Skip to main content

topic / Checked 2026-10-18

Hyperbrowser vs Cloudflare Browser Run: website authentication

How does the browser get into the right account? Compare Hyperbrowser and Cloudflare Browser Run using documented website authentication behavior and a practical evaluation method.

How does the browser get into the right account?

Website authentication crosses several boundaries: the user who authorizes access, the system that holds credentials, the browser that submits them, and any model or code driving the page. Reusing a login and collecting a new identity are separate workflows.

For a customer-facing app, associate each stored connection with the correct application user before opening a browser. Reusing another user's profile can produce a technically successful run in the wrong account.

Compare the login path

Hyperbrowser: Credential fill refers to stored secrets or vaults by name and fills selected inputs. The documented flow supports credentials and one-time codes; saved profiles address browser state after sign-in.

Cloudflare Browser Run: Use browser code to implement the website's sign-in flow and retain the necessary session state. The reviewed overview does not establish a managed website connection that checks sign-in readiness before a workflow starts.

Sources: hyperbrowser.ai [1] ↗developers.cloudflare.com [2] ↗

Compare saved state

Hyperbrowser: Profiles save browser user-data-directory state, including cookies, local storage, session storage and cache. A fresh session has a fresh directory unless a profile is attached and its save behavior is selected.

Cloudflare Browser Run: Cloudflare documents reuse of browser sessions and a Durable Objects integration. Keeping a session alive is different from exporting a portable authenticated profile; design the required state store explicitly.

Sources: hyperbrowser.ai [1] ↗developers.cloudflare.com [2] ↗

Compare the evidence from a run

Hyperbrowser: Hyperbrowser documents rrweb-based web recordings and MP4 video recordings. These capture different artifacts. Enable the appropriate mode before the run and keep the recording associated with the session.

Cloudflare Browser Run: The Browser Run documentation lists live view, human-in-the-loop and session recording as beta features. Check current availability for the selected integration; beta support is not the same as a universal default.

Sources: hyperbrowser.ai [1] ↗developers.cloudflare.com [2] ↗

How to evaluate this choice

Compare the concrete login path. A vault can fill a secret while your code controls the workflow; a managed connection may own more of the login process. Neither should be described as a universal guarantee that every website remains signed in.

  • Identify whether the task uses an existing account or creates an approved new identity.
  • Separate profile restoration from credential fill and connection readiness.
  • Document which component can access credential values and which only handles references.
  • Verify the expected tenant and account after login.
  • Provide a human handoff when the website requires user interaction.

Requirements side by side

RequirementHyperbrowserCloudflare Browser Run
Saved browser stateDocumentedSession reuse / custom state
Credential handlingCredential fillApplication-owned
Website sign-inCredential / profile flowsNot established

Sources: hyperbrowser.ai [1] ↗hyperbrowser.ai [2] ↗hyperbrowser.ai [3] ↗hyperbrowser.ai [4] ↗hyperbrowser.ai [5] ↗hyperbrowser.ai [6] ↗developers.cloudflare.com [7] ↗

Which approach fits?

Choose Hyperbrowser when you need existing Playwright, Puppeteer or Selenium code to use a managed browser with saved state and named credentials.

Hyperbrowser tradeoff: Browser sessions, sandbox execution and action caching are separate surfaces. A cached action sequence is not the same deployment contract as an independently versioned browser Function.

Choose Cloudflare Browser Run when you already deploy Workers and want browser automation within that application's execution and scheduling model.

Cloudflare Browser Run tradeoff: A Worker and a browser session have separate resource and lifecycle constraints. Confirm the chosen browser library and binding path instead of assuming an unchanged local browser script will deploy directly.

Sources: hyperbrowser.ai [1] ↗developers.cloudflare.com [2] ↗

A useful acceptance check

Write a pass/fail result for the real task before running the evaluation. Record the account, configuration and code version next to that result. Repeat failures need an explanation, not an automatically different browser configuration.

When Notte belongs on this shortlist

Hyperbrowser's profiles, credential tools and Action Caching deserve separate evaluation. A recorded action sequence and a deployed Python handler have different maintenance contracts, so decide which one your team will edit after the website changes.

Cloudflare can be an economical architectural choice when Workers and the surrounding scheduling already exist in your application. Notte is worth evaluating when a browser, deployed Python handler and authentication workflow should share a product rather than a Workers composition.

Notte: Vaults substitute credential placeholders in supported browser actions outside the model context. Managed Auth checks requested saved connections before automation. Personas supply an inbox and optional phone number for verification workflows.

Consider this third option when its documented mechanism addresses a requirement left open by the two providers above. A working configuration on either original provider can still be the better choice; compare the task and ownership cost before switching.

Sources: hyperbrowser.ai [1] ↗developers.cloudflare.com [2] ↗docs.notte.cc [3] ↗

Keep comparing

Put the workflow to the test.

Try Notte Read the quickstart ↗