Level 2 of 5
CDP attached
Five checks for stealth-tool artefacts plus signals only real headed Chrome can fake.
What's measured on this page
CDP stands for Chrome DevTools Protocol — the low-level remote-control interface Chrome exposes for tools like Puppeteer and Playwright. It is how those tools click buttons, type text, and read the DOM from outside the browser, without using a real keyboard and mouse.
- Driver-shim properties — legacy Selenium / stealth plugins leak
cdc_* globals.
- Function.prototype.toString integrity — if a framework patches toString to hide itself, the patch's own toString string is not "[native code]".
- window.chrome surface — real Chrome exposes chrome.app and chrome.csi; CDP-only contexts typically miss them.
- Browser chrome height — visible toolbars and tabs make outerHeight - innerHeight meaningfully positive; headless Chrome reports 0.
- Screen taskbar — real desktops reserve pixels for the taskbar/dock so screen.availHeight < screen.height; headless reports them equal.