Your AI needs a
browser that works

Phantom uses a server-side token broker — no popup windows, no "this browser may not be secure" errors. Once a Google profile is authenticated (done once from a real browser), Phantom saves the full session — cookies, localStorage, and tokens — to a persistent Docker volume. Every subsequent login is a 1-click OAuth flow: load profile → navigate → already logged in.

For the initial authentication, Phantom supports human-assisted OAuth: we generate the URL, you approve it on your phone once, and Phantom captures and stores the session for all future automated use. After that, zero human involvement.

Phantom's 4-tier pipeline solves reCAPTCHA v2 (checkbox and invisible), reCAPTCHA v3 (score-based), hCaptcha (including the grid image challenges), and Cloudflare Turnstile. The pipeline tries each solver in sequence until one succeeds: Capsolver first (fastest, cheapest), then 2captcha (fallback), then Vision AI (for visual puzzles), then audio challenge solving as last resort.

For hCaptcha grid challenges — the "select all traffic lights" type — Phantom uses vision AI to identify matching elements and clicks the correct refs. Performance is ~85% on first attempt, ~95% with a single retry. Each solve costs approximately $0.002–0.01.

Browser profiles are stored on a dedicated Docker volume, not inside the container's ephemeral filesystem. docker compose down -v does not wipe them. Profiles include full browser state: cookies, localStorage, IndexedDB, service workers, extension data, and saved credentials.

Phantom automatically checks the session on every profile_load — if cookies have expired (Google/Spotify/GitHub sessions typically last 2–4 weeks), it triggers a fresh auth flow transparently. You never log into the same service twice.

Phantom employs 16 stealth vectors patched at the CDP level — including navigator.webdriver spoofing, TLS fingerprint normalization, WebGL vendor masking, canvas fingerprint randomization, and realistic audio context profiles. Combined with BrowserForge for dynamic user agent + screen resolution matching, Phantom passes CreepJS with zero detection flags on Brave and Patchright engines.

That said, Google's behavioral Layer 3 detection (mouse movement patterns, timing analysis, scroll behavior) can still flag automated interactions on fresh sessions. The fix is session persistence — a pre-authenticated profile bypasses behavioral checks entirely because Google sees a returning user with established history.

Phantom has a built-in "human-assisted bypass" mode. After 2 failed automation attempts on any auth gate (CAPTCHA, OAuth, PerimeterX, Stytch magic link), Phantom automatically routes the task to a registered human operator — typically via WhatsApp. The human opens a URL on their phone, completes the challenge in ~10 seconds, and Phantom captures the resulting session for all future automated use.

This isn't a failure path — it's a design feature. Every human-assisted bypass creates a permanent session profile, so the same gate is never encountered again for that service. Over time, Phantom builds a library of pre-authenticated profiles that cover your entire service stack.

All credentials are encrypted at rest with Fernet (AES-128-CBC) using a key derived from your account secret — Phantom never stores raw passwords, API keys, or OAuth tokens in plaintext. The vault auto-rotates tokens before they expire (checked daily via credentials-guardian), and credentials are only decrypted in-memory during active browser sessions.

On the Enterprise plan, Cipher (Phantom's credential sub-agent) handles all vault operations in an isolated context — it prepares credentials, hands them to Wraith (the browser sub-agent), and never exposes them to the main agent or any other process. This separation means no credential can leak through context injection or tool output.

Yes. Phantom exposes a single phantom_browser action-based API through MCP (Model Context Protocol). You can call it from any language that supports HTTP or SSE — Python, Node.js, Go, curl, or directly from an AI agent framework like Hermes, LangChain, or AutoGPT.

A single phantom_browser call with action login handles the entire flow: navigate → detect auth type → fill credentials → solve CAPTCHA if present → submit → verify login success → return session state. No stitching together 10 separate tools for one login.

Yes — the White Label plan is designed specifically for this. You get a fully rebranded Phantom Browser instance on your own domain, multi-tenant architecture so your customers don't share profiles or sessions, usage-based billing API so you can bill your customers however you want, and onboarding support from the SoVael team.

Common use cases: agencies offering "browser automation as a service," AI product teams embedding Phantom into their platform, and SaaS companies adding web automation as a feature. Revenue share models are available for high-volume partners.

Standard plan: 99.5% uptime SLA with best-effort support response within 4 hours during business hours (UK time). Enterprise plan: 99.9% uptime SLA with guaranteed <24 hour support response, priority queue on all issues, and dedicated Slack channel. White Label: 99.95% uptime with financial SLA backing and dedicated onboarding engineer.

All plans include automated health monitoring (every 5 minutes), automatic container recovery, and weekly uptime reports. Phantom runs on dedicated infrastructure — no noisy neighbours, no shared proxy pools degrading your session quality.

Phantom Browser has been tested against a wide range of real-world anti-bot systems. For a detailed breakdown of which sites work, which require workarounds, and the known failure modes, see the full test report.

Passes reliably: GitHub, GitLab, Vercel, Slack, Discord, Twitter/X, LinkedIn, Stripe Dashboard, Groq API, Supabase, Deepgram, Twilio, AWS Console, DigitalOcean, Linode, Cloudflare Dashboard

Requires persistence/profiles: Google Cloud Console, Google Ads, Google OAuth on third-party sites, Spotify for Developers, HubSpot, Salesforce

Requires human-assisted bypass: Google OAuth first auth, Fiverr, Upwork, Stripe hCaptcha Enterprise (some variants), Stytch magic links