GoKawiilBot-detection benchmark finds 2026 AI agents evade some systems up to 91% of the time
A benchmarking study retested five bot-detection systems—Proof of Human, Google reCAPTCHA v3, hCaptcha, Cloudflare Turnstile, and Cloudflare Bot Management—against conventional automation, stealth browsers, and AI-powered browsing agents completing a five-question survey. Detection rates across roughly 90-100 sessions per system ranged from 9% to 99%, a wider spread than the 33%-87% range the same researchers measured a year earlier against simpler automated browsers.
GoKawiil's interpretation of the reporting above, not reported fact.
The widening gap suggests that as AI browsing agents grow more capable at interpreting and interacting with webpages, some bot-detection systems are struggling to keep pace, while others have improved. This could mean that device-level signals alone are increasingly insufficient, pushing detection vendors toward richer behavioral analysis to tell humans and agents apart.
- Detection rates across five systems ranged from 9% to 99%, up from 33%-87% a year prior
- Modern AI browsing agents were tested alongside conventional automation and stealth browsers
- Systems combining behavioral and device signals have historically outperformed device-only approaches
Source: research.poh.org — Milena Rmus, 2026-10-20
Published there as: “Benchmarking Bot Detection Systems Against Modern AI Agents in 2026”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.