Anti-Bot Bypass: Cloudflare, PerimeterX, DataDome avatar

Anti-Bot Bypass: Cloudflare, PerimeterX, DataDome

Pricing

from $5.00 / 1,000 results

Go to Apify Store
Anti-Bot Bypass: Cloudflare, PerimeterX, DataDome

Anti-Bot Bypass: Cloudflare, PerimeterX, DataDome

Bypass Cloudflare, PerimeterX (HUMAN) & DataDome at $5/1K requests. Stealth Camoufox returns clean HTML, reusable session cookies, CSS-extracted data, and screenshots. Drop-in middleware for any scraper. No subscription, pay only for what you use.

Pricing

from $5.00 / 1,000 results

Rating

0.0

(0)

Developer

Dominique

Dominique

Maintained by Community

Actor stats

0

Bookmarked

36

Total users

16

Monthly active users

9 hours ago

Last modified

Share

Anti-Bot Bypass Service

๐Ÿ›ก๏ธ The only native pay-per-use anti-bot bypass on Apify Store โ€” bypass Cloudflare, PerimeterX (HUMAN) & DataDome at $5 per 1,000 requests.

Send any protected URL. Get back clean HTML, reusable session cookies, extracted structured data, and optional screenshots. No subscriptions, no monthly minimums, no setup. Drop it into any scraper or pipeline as a one-call middleware.


๐Ÿ† Why This Actor

FeatureThis ActorScrapingBeeBrowserlessBright Data Unlocker
Price$5 / 1,000 requests$49โ€“199/mo subscription$50โ€“200/mo subscription$3โ€“8 / 1,000 + extra fees
No monthly feeโœ… Pure pay-per-useโŒ Monthly commitmentโŒ Monthly commitmentโŒ Commitment plans
Cloudflare bypassโœ… Camoufox + Turnstile pathโœ…โœ…โœ…
PerimeterX bypassโœ… Press & Hold solver + 2Captcha fallbackโŒ LimitedโŒ Limitedโœ…
DataDome bypassโœ… Cookie + fingerprintโŒโŒโœ…
Detection score (CreepJS)0% headless leakunknowndetectableunknown
Captcha solvingโœ… Built-in 2Captcha integrationAdd-on costNot includedIncluded
Reusable session cookiesโœ… Export _px3, cf_clearance, datadome, etc.โŒโŒLimited
CSS extractionโœ… JSON selector:name mapLimitedโŒโŒ
Native Apify integrationโœ… Chain with any actorโŒ External APIโŒ External APIโŒ External
Residential proxy includedโœ… US/EU/globalExtra add-onExtra add-onQuota based

๐Ÿ’ก Save $600+/year vs SaaS subscriptions โ€” same bypass quality, zero commitment, runs natively on the Apify platform.


โœจ Key Features

  • ๐Ÿ›ก๏ธ 3 protection systems handled โ€” Cloudflare (incl. Turnstile), PerimeterX (HUMAN Security), DataDome
  • ๐ŸฆŠ Camoufox stealth Firefox engine โ€” 0% detection score on CreepJS in headless + stealth mode
  • ๐Ÿช Reusable session cookies โ€” export _px3, cf_clearance, datadome, etc. and reuse them with plain httpx/requests for fast subsequent fetches
  • ๐Ÿ“Š CSS data extraction โ€” pass a {name: selector} map, get a clean key/value dict back
  • ๐Ÿ“ธ Screenshots on demand โ€” optional base64 PNG for visual verification
  • ๐Ÿ”„ Auto-retry with rotation โ€” every retry uses a fresh fingerprint + new residential proxy session
  • ๐Ÿค– Human simulation โ€” realistic mouse movement, scroll, and delay patterns
  • โฑ๏ธ Timing telemetry โ€” per-request bypass duration, total duration, attempt count
  • ๐Ÿง  2Captcha fallback โ€” supply your 2Captcha API key to solve PerimeterX Press & Hold challenges automatically
  • ๐Ÿ“ฆ Bulk-friendly โ€” pass an array of URLs; results pushed to the default dataset as JSON

๐Ÿ“ฅ Input Parameters

ParameterTypeDefaultDescription
urlstringโ€”Single target URL to bypass and fetch
urlsarrayโ€”Multiple URLs to process in one run; combined with url if both provided
waitSelectorstringโ€”CSS selector to wait for after bypass to confirm content is ready
extractSelectorsobjectโ€”{name: cssSelector} pairs for structured extraction, e.g. {"title": "h1", "price": ".price"}
returnHtmlbooleantrueInclude full page HTML in each output item
returnCookiesbooleantrueInclude session cookies (reusable for fast subsequent fetches)
returnScreenshotbooleanfalseCapture base64 PNG screenshot of final page state
proxyConfigurationobjectUS residentialApify proxy config; residential is strongly recommended
maxRetriesinteger2Retry attempts per URL; each retry uses a fresh fingerprint + new proxy session
timeoutSecsinteger60Max time per URL including all retries
humanizebooleanfalseSimulate mouse movement, scroll, and realistic delays
captchaSolverApiKeystring (secret)โ€”2Captcha API key โ€” enables Press & Hold fallback for PerimeterX

๐Ÿ“ค Sample Output

{
"url": "https://www.protected-site.com/data",
"status": "success",
"protectionDetected": "perimeterx",
"protectionBypassed": true,
"html": "<!DOCTYPE html>...",
"cookies": [
{ "name": "_px3", "value": "abc123...", "domain": ".example.com" },
{ "name": "cf_clearance", "value": "xyz...", "domain": ".example.com" }
],
"extractedData": {
"title": "Product Name",
"price": "$29.99"
},
"timing": {
"totalMs": 15230,
"bypassMs": 4200,
"attempt": 1
},
"scrapedAt": "2026-05-25T12:34:56Z"
}

Each successful URL becomes one dataset item. Failures still produce an item with status: "failed" and a descriptive error โ€” never a silent empty result.


๐Ÿ’ก Use Cases

  • ๐Ÿ”— Middleware for other scrapers โ€” chain ahead of any actor to clear protection first
  • ๐Ÿช Cookie harvesting โ€” get session cookies, then scrape at full speed with plain HTTP (10ร— faster, 10ร— cheaper)
  • ๐Ÿ’ฐ Price monitoring โ€” access e-commerce sites behind Cloudflare/PerimeterX (Mercari, Best Buy, Nike, etc.)
  • ๐Ÿ”ฌ Competitive research โ€” reach competitor sites protected by bot detection
  • ๐Ÿ“Š Data aggregation โ€” collect from protected directories, classifieds, and listings
  • ๐Ÿงช QA testing โ€” verify your own site's bot protection effectiveness against a known-good stealth client
  • ๐Ÿ—ž๏ธ News + content monitoring โ€” paywalled or rate-limited public pages
  • ๐Ÿค– AI data pipelines โ€” feed clean HTML into LLM-based extraction systems

๐Ÿ“š Named Examples

1. Bypass Cloudflare Turnstile (simple)

{ "url": "https://www.protected-site.com" }

2. Bypass PerimeterX Press & Hold (with 2Captcha)

{
"url": "https://www.zillow.com/homes/austin-tx/",
"captchaSolverApiKey": "YOUR_2CAPTCHA_KEY",
"humanize": true
}
{
"url": "https://www.realtor.com",
"returnCookies": true,
"returnHtml": false
}

4. Structured CSS extraction

{
"url": "https://example.com/product/123",
"waitSelector": "h1.product-title",
"extractSelectors": {
"title": "h1.product-title",
"price": "span.price-now",
"availability": ".stock-status"
}
}

5. Bulk URLs in one run

{
"urls": [
"https://protected-a.com/page1",
"https://protected-b.com/page2",
"https://protected-c.com/page3"
],
"maxRetries": 3
}

6. Visual verification with screenshot

{
"url": "https://protected-site.com",
"returnScreenshot": true
}

๐Ÿ”— Integration Recipes

Python (Apify SDK)

from apify_client import ApifyClient
client = ApifyClient("YOUR_APIFY_API_TOKEN")
run = client.actor("h4sh/anti-bot-bypass").call(run_input={
"url": "https://protected-site.com",
"returnCookies": True,
})
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
cookies = {c["name"]: c["value"] for c in item["cookies"]}
# Reuse cookies with httpx for fast subsequent requests
import httpx
r = httpx.get("https://protected-site.com/api/items", cookies=cookies)
print(r.json())

Node.js (Apify Client)

import { ApifyClient } from 'apify-client';
const client = new ApifyClient({ token: 'YOUR_APIFY_API_TOKEN' });
const run = await client.actor('h4sh/anti-bot-bypass').call({
url: 'https://protected-site.com',
returnCookies: true,
});
const { items } = await client.dataset(run.defaultDatasetId).listItems();
console.log(items[0].cookies);

Plain HTTP (curl)

curl -X POST "https://api.apify.com/v2/acts/h4sh~anti-bot-bypass/run-sync-get-dataset-items?token=YOUR_TOKEN" \
-H "Content-Type: application/json" \
-d '{"url": "https://protected-site.com", "returnCookies": true}'

n8n / Make / Zapier

Use the Apify node to call this actor and reuse the returned cookies in subsequent HTTP nodes for fast, cheap follow-up scraping.


โ“ FAQ

Q: Does this work against every site? A: It handles the three most common enterprise protections (Cloudflare, PerimeterX, DataDome) plus generic challenges. Some sites layer custom JS challenges, ML-trained PX models, or per-customer fingerprint blocklists where success rates vary. We do not silently return empty results โ€” failed URLs are clearly marked status: "failed" with a reason.

Q: Why is it cheaper than ScrapingBee or Browserless? A: We do not run a SaaS backend with sales/support headcount. The actor runs natively on Apify with usage-based pricing. You skip the SaaS markup.

Q: How are PerimeterX Press & Hold challenges solved? A: First with native mouse-based simulation. If that fails and you provided a captchaSolverApiKey, we automatically dispatch to 2Captcha as fallback.

Q: Can I reuse cookies? A: Yes โ€” that is the recommended pattern for high-volume work. Bypass once, then scrape with plain HTTP using the returned cookies at ~10ร— lower cost.

Q: Will my IP get blocked? A: No โ€” the actor uses Apify residential proxies. Each retry rotates to a new IP and a fresh browser fingerprint.

Q: What happens if I hit a CAPTCHA the actor cannot solve? A: The output item is returned with status: "failed", protectionBypassed: false, and a clear reason like cloudflare_timeout or perimeterx_no_solver_key. You are not silently overcharged for an empty dataset.

Q: Does it work for authenticated/logged-in pages? A: Yes โ€” pass pre-existing cookies via extraCookies (advanced flag). For full login flows, combine with a small custom actor that posts to the login endpoint, then chain here.


๐Ÿ› ๏ธ Troubleshooting / Error Matrix

SymptomLikely causeFix
cloudflare_timeoutPage expects interactive Turnstile that residential IP can't solvePass captchaSolverApiKey; try a different proxy country
perimeterx_no_solver_keyPress & Hold needed but no 2Captcha key suppliedAdd captchaSolverApiKey
protectionDetected: "datadome" but blockedAggressive DataDome with device fingerprint blocklistIncrease maxRetries, enable humanize
Empty extractedDataSelector didn't matchSet waitSelector for the relevant element first
Timeout on long pagesDefault 60s too lowIncrease timeoutSecs to 120โ€“180
Output HTML feels incompletePage renders content after JS scroll/interactionEnable humanize: true
Repeated failures on same domainDomain trained against generic stealth toolsOpen a support thread โ€” many sites need a small per-site config

๐Ÿ’ฒ Pricing

  • $0.005 per result โ€” Apify pay-per-event model
  • $0.005 actor-start charge โ€” covers compute + residential proxy
  • No monthly subscription, no minimum spend, no commitment
  • Compare: ScrapingBee $49/mo (5K credits), Browserless $50/mo minimum, Bright Data Unlocker has commitment plans + extra fees
  • Pay only for what you actually request

Companion Apify Actors (recurring data)

Self-Hosted Standalone Toolkit

Need to run this anti-bot bypass on your own infrastructure, no Apify dependency, no per-request fees? Check the Anti-Bot Bypass Toolkit Python package โ€” $49 one-time on Gumroad, full source code, commercial license, lifetime updates.


๐Ÿ“ Reviews & Feedback

If this actor saved you time or money, please leave a review on the Apify Store page โ€” it directly helps other developers find it. Found a site that blocks us? Open a discussion and we'll investigate.


๐Ÿ”’ Privacy & Compliance

  • All requests go through Apify's residential proxy network โ€” no logs are stored beyond the Apify run lifecycle
  • 2Captcha API keys are stored as secrets โ€” never logged, never exposed in run output
  • This tool is intended for accessing public web pages. Comply with target sites' Terms of Service and local laws.
  • Not for credential stuffing, abuse, or activity that violates platform rules