Fortress
Fortress is an innovative open-source stealth browser engine developed by the Tilion team, which was first released to the public in July 2026. This tool was created with the clear objective of addressing the problem where modern AI agents and web data scrapers are indiscriminately blocked by sophisticated bot detection systems. To eliminate inconsistencies that occur when conventional automated browsers communicate with web servers, Fortress adopts an architecture that goes beyond simply manipulating JavaScript-level variables and instead deeply modifies the C++ source code of Chromium.
Fortress is an innovative open-source stealth browser engine developed by the Tilion team, first released to the public in July 2026. This tool was created with a clear purpose: to address the problem of modern AI agents and web data scrapers being indiscriminately blocked by sophisticated bot detection systems. To eliminate inconsistencies that arise when conventional automated browsers communicate with web servers, Fortress employs an architecture that goes beyond simply manipulating JavaScript-level variables. It deeply modifies the C++ source code of Chromium. It applies in-tree patches, compiling them directly within the source code tree, even down to the lowest-level specifications of the rendering engine Blink, the JavaScript engine V8, and the secure cryptographic communication library BoringSSL. Just as a large language model like GPT generates natural-sounding sentences to realistically mimic human conversation, Fortress organically unifies CPU specifications, graphics processing unit (GPU) driver acceleration information, system font lists, and audio context parameters to perfectly emulate the typical Chrome browser environment of a regular Windows user.
In the field of web automation, previously widely used proxy script-based tools like Puppeteer-stealth or Playwright-stealth employed a temporary fix by overwriting JavaScript global objects (e.g., navigator) within the browser at runtime (Monkey Patching). However, recent intelligent bot detection solutions easily detect the presence of these stealth layers by analyzing the JavaScript execution context when a web page is initially loaded. For example, when a string conversion function (toString()) is called on an overwritten function object, the browser engine's pure machine code execution, indicated by native code ([native code]), is not output, and traces of manipulation are detected. Alternatively, the overwriting is bypassed when the prototype object is re-called within a sub-frame (iframe) isolated by a security sandbox or within a background web worker, exposing the original headless indicators. Fortress strictly adheres to the principle of Realm Invariance, ensuring that all contexts within the virtualized environment, and even the network shape of encrypted packets (JA3/JA4 TLS), perfectly match their original identity. This is a crucial differentiator that elevates the detection evasion system to the next level.
From a researcher's perspective, Fortress can function as a critical infrastructure responsible for the survival of data acquisition pipelines. For example, public and private servers that provide access to global medical and compound registry websites or genomic sequence analysis tools have implemented strict anti-bot solutions, such as Akamai Bot Manager or Cloudflare Turnstile, to protect server resources, making it difficult for conventional crawlers to even access the first page. Researchers can simply modify a single line of code in their existing Playwright or Puppeteer source code, removing the option to directly execute the Chrome browser and connecting to the Chrome DevTools Protocol (CDP) port on a local or remote machine where Fortress is running. Because the virtual keyboard AZERTY/QWERTY layout, tailored to the locale settings, the media device list that matches the device resolution, and the actual ANGLE graphics driver hardware acceleration backend operate harmoniously, the security filter completely trusts this as pure traffic from a legitimate researcher directly accessing the site with a Chrome browser and manipulating the mouse and keyboard, allowing all access immediately.
Perfect integration with the emerging AI web agent ecosystem is also one of Fortress's key strengths. When LLM-based web automation agents, such as Browser-use, Crawl4AI, and LangChain, dynamically navigate elements on a web page and perform tasks such as signing up or retrieving data, Fortress effectively eliminates the problem of agent loops collapsing due to obstacles such as CAPTCHAs. With 34 precise C++ patches, it guarantees verified coherence, providing a robust foundation for AI agents to navigate complex multi-step business logic without being blocked by detection servers, allowing them to complete uninterrupted navigation to their destination.
💻 System Requirements
NVIDIA GPU or Apple Silicon integrated graphics recommended
Approximately 300MB (at least 850MB when downloading Docker)
⚡ Installation
4-1. Quick Start
pip install tilion-fortress
4-2. Detailed Installation
Download Python libraries and binariespip install tilion-fortress
When installing Node.js packagesnpm install tilion-fortress
Run remote CDP server using Docker (macOS/Linux)docker run --rm -p 9222:9222 tilion/fortress:latest
FAQ
What is Fortress?
Fortress is an innovative open-source stealth browser engine developed by the Tilion team, first released to the public in July 2026. This tool was created with a clear purpose: to address the problem of modern AI agents and web data scrapers being indiscriminately blocked by sophisticated bot detection systems. To eliminate inconsistencies that arise when conventional automated browsers communicate with web servers, Fortress employs an architecture that goes beyond simply manipulating JavaScript-level variables. It deeply modifies the C++ source code of Chromium. It applies in-tree patches, compiling them directly within the source code tree, even down to the lowest-level specifications of the rendering engine Blink, the JavaScript engine V8, and the secure cryptographic communication library BoringSSL. Just as a large language model like GPT generates natural-sounding sentences to realistically mimic human conversation, Fortress organically unifies CPU specifications, graphics processing unit (GPU) driver acceleration information, system font lists, and audio context parameters to perfectly emulate the typical Chrome browser environment of a regular Windows user. In the field of web automation, previously widely used proxy script-based tools like Puppeteer-stealth or Playwright-stealth employed a temporary fix by overwriting JavaScript global objects (e.g., navigator) within the browser at runtime (Monkey Patching). However, recent intelligent bot detection solutions easily detect the presence of these stealth layers by analyzing the JavaScript execution context when a web page is initially loaded. For example, when a string conversion function (toString()) is called on an overwritten function object, the browser engine's pure machine code execution, indicated by native code ([native code]), is not output, and traces of manipulation are detected. Alternatively, the overwriting is bypassed when the prototype object is re-called within a sub-frame (iframe) isolated by a security sandbox or within a background web worker, exposing the original headless indicators. Fortress strictly adheres to the principle of Realm Invariance, ensuring that all contexts within the virtualized environment, and even the network shape of encrypted packets (JA3/JA4 TLS), perfectly match their original identity. This is a crucial differentiator that elevates the detection evasion system to the next level. From a researcher's perspective, Fortress can function as a critical infrastructure responsible for the survival of data acquisition pipelines. For example, public and private servers that provide access to global medical and compound registry websites or genomic sequence analysis tools have implemented strict anti-bot solutions, such as Akamai Bot Manager or Cloudflare Turnstile, to protect server resources, making it difficult for conventional crawlers to even access the first page. Researchers can simply modify a single line of code in their existing Playwright or Puppeteer source code, removing the option to directly execute the Chrome browser and connecting to the Chrome DevTools Protocol (CDP) port on a local or remote machine where Fortress is running. Because the virtual keyboard AZERTY/QWERTY layout, tailored to the locale settings, the media device list that matches the device resolution, and the actual ANGLE graphics driver hardware acceleration backend operate harmoniously, the security filter completely trusts this as pure traffic from a legitimate researcher directly accessing the site with a Chrome browser and manipulating the mouse and keyboard, allowing all access immediately. Perfect integration with the emerging AI web agent ecosystem is also one of Fortress's key strengths. When LLM-based web automation agents, such as Browser-use, Crawl4AI, and LangChain, dynamically navigate elements on a web page and perform tasks such as signing up or retrieving data, Fortress effectively eliminates the problem of agent loops collapsing due to obstacles such as CAPTCHAs. With 34 precise C++ patches, it guarantees verified coherence, providing a robust foundation for AI agents to navigate complex multi-step business logic without being blocked by detection servers, allowing them to complete uninterrupted navigation to their destination.
When should I use Fortress?
Fortress is an innovative open-source stealth browser engine developed by the Tilion team, which was first released to the public in July 2026. This tool was created with the clear objective of addressing the problem where modern AI agents and web data scrapers are indiscriminately blocked by sophisticated bot detection systems. To eliminate inconsistencies that occur when conventional automated browsers communicate with web servers, Fortress adopts an architecture that goes beyond simply manipulating JavaScript-level variables and instead deeply modifies the C++ source code of Chromium.
📝 Update Notes
- vv153.0.8010.369/30/2026
Fortress의 이번 업데이트는 브라우저의 고유 식별 정보(fingerprint)를 매 실행 시마다 새롭게 생성하여 웹사이트의 자동화 탐지를 피하는 기능을 대폭 강화했습니다. 실제 사람의 마우스 움직임을 재현하는 기능까지 더해져, PubMed나 UniProt 같은 생물학적 데이터베이스를 대규모로 크롤링할 때 차단될 위험을 효과적으로 줄여줍니다. 개인 및 소규모 연구 조직은 무료로 이용 가능하니, 자동화된 데이터 수집 파이프라인을 구축하려는 연구원님들께 매우 유용한 도구가 될 것입니다.
- vv150.0.7871.1147/16/2026
이번 Fortress 업데이트는 최신 Chromium 150 버전을 탑재하여, 웹사이트의 자동화 탐지 시스템을 더욱 효과적으로 우회할 수 있게 되었어요. 각 브라우저 인스턴스의 지문(fingerprint)이 서로 다르게 생성되도록 개선되어, 대규모 논문이나 특허 데이터를 수집할 때 차단될 위험을 크게 줄였습니다. 또한 IP 주소에 맞춰 시간대와 지역 정보를 자동으로 일치시켜 주는 기능이 추가되어, 글로벌 데이터베이스 접근 시 더욱 정교하고 자연스러운 데이터 크롤링이 가능해졌어요.
- vv149.0.7827.2327/11/2026
이번 Fortress 업데이트는 Chromium 149 버전을 기반으로 재설계되어, 실제 사용자 환경과 가장 유사한 안정적인 스텔스 환경을 제공해요. 35개의 패치가 적용된 검증된 엔진을 통해 대규모 논문이나 생물학적 데이터베이스 스크래핑 시 탐지될 위험을 효과적으로 낮췄습니다. 자동화된 데이터 수집 작업의 신뢰도와 안정성을 높이고 싶은 연구원님께 이번 업데이트를 추천드려요.
🧪 Related Code of Life
No related Code of Life posts yet.