The three-way buying decision
This shortlist starts with Cloudflare Browser Run and AWS AgentCore Browser, then includes Notte as a third implementation path for saved login reuse. A recurring job returns to the same website account in a later browser session. A stored profile must restore the intended user without assuming the website login is still valid.
Saved state can expire or be invalidated by the website. A profile save response establishes that data was stored, not that the next session is authenticated.
A proposed acceptance case
A recurring job returns to the same website account in a later browser session. A stored profile must restore the intended user without assuming the website login is still valid.
This is an evaluation design, not a claim that this workflow has been executed successfully on every provider.
| Part of the test | Required observation |
|---|---|
| Controlled input | An authorized account, its expected identity marker and two separately created browser sessions. |
| Pass condition | The second session reaches a protected page as the expected account after loading the target provider's saved-state resource. |
| Negative case | Invalidate the test website login between sessions. The workflow must detect the expired account state before performing the task. |
| Evidence to retain | Expected account, source and target state references, second-session identity and expired-login result. |
Documented mechanisms, side by side
These labels describe product mechanisms. The linked source and the acceptance case determine whether a mechanism meets this workflow's requirement.
| Requirement | Cloudflare Browser Run | AWS AgentCore Browser | Notte |
|---|---|---|---|
| Saved browser state | Session reuse / custom state | Explicit state design | Documented |
| Credential handling | Application-owned | AWS / application composition | Documented |
| Website sign-in | Not established | Separate identity design | Documented |
Sources: developers.cloudflare.com [1] ↗docs.aws.amazon.com [2] ↗docs.notte.cc [3] ↗docs.notte.cc [4] ↗
What survives a session
Cloudflare Browser Run: Cloudflare documents reuse of browser sessions and a Durable Objects integration. Keeping a session alive is different from exporting a portable authenticated profile; design the required state store explicitly.
AWS AgentCore Browser: The Browser Tool documentation describes ephemeral sessions that reset after use. State that must outlive a session needs an explicit storage or authentication design rather than an assumption of permanent browser state.
Notte: Profiles save cookies, local storage and session storage. Sessions start with fresh state by default. Persisting a profile writes state back when the session ends; a running session can also save its state explicitly.
Sources: developers.cloudflare.com [1] ↗docs.aws.amazon.com [2] ↗docs.notte.cc [3] ↗
Website login
Cloudflare Browser Run: Use browser code to implement the website's sign-in flow and retain the necessary session state. The reviewed overview does not establish a managed website connection that checks sign-in readiness before a workflow starts.
AWS AgentCore Browser: AWS credentials and IAM control access to the Browser Tool. Website login remains a separate concern: the identity used to authorize an AWS API call does not automatically sign the browser in to a third-party application.
Notte: Vaults substitute credential placeholders in supported browser actions outside the model context. Managed Auth checks requested saved connections before automation. Personas supply an inbox and optional phone number for verification workflows.
Sources: developers.cloudflare.com [1] ↗docs.aws.amazon.com [2] ↗docs.notte.cc [3] ↗
Pricing model
Cloudflare Browser Run: Price browser usage and the Worker execution components required by the workload. The Browser Run pricing page, rather than a single browser-hour estimate, defines included allowances and applicable limits.
AWS AgentCore Browser: A complete AWS workflow may include browser use, the controlling compute service, storage and other metered services. Price the selected architecture and region instead of treating a browser benchmark rate as the final invoice.
Notte: The public usage rates are $0.01 per browser-hour, $0.05 per Function-hour and $10 per GB of managed proxy traffic. Paid plans return their price as usage credits. Price the relevant meters and plan eligibility for the workload.
Sources: developers.cloudflare.com [1] ↗aws.amazon.com [2] ↗notte.cc [3] ↗
What should change the choice?
Notte profiles are relevant for restoring cookies and web storage. Add its managed connection flow when the requirement includes login readiness rather than state restoration alone.
Cloudflare Browser Run: Cloudflare can be an economical architectural choice when Workers and the surrounding scheduling already exist in your application. Notte is worth evaluating when a browser, deployed Python handler and authentication workflow should share a product rather than a Workers composition.
AWS AgentCore Browser: AgentCore Browser's AWS integration can matter more than moving a browser endpoint. Retain AWS identity and observability requirements in the evaluation, and separately account for the code runner and website login before comparing Notte's integrated workflow.
Keep a source profile or context integration when its documented storage behavior is essential and already verified. State should move only through a supported export/import contract or a fresh authorized login.
Sources: developers.cloudflare.com [1] ↗developers.cloudflare.com [2] ↗docs.aws.amazon.com [3] ↗aws.amazon.com [4] ↗docs.notte.cc [5] ↗docs.notte.cc [6] ↗notte.cc [7] ↗
How to remove an option from the shortlist
For this workflow, require the following evidence from Cloudflare Browser Run, AWS AgentCore Browser and Notte: Expected account, source and target state references, second-session identity and expired-login result.
Remove a proposed configuration when its documented mechanism or a controlled pilot cannot meet the pass condition. Keep an undocumented feature as an unresolved question instead of inventing an equivalence. Do not select a provider solely because it appears in this shortlist.
- The second session reaches a protected page as the expected account after loading the target provider's saved-state resource.
- Invalidate the test website login between sessions. The workflow must detect the expired account state before performing the task.
Sources: developers.cloudflare.com [1] ↗docs.aws.amazon.com [2] ↗docs.notte.cc [3] ↗
Make a bounded pilot
Save state from an authorized login, start a separate session and verify the exact account on a protected page before running the task.
Use the same authorized account, input and final-state check in each configuration. Treat a missing product contract as an open question; do not turn an undocumented capability into an unsupported claim or a successful test result.
- Record the source account-to-profile mapping without treating its identifier as portable.
- Establish an authorized login in a target session and save it using the target profile contract.
- Verify the account in a second target session and in an expired-login test before changing recurring jobs.