The decision
Start with the product contracts for browser control, saved browser state, credential handling, website sign-in. Different labels do not establish different functionality; compare the implementation and conditions behind each one.
Steel is a browser API with managed cloud and self-hosted deployment paths. Its current documentation covers persistent profiles, a credential API, session replay and agent observability.
Tilion appears in BrowserArena's browser infrastructure cohort. Its reviewed public homepage currently offers a waitlist and a contact path; that establishes less implementation detail than a public session API guide.
At a glance
| Requirement | Steel | Tilion |
|---|---|---|
| Browser control | Documented | Arena integration |
| Saved browser state | Documented | Not established |
| Credential handling | Credentials API | Not established |
| Website sign-in | Profile / credential flows | Not established |
| Code execution | External worker | Not established |
| Scheduled execution | External scheduler | Not established |
| Live view | Documented | Not established |
| Recordings / replay | Documented | Not established |
| Deployment choice | Documented | Not established |
Sources: docs.steel.dev [1] ↗docs.steel.dev [2] ↗docs.steel.dev [3] ↗docs.steel.dev [4] ↗docs.steel.dev [5] ↗docs.steel.dev [6] ↗tilion.com [7] ↗
What survives a session
Steel: The Profiles API documents reusable browser context, cookies, extensions, credentials and browser settings. Steel also documents lighter auth-context reuse, which should not be confused with a complete profile.
Tilion: The reviewed public homepage does not establish profile save/restore behavior. Ask for a documented state contract and test the same signed-in workflow across two separate sessions before relying on persistence.
Sources: docs.steel.dev [1] ↗tilion.com [2] ↗
Website login
Steel: Steel's Credentials API stores credentials for users or agents. Its cookbook demonstrates using stored credentials with Playwright, while profiles and auth contexts preserve signed-in browser state.
Tilion: The reviewed public material does not establish managed website authentication, credential fill or verification handling. Treat those as open requirements to validate with the provider, not as absent features.
Sources: docs.steel.dev [1] ↗tilion.com [2] ↗
Where the code runs
Steel: The reviewed browser documentation establishes sessions, profiles and credentials. It does not establish a hosted Python handler with deployment and invocation APIs. An external worker can control a Steel browser; price and operate that worker separately.
Tilion: Public documentation reviewed for this comparison does not establish a deployable Function or app-action contract. Confirm where your automation code runs and how invocation, versioning and logs work before choosing the execution path.
Sources: docs.steel.dev [1] ↗tilion.com [2] ↗
Published browser measurements
These are the latest provider runs in the saved BrowserArena snapshot checked on October 18, 2026. Dates and runner environments can differ. A lifecycle test opens, connects, navigates and releases a browser; the throughput test runs a separate browser action sequence. Neither measures managed authentication or deployed Function reliability.
Use these observations to choose what to test in your application. An account-configuration failure, an incompatible page action and a timed-out navigation require different interpretations. BrowserArena is maintained by Notte and publishes its source and methodology.
| Provider | Lifecycle median | Lifecycle P95 | Actions / second | Run dates |
|---|---|---|---|---|
| Steel | 1496 ms | 1950 ms | 3.54 | 2026-10-18 / 2026-10-17 |
| Tilion | 124 ms | 292 ms | 5.49 | 2026-10-18 / 2026-10-17 |
Sources: browserarena.ai [1] ↗browserarena.ai [2] ↗github.com [3] ↗
Pricing model
Steel: Hosted browser plans and a self-hosted browser have different cost structures. For self-hosting, include the worker, compute, networking, storage and operations rather than assigning the open-source code a zero operating cost.
Tilion: Arena provides an estimated usage rate for its test. The reviewed public homepage does not establish a self-serve production plan, allowances or overage terms. Obtain those terms before quoting a monthly bill.
Sources: docs.steel.dev [1] ↗tilion.com [2] ↗
Capacity and limits
Steel: Steel's pricing and limits page describes hosted account entitlements. For a self-hosted deployment, capacity depends on the resources and orchestration you operate as well as the browser process.
Tilion: Arena's observed test concurrency is a test configuration, not an account entitlement. Obtain the production concurrency and session creation limits for your access tier before sizing a fleet.
Sources: docs.steel.dev [1] ↗tilion.com [2] ↗
Which approach fits?
Choose Steel when you want browser infrastructure that can fit a self-hosted deployment, with profiles and credentials available through browser-focused APIs.
Steel tradeoff: Hosted and self-hosted Steel are different operating choices. A cloud feature's documentation does not establish identical packaging, retention or operational support in a self-hosted installation.
Choose Tilion when you can obtain access and test the product directly, with its current API and commercial terms in hand.
Tilion tradeoff: Arena measurements do not establish public availability or feature completeness. Confirm access, API details and plan terms before planning a production migration.
Sources: docs.steel.dev [1] ↗tilion.com [2] ↗
Check the browser connection
Install playwright-core in your application and provision a session through the provider's documented creation flow. Run this smoke test from the intended controller region with the returned CDP endpoint. It checks connection and navigation, not login, rendering parity or a complete business workflow.
Keep browser connection URLs on your backend. After the test, release the owned session through the provider's API. Product-specific lifecycle APIs and profile identifiers are not portable between providers.
import { chromium } from "playwright-core";
// Provision the owned browser using the provider's documented session API.
// Keep the connection URL in your backend's secret environment.
const endpoint = process.env.BROWSER_CDP_URL;
if (!endpoint) throw new Error("Set BROWSER_CDP_URL for an owned session");
const browser = await chromium.connectOverCDP(endpoint);
try {
const context = browser.contexts()[0] ?? await browser.newContext();
const page = context.pages()[0] ?? await context.newPage();
await page.goto("https://example.com", { waitUntil: "domcontentloaded" });
if ((await page.title()) !== "Example Domain") {
throw new Error("The browser did not reach the expected page");
}
console.log({ connected: true, expectedPage: true });
} finally {
await browser.close();
// Release the owned session with the provider's documented API as well.
// A disconnected socket alone is not a portable session-cleanup contract.
}Sources: playwright.dev ↗
Before you switch
Keep the same target workflow when evaluating both products. Separate infrastructure facts from measurements and test the required account state, action sequence and artifacts. A successful connection test does not establish that a long or authenticated task will complete.
Use the focused guides for Steel and Tilion below when the deciding requirement is pricing, persistence or code execution. Provider-owned resources such as session IDs, profiles and managed connections need a new mapping during migration.
When Notte belongs on this shortlist
Steel's managed and self-hosted choices make infrastructure ownership a concrete deciding factor. Keep that option on the shortlist when operating the browser is intentional; evaluate Notte when owning fewer execution and authentication components is the actual goal.
The reviewed Tilion homepage offers a waitlist and contact route. Arena's tested integration is useful evidence about a run, but a purchasing or migration decision still needs a documented access, state and execution contract; those unknowns must remain visible beside Notte's public docs.
Notte: Create an owned browser session, connect Playwright or Puppeteer over CDP, and stop the session when the work finishes. Browser lifecycle management remains necessary even when the control socket disconnects.
Consider this third option when its documented mechanism addresses a requirement left open by the two providers above. A working configuration on either original provider can still be the better choice; compare the task and ownership cost before switching.
Sources: docs.steel.dev [1] ↗tilion.com [2] ↗docs.notte.cc [3] ↗