Hardened Camoufox runtime, multi-agent orchestration, 36-tool MCP toolbelt, 30+ LLM providers. Self-host the whole stack - bring your own infra.
Three failure modes no amount of prompting can solve. We solve them inside the runtime, below the agent loop.
Pages can plant instructions in DOM nodes the user never sees — display:none, opacity zero, off-screen, ARIA-hidden. The accessibility tree your agent reads exposes them all. One smuggled paragraph and the model is following the attacker, not you.
An agent reads the DOM. Three hundred milliseconds later it dispatches a click. In between, timers fire, modals appear, elements move. The DOM it thought it was acting on no longer exists — and the framework has no way to stop time.
A benchmark product page emits tens of thousands of accessibility-tree tokens — mostly structural wrappers, repeated controls, and ARIA scaffolding. The model pays for every one on every action. Page traversal becomes the dominant cost, not reasoning.
Not a JavaScript wrapper. Not a Chrome extension. Native Firefox patches at the C++ layer that competitors can't replicate.
Seven visibility checks at the C++ level. We walk the rendered DOM with style + layout context — not just CSS — so opacity-zero, off-viewport, clipped, and aria-hidden traps are removed before the accessibility tree leaves the browser.
Every session ships with a unique BrowserForge fingerprint: WebGL, fonts, timezone, and locale, running on Camoufox, the anti-detect Firefox upstream. Drop in any residential proxy pool you already have; the runtime geo-syncs it to the fingerprint and rotates automatically when rate-limit signals appear.
One operator, one panel, one terminal. Spin up a fleet on your own infra and watch every session, or look away and let cost budgets and webhooks do the watching.
Public benchmark fixtures average 42,832 tokens as a compact Chrome accessibility tree and 11,577 as a Playwright ariaSnapshot. VulpineOS returns 2,942 tokens with headings, actions, refs, and key text retained: 93.1% smaller than Chrome AX and 74.6% smaller than Playwright.
Playwright and Puppeteer are browser drivers. Browserbase and Browserless are cloud Chromes. None solve injection, mutation, or token waste.
| VulpineOS | Playwright | Puppeteer | Browserbase | Browserless | |
|---|---|---|---|---|---|
| C++ injection-proof a11y filter | — | — | — | — | |
| Action-Lock page freeze (nsDocShell) | — | — | — | — | |
| Token-optimized DOM export | — | — | PARTIAL | — | |
| Anti-detect fingerprints | — | — | — | ||
| Built-in proxy rotation (BYO pool) | — | — | PARTIAL | — | |
| Self-host runtime | — | — | |||
| Multi-agent orchestration built in | — | — | — | — | |
| Open source license | — | — |
The runtime, orchestrator, MCP toolbelt, and CDP bridge are all open source. Contribute upstream to Camoufox or build on top.
An open-source protocol translator exposes a Chrome DevTools Protocol surface on top of Juggler and WebDriver BiDi. OpenClaw and any CDP-native agent stack drives Camoufox unchanged, with full anti-fingerprint isolation per session.
$ foxbridge start --browser camoufox --port 9222
✓ Camoufox 146.0.1 detected
✓ Juggler bridge online
✓ WebDriver BiDi backend ready
CDP endpoint
ws://localhost:9222/devtools/browser
drive with: openclaw, playwright, puppeteer, …MPL 2.0. Bring your own LLM, proxies, and infra. The whole stack runs from a singledocker compose up.