ChromeDriver lets outside software steer a Chrome browser, which helps testers repeat journeys and also lets other people script visits at scale.
It is a control component rather than a page, a campaign, or a judgment about whether a particular script is allowed.
How it works
In a test lab, the component opens a browser, follows a documented journey, and records whether the product still behaves, and the same capability can walk a real site through forms and checkouts without a person watching each step.
Presence of the component is a clue about automation, not proof of a crime, because many companies use it for legitimate quality checks.
Sites that need to separate welcome test traffic from abusive scripting should look at declared test identities, behavior, and the cost of each session.
Blocking every automated browser would also block your own monitoring, so the policy has to name who may automate and on which paths.
Concrete examples
- A quality team runs a nightly journey that signs in, edits a profile, and signs out, using a browser steered from the test suite.
- An abusive script uses the same steering method to open hundreds of account pages and copy what a person would see.
- A site that blocks all steered browsers also breaks its own synthetic check and misses a real outage until customers call.
Protective measures
- Give your own test automation a declared identity and a narrow set of paths, and do not share that identity with vendors casually.
- Treat unexpected steered browsers as untrusted automation, and apply the same action limits you use for other scripts.
- Do not publish internal notes that explain how your tests steer a browser in a way outsiders can copy for abuse.
- Review whether production data is reachable from test steering, and keep those journeys on fake or tightly scoped accounts.
How CDPCaptcha helps
Browser proof of work makes scripted Chrome sessions more expensive to run because each automated visit must perform additional computation on the page.
CDPCaptcha is a self-hosted proof of work check in the browser, with no cookies, no tracking, and no picture puzzles.
It is made and hosted in the EU, in Germany, and the service is described at https://cdpcaptcha.com/.