded once by each of twelve browsers and by a returning Camoufox profile, all…[Code on GitHub](https://github.com/cdpfleet/cdpfleet/tree/main/cases/71-datadome-real-sites-by-browser) - [Case 70: Cloudflare on real sites: twelve browsers, three sites, one exit each](https://cdpfleet.com/docs/cases/cloudflare-real-sites-by-browser)Three real sites behind Cloudflare, chosen from our sweep as easy, medium and hard, loaded once by each of twelve browsers and by a returning Camoufox profile, all…[Code on GitHub](https://github.com/cdpfleet/cdpfleet/tree/main/cases/70-cloudflare-real-sites-by-browser) - [Case 68: CAPTCHA demo pages: what reCAPTCHA v3 scores and hCaptcha show seven browsers, and why a demo can't rank them](https://cdpfleet.com/docs/cases/captcha-scores-by-browser)Google's public reCAPTCHA v3 score demo and hCaptcha's demo widget, loaded once per cell by seven browser setups through your own proxy and a sticky cdpfleet-resi…[Code on GitHub](https://github.com/cdpfleet/cdpfleet/tree/main/cases/68-captcha-scores-by-browser) [All cases →](https://cdpfleet.com/docs/cases) 13 match this topic ## Read next [Bot protection →](https://cdpfleet.com/bot-protection)[Web scraping →](https://cdpfleet.com/web-scraping)[Browsers →](https://cdpfleet.com/browsers)[Residential proxy →](https://cdpfleet.com/residential-proxy) --- Source: https://cdpfleet.com/bot-protection/scoreboard · Markdown: https://cdpfleet.com/bot-protection/scoreboard.md · All docs for AI tools: https://cdpfleet.com/llms.txt