Training Example: BasaltLabs – Review the Data, Give Your Score & Compare to the Real AI Evaluation

LIVEBuild 3.2 — Chromium 132 base
[H1] A hundred web identities,one machine.
Desktop anti-detect browser. Each profile gets a unique fingerprint, its own proxy, its own encrypted storage. Local AI agent drives the browser for you.Get BasaltLabsWatch Demo · 2:143 engines187 countries0 telemetry100% local AIencrypted cloud sync · local AI · open about how it worksWindows 10 / 11macOS 12+LinuxBasaltLabsProfilesAll wg-relay · 99.97%Active4+2 todayTrust score97.4%Bandwidth1.8GBvia residentialProfiles1126 groupsAll 112Running 4Stopped 106Warming 2ListGridProfileOS · EngineProxyGroupStatusshop-acct-alphafp_10116Windows 11 · Chromium 132US · NYE-commerce runningads-meta-7732fp_95433macOS 14 · Safari 17UK · LondonAd ops stoppedscrape-eu-fr-02fp_10116Linux · Chromium 132FR · ParisScraping runningqa-jp-mobilefp_88092Android 14 · Chrome 131JP · TokyoQA warmingaffiliate-de-19fp_10116Windows 10 · Firefox 122DE · BerlinAffiliate runningtest-canvas-rngfp_10116Windows 11 · Chromium 132—Sandbox stopped All keys local · DPAPI vaultcpu 8% · ram 412 MBupdated 3.2.1 — May 30, 2026Tested undetected onCloudflareDataDomePerimeterXAkamaiImpervareCAPTCHAWHO IT'S FOR
[H2] Built for anyone running more than one identity.
From single operators to agencies running client pools — same isolation guarantees, same local-AI automation, scaled with folders and groups.Affiliate & performanceScraping & dataAd buyersE-commerce sellersQA & engineeringPrivacy-focused usersAgencies & teams
[H3] Run dozens of ad identities without crossover.
Each identity is a real, sealed environment — fingerprint, proxy, cookies, storage. Networks can't link them, so accounts age normally and survive review cycles.Per-profile proxies + geo-aligned timezoneBulk launch & rotate-on-launchEncrypted cookie import/exportGroup + tag organization at scaleAffiliate & performancefp_affiliate_14293EngineChromium 132ProxySOCKS5 · US-NYTZAmerica/New_YorkLocaleen-USWebGLApple GPUCanvasstableCORE FEATURES
[H2] Every signal a tracker watches — controlled.
Fingerprint, network, storage, and behavior are isolated per profile and shaped by a single coherent identity model.
[H3] Isolated profiles
Unique fingerprint, proxy and storage per identity. Profiles never share cookies, cache, or signals.
[H3] Fingerprint engine
Deterministic ChaCha20-seeded spoofing of canvas, WebGL, audio, fonts, timezone, locale, screen, navigator, battery, WebRTC, UA-CH, WebGPU, media devices, devicePixelRatio, client rects.
[H3] Patched Chromium fork
Real C++-level spoofing compiled into the browser — not detectable JS overrides. Plus stock Chrome and a custom Firefox/Gecko engine.
[H3] Fingerprint Lab
Generator, built-in + custom templates, field-level overrides, geo-aware consistency validator, live CDP verification scoring the running browser /100.
[H3] Proxy manager
Per-profile or reusable library — HTTP/HTTPS/SOCKS5, health checks, IP geo lookup, auto timezone/locale/geolocation, rotation, local relay for authenticated proxies.
[H3] Profile organization
Drag-and-drop groups & folders, manual reorder, tags, bulk launch/stop, fast search and filters.
[H3] Data & extras
Cookie import/export/edit, session history & global log, encrypted backup/restore, per-profile extensions, built-in TOTP 2FA vault.LOCAL AI
[H2] Local AI that actually uses the browser.
Connect a model running on your machine — the agent reads the real page (vision + DOM tree) and drives the browser like a person would.Every model runs on YOUR machine — no prompt, page, or screenshot ever leaves the computer.
[H3] AI Automation Agent
Plug any local LLM — LM Studio or any OpenAI-compatible endpoint. Type a task in plain English; the agent drives the real browser via CDP — navigates, clicks, types, scrolls — with humanized mouse paths, per-key typing delays and a visible on-screen cursor. Pauses to ask you to solve CAPTCHAs and 2FA, then continues.AI Agent · lmstudioLOCALuserOpen the product page for the SKU I sent yesterday and add 2 to cart.assistantReading page → found product. Hovering 'Add to cart' (1/2)…click [data-test=add] · 412, 318toolscroll → 480px · type qty=2 · click confirmassistantCAPTCHA detected. Pausing — please solve it in the browser.ask the agent…
[H3] AI Warm-up
The agent browses popular sites the way a real person does — reads, scrolls, clicks links, uses on-page search — never signing up or logging in. It allocates browsing time by how heavy each site is, so a fresh profile doesn't look brand-new.WARM-UP · profile_qa_jp_mobile32:18reddit.comDonewikipedia.orgReadingnews.ycombinator.comScrollingyoutube.comBrowsingstackoverflow.comQueued
[H3] AI Fingerprint
Pick a proxy. The generator produces a proxy-coherent identity — timezone, locale, and geolocation matched to the proxy's real exit location automatically. No manual cross-checking.fingerprint.session [#a8f2]spoofed · trustedUser-AgentMozilla/5.0 (Windows NT 10.0; Win64; x64) Chrome/132spoofedCanvas8a3f·d2c4·9e10noisedWebGLIntel(R) UHD Graphics 770spoofedTimezoneEurope/Berlin (+02:00)geo-matchedLanguagede-DE, en-USlockedFonts247 loaded · sys-macrandomizedintegrity97 / 100ENGINEERING
[H2] Built for silence.
Every signal a website can read — and a hundred you didn't know it could — runs through a per-profile entropy layer. Drive it from a UI or from your terminal.
[H3] Proxy mesh, baked in
Bring your own, or rent residential, mobile, and ISP exit nodes from inside the app. Auto-rotate, sticky sessions, geo-pinning. Timezone, locale and geolocation snap to the exit IP automatically. exit nodes you
[H3] Drive it with code
Full Puppeteer & Playwright compatibility on a CDP endpoint per profile. Headless or visual. Run a hundred profiles from one script.$basaltlabs launch --profile ada --proxy de-berlin→ spinning up sandbox… ok→ binding 127.0.0.1:9222 → fingerprint #a8f2→ trust score 97.8% · cf bypass passed$connect cdp://localhost:9222ENGINES
[H2] Three engines. One identity model.
Use whichever browser the target site expects. Custom Chromium ships the strongest, C++-level spoofing.Custom ChromiumPatched fork — full spoofingSystem ChromeStock browser — basicCustom FirefoxGecko forkCanvas spoofing~WebGL spoofing~AudioContext~Fonts~TimezoneLocaleWebRTCnavigator / UA-CH~WebGPU~Full TLS / JA3~ Full~ Partial / JS-level Not supportedSECURITY & PRIVACY
[H2] Secure by design.
Secrets like proxy passwords and 2FA seeds are encrypted on your device before they ever sync. Your workspace travels with you — safely — across every device.
[H3] AES-256-GCM at rest
Proxy passwords and TOTP secrets are encrypted with a key derived locally — never sent anywhere.
[H3] DPAPI-protected cookies
Chromium cookies use the OS keychain (Windows DPAPI / macOS Keychain / Linux libsecret) for storage.
[H3] Deterministic key derivation
Keys are derived from your local device material. No master account, no recovery server, nothing to phish.
[H3] No telemetry. Period.
No analytics, no error reporting, no remote feature flags. Open about every network call — there aren't any.HOW IT WORKS
[H2] From zero to a hundred profiles in minutes.
01
[H3] Create a profile
Pick a template or let the AI generator build a proxy-coherent identity. Lock anything you want with field overrides.02
[H3] Assign a proxy
Drop in any HTTP/SOCKS5 proxy. Timezone, locale and geolocation snap to the exit IP automatically.03
[H3] Launch & automate
Open the real browser, or hand the task to the AI agent. Bulk launch dozens at once. Logs and history kept locally.SCREENSHOTS
[H2] What you'll actually use.
Real surfaces of the app — Dashboard, Fingerprint Lab, AI Chat, Proxy Manager.Dashboard
[IMG: Dashboard screenshot]
Fingerprint Lab
[IMG: Fingerprint Lab screenshot]
AI Chat
[IMG: AI Chat screenshot]
Proxy Manager
[IMG: Proxy Manager screenshot]
PRICING
[H2] Pick a pool size. Pay per profile.
Every plan ships all 3 engines and the full privacy stack. Longer commitments cost less per month — and unlock the local AI agent.Monthly6 Months−30%1 YearBest value AI integration included on this plan$5.99/ moBilled $71.88 every 12 monthsSign up — Get Starter Plus5 isolated profilesAll 3 engines (Chromium · Chrome · Firefox)Fingerprint Lab + live CDP reportPer-profile proxies + proxy libraryEncrypted backup · cookies · TOTP vaultLocal AI agent + warm-upEmail supportMost popular$10.99/ moBilled $131.88 every 12 monthsSign up — Get Lite10 isolated profilesAll 3 engines (Chromium · Chrome · Firefox)Fingerprint Lab + live CDP reportPer-profile proxies + proxy libraryEncrypted backup · cookies · TOTP vaultFolders, groups & bulk launchLocal AI agent + warm-upPriority email support$21.99/ moBilled $263.88 every 12 monthsSign up — Get Pro50 isolated profilesAll 3 engines (Chromium · Chrome · Firefox)Fingerprint Lab + live CDP reportPer-profile proxies + proxy libraryEncrypted backup · cookies · TOTP vaultFolders, groups & bulk launchSession log + local audit trailLocal AI agent + warm-upPriority supportLet's talkVolume pricing — talk to usContact supportUnlimited profilesEverything in ProPer-seat licensingTeam folders & role handoffLocal AI agent + warm-upDedicated onboarding + SLAPrices in USD, per profile pool, billed up front for the chosen term. All plans include encrypted cloud sync across all your devices. No telemetry. Partner program
[H2] Get paid to spread the word
Two ways to earn with Basalt — wallet credit for every friend you bring, or cash commissions as an approved affiliate partner.
[H3] Refer & earn credit
Share your link. Every friend who subscribes earns you account credit toward your own plan — and gives them a discount.
[H3] Affiliate cash
Promote at scale? Apply for the partner program and earn real cash commission on every referred sale, paid on request.
[H3] Built-in dashboard
Track clicks, conversions, EPC and earnings live. Ready-made links, campaign sub-IDs and payout management.Open affiliate dashboardGet your referral linkFAQ
[H2] The questions we hear most.
How does BasaltLabs avoid detection?Spoofing happens at the C++ engine level inside our patched Chromium fork, not as JavaScript overrides. That means navigator, canvas, WebGL, audio, fonts, WebRTC, UA-CH and more report consistent, deterministic values to every API a tracker can poke. The Fingerprint Lab also runs live CDP verification so you can see exactly what the running browser exposes.Does it work with my proxies?HTTP, HTTPS and SOCKS5 are supported, with health checks and IP geo lookup built-in. Authenticated (user/password) proxies just work through a built-in local relay — no awkward extensions or login prompts.Is the local AI actually local?Yes. The agent connects to any OpenAI-compatible endpoint on your machine — LM Studio, Ollama with an OpenAI shim, llama.cpp's server, vLLM, anything. Prompts, page text, and screenshots stay on your computer — they're never sent to BasaltLabs. Only your profile data syncs to your account.Which operating systems are supported?Windows 10 / 11, macOS 12+ (Apple Silicon and Intel) and major Linux distributions. Same feature set everywhere — the only thing that differs is which OS-level keychain handles your encrypted cookie store.Will my accounts be safe?Profile isolation is real: separate fingerprints, separate proxies, separate storage. We can't promise any tool defeats every platform, but BasaltLabs gives you the strongest engine-level isolation in the category, plus AI warm-up so new profiles don't look brand-new.Can I export my data?Always. Profiles, cookies, extensions and the fingerprint of every identity can be exported to encrypted backup files at any time. Imports work the same way. Your data is yours.
[H2] One desktop app.A hundred identities.
Plans from $5.99/mo per profile pool. All engines, full privacy stack, AI on 6-month and yearly.View plansTalk to salesWindows 10 / 11macOS 12+Linux

CONTACT
[H1] Tell us what's going on.
For licensing, billing, or anything Team-tier related. Technical issues belong in-app — Help → Send report (still 100% local until you choose to send).Email[email protected]Sales[email protected]Security disclosures[email protected]CommunityX (Twitter)TikTokTelegram

Loading…

FingerprintingFingerprinting·Jun 19, 2026 8 min
[H2] What actually makes a browser fingerprint detectable
Trackers don't catch you on one signal — they catch inconsistency across many. Here's how canvas, WebGL, fonts and timezone betray a fake identity, and what coherence really means.MOMaya OkaforResearchRead ScrapingScraping·Jul 10, 2026
[H3] BasaltLabs vs Multilogin: A local-first anti-detect browser for automation, scraping, and testing
SPSam Pinckman 3 minAiAi·Jul 9, 2026
[H3] Anthropic vs. Alibaba: Inside the AI Industry's Ugliest Feud of 2026
SPSam Pinckman 6 minDifferenceDifference·Jul 9, 2026
[H3] Why Basalt Browser Stands Out
SPSam Pinckman 1 minAiAi·Jul 8, 2026
[H3] Anti-Detect Browsers in 2026: What They Are, Who Actually Uses Them, and Where AI Fits In
SPSam Pinckman 5 minAiAi·Jul 7, 2026
[H3] Local AI Agent in Basalt Browser: Real Automation
SPSam Pinckman 4 minGuidesGuides·Jul 6, 2026
[H3] Basalt Browser: What Is the Cloud Profile Feature and Why It's Changing Multi-Accounting
MOMarius Ore 4 minFingerprintFingerprint·Jun 30, 2026
[H3] Basalt Browser Update: Team Workspaces, Shared Profiles & Secure Collaboration
SPSam Pincman 2 minGuidesGuides·Jun 19, 2026
[H3] Running many accounts without cross-linkage: a mental model
Isolation isn't a feature you toggle — it's a discipline. Cookies, cache, storage, fingerprint and network all have to be sealed per identity, every time.TBTunde Bakare 7 minAIAI·Jun 19, 2026
[H3] Running a local LLM to automate the browser — privately
You don't need a cloud API to drive a browser with natural language. Point an agent at LM Studio or any OpenAI-compatible endpoint and keep every prompt on your machine.PNPriya Nair 9 minProxiesProxies·Jun 19, 2026
[H3] Proxy-coherent identities: matching timezone, locale and geo to the exit IP
A residential IP in Berlin with an America/New_York clock is a contradiction a tracker can read in milliseconds. How to make the network and the browser tell the same story.DRDaniel Reyes 6 minSecuritySecurity·Jun 19, 2026
[H3] How BasaltLabs keeps your data local and encrypted
AES-256-GCM for secrets, OS-keychain-protected cookies, deterministic local key derivation, and zero-knowledge sync. A plain walk through the security model.MOMaya Okafor 5 min·Jun 9, 2026
[H3] Anti-Detect Browser vs VPN vs Proxy: Understanding the Key Differences
In today's digital world, privacy, security, and account management are more important than ever. Many users encounter terms like Anti-Detect Browser, VPN, and Proxy, but understanding the difference between them is essential when choosing the right tool for your needs.SPSam Pinckman 3 min

Loading your account…

DOCS
[H1] Documentation
Everything you need to run BasaltLabs — from your first profile to driving the anti-detect engine programmatically with Playwright or Puppeteer.
[H2] Install & first profile
Download BasaltLabs from the Download page and run the installer. On first launch, sign in with your account — the app links to your subscription and pulls the browser engine automatically.Click New profile, give it a name, and optionally pick a Fingerprint Lab template and a proxy. Hit Launch and a fully isolated browser opens with its own fingerprint, storage and network identity.
[H2] Link your account
Sign-in uses a web device-code flow — the app opens your browser, you approve the device, and it comes back linked. New sign-ins trigger an email security alert. You can enable account 2FA (TOTP) from the web dashboard for an extra layer.
[H2] Cloud sync
Profiles, fingerprints, proxies and cookies sync end-to-end encrypted. Switching accounts wipes the local cache clean, so nothing bleeds between logins. Sync runs automatically and on demand from the app.REFERENCE
[H2] Local automation API
While BasaltLabs is running it exposes a small REST API on http://127.0.0.1:17247, bound to loopback only. Use it to create, launch and stop profiles from scripts — then attach a browser automation library over the Chrome DevTools Protocol (CDP) to drive the spoofed engine directly.The engine is real, patched Chromium — canvas, WebGL, audio, fonts, timezone and WebRTC are spoofed at the engine level, so anything you automate over CDP inherits the exact same fingerprint the profile launches with.
[H2] Authentication
Every route except /api/v1/health requires a local API token. Find it in BasaltLabs → Settings (and rotate it there if it leaks). Send it on each request as either header:Authorization: Bearer <token>
X-Basalt-Token: <token>The token stops a random web page you visit in another browser from reaching localhost and enumerating or deleting your profiles. Keep it secret; treat it like a password.
[H2] Endpoints
MethodPathDescriptionGET/api/v1/healthLiveness + app version. The only route that needs no token.GET/api/v1/profilesList all profiles.POST/api/v1/profilesCreate a profile. Body: { name, group_id? }. A fingerprint is auto-generated.GET/api/v1/profiles/:idFetch one profile.DELETE/api/v1/profiles/:idDelete a profile.POST/api/v1/profiles/:id/launchLaunch the profile's browser. Optional ?url= start page. Returns pid + debug_port.GET/api/v1/profiles/:id/cdpResolve the running profile's CDP webSocketDebuggerUrl for Playwright/Puppeteer.POST/api/v1/profiles/:id/stopStop the profile and flush its cookies for the next sync.GET/api/v1/profiles/:id/statusWhether the profile is running.GET/api/v1/runningList every currently running profile with its pid + debug_port.
[H3] Quickstart with curl
# Discover the port (no token needed)
curl http://127.0.0.1:17247/api/v1/health
# List profiles (token required)
curl http://127.0.0.1:17247/api/v1/profiles \
-H "Authorization: Bearer $BASALT_TOKEN"
# Launch one, then read its CDP endpoint
curl -X POST http://127.0.0.1:17247/api/v1/profiles/$ID/launch \
-H "Authorization: Bearer $BASALT_TOKEN"
curl http://127.0.0.1:17247/api/v1/profiles/$ID/cdp \
-H "Authorization: Bearer $BASALT_TOKEN"
[H2] Playwright
Launch the profile, resolve its CDP endpoint, then attach with connectOverCDP. You get the live, spoofed browser context — not a fresh Chromium.import { chromium } from "playwright";
const API = "http://127.0.0.1:17247";
const TOKEN = "<copy from BasaltLabs → Settings>";
const PROFILE_ID = "<your profile id>";
const h = { Authorization: `Bearer ${TOKEN}` };
// 1. Launch the profile (spawns the anti-detect engine)
await fetch(`${API}/api/v1/profiles/${PROFILE_ID}/launch`, { method: "POST", headers: h });
// 2. Resolve its CDP endpoint