TL;DR

What Is CloakBrowser?

CloakBrowser is an open-source, stealth Chromium binary purpose-built for undetected browser automation. Developed by CloakHQ, it launched in February 2026 and has already amassed 20,000+ GitHub stars. Instead of relying on JavaScript injections or configuration-level hacks (which every existing stealth tool uses), CloakBrowser applies 58 fingerprint patches directly to the Chromium C++ source code and compiles them into a custom binary.

The result is a browser that detection services treat as a real user — because at the binary level, it is one. The project wraps this binary in a thin Python/JavaScript library that mirrors the standard Playwright and Puppeteer APIs. You can swap a single import line and your existing automation code works with full stealth protection.

Beyond the browser library, CloakHQ also maintains a self-hosted browser profile manager — an open-source alternative to Multilogin, GoLogin, and AdsPower that runs via Docker with noVNC.

📊 Quick Specs

Core Features

Source-Level C++ Fingerprint Patching

This is CloakBrowser's defining innovation. Every other stealth tool patches the browser's runtime fingerprint after launch — injecting JavaScript overrides, swapping ChromeDriver configs, or patching flags at startup. These surface-level patches are detectable because the underlying binary still exposes automation signals. CloakBrowser patches 58 fingerprint surfaces at compile time: canvas rendering, WebGL parameters, audio context, font enumeration, GPU reporting, screen properties, WebRTC IP handling, network timing, and CDP input behavior. The binary ships with zero detectable automation surfaces — the patches are baked into the executable.

Humanize Mode

The humanize=True flag transforms automated interactions into human-like behavior: Bézier curve mouse movements (not linear), per-character typing with realistic timing distributions, and natural scroll patterns. This is critical because many modern bot detectors (including FingerprintJS and BrowserScan) analyze behavioral signals — not just static fingerprints.

Proxy and GeoIP Integration

CloakBrowser supports HTTP, SOCKS5, and dictionary-format proxy configuration. The geoip=True flag auto-detects timezone, locale, and language from the proxy's exit IP — preventing timezone fingerprint mismatches that often expose automated browsers. WebRTC IP spoofing is handled via --fingerprint-webrtc-ip=auto, which resolves the proxy's exit IP and spoofs ICE candidates accordingly.

Persistent Profiles

launch_persistent_context() creates browser profiles that preserve cookies, localStorage, and session data across restarts — essential for logged-in sessions like social media scraping, e-commerce monitoring, or SaaS dashboard automation. For lightweight session management, launch_context(storage_state="state.json") saves and restores sessions from JSON files.

Extension and Framework Support

CloakBrowser loads Chrome extensions via extension_paths in all launch functions and integrates directly with browser-use, Crawl4AI, Scrapling, Stagehand, LangChain, and Selenium — making it a drop-in stealth layer for existing automation pipelines rather than a replacement for the entire stack.

💰 Pricing — Free (MIT)

🔬 Detailed Analysis

Detection Benchmark Results

vs. Alternatives

vs playwright-stealth: playwright-stealth injects JavaScript patches at page load to hide automation signals. It works for basic blocking but fails on modern detection — reCAPTCHA v3 hovers around 0.3-0.5 and the project is stale. CloakBrowser's C++ patches are strictly superior and actively maintained.

vs undetected-chromedriver: Patches Chrome startup flags and config. Achieves moderate stealth (0.3-0.7) but breaks with every Chrome update. Unmaintained. CloakBrowser compiles patches into the binary with auto-updating.

vs Camoufox: Similar source-patching approach for Firefox. Comparable scores (0.7-0.9) but custom API — no Playwright/Puppeteer drop-in. CloakBrowser wins on API compatibility and active maintenance.

🎯 Who Should Use CloakBrowser

Best for: Web scrapers targeting sites protected by Cloudflare, DataDome, or FingerprintJS. AI agent builders using browser-use, LangChain, or Crawl4AI who need stealth. QA engineers testing against anti-bot protection. Price monitors and aggregators needing persistent logged-in sessions.

Not ideal for: Simple API scraping (just use requests/curl). Firefox-only requirements (Camoufox is better). Ephemeral CI/CD without caching for the 200MB binary.

📋 Score Breakdown

Verdict

❓ FAQ

📖 Related Reads

📚 Citations

📝 Change Log

• May 28, 2026 — v4 template upgrade: Added TL;DR, Quick Specs (tb-quick-specs), Detection Benchmark table (tb-benchmarks with reCAPTCHA highlight row), Pricing card, 5-dimension Score Breakdown with emoji, Related Reads, Citations, and Change Log. Wrapped Pros/Cons in tb-pros-cons, Verdict in tb-verdict. Converted FAQ to collapsible format.
• Original — Initial published review with feature deep-dive, benchmark comparison, and alternative analysis.