Skip to main content

workload / Checked 2026-10-18

Choosing a browser platform for end-user authentication connections

A customer authorizes your application to use their account on a website through a browser connection. Compare the architecture, account state, costs and acceptance test before choosing a provider.

The job and its deciding constraint

A customer authorizes an application to operate an existing website account. The application must distinguish a usable connection from a browser that merely started.

Connection ownership, readiness and revocation matter separately from the browser session. The browser must wait until the requested connection is usable before taking actions.

A proposed acceptance case

This is an evaluation design, not a claim that this workflow has been executed successfully on every provider.

Part of the testRequired observation
Controlled inputA consenting test user, the intended website account and an application-owned connection mapping.
Pass conditionThe task waits for a usable connection and verifies the expected account before taking an action on the customer's behalf.
Negative caseStart a test with a connection that is not ready. The browser workflow must stop or request the required user step rather than acting in an anonymous or different account.
Evidence to retainConsenting application user, intended account, connection reference and readiness outcome.

Documented mechanisms, side by side

These labels describe product mechanisms. The linked source and the acceptance case determine whether a mechanism meets this workflow's requirement.

RequirementNotteKernelAnchor Browser
Saved browser stateDocumentedDocumentedDocumented
Credential handlingDocumentedVaults (preview)Managed identities
Website sign-inDocumentedDocumentedDocumented

Sources: docs.notte.cc [1] ↗docs.notte.cc [2] ↗kernel.sh [3] ↗kernel.sh [4] ↗docs.anchorbrowser.io [5] ↗docs.anchorbrowser.io [6] ↗

Website login

Notte: Vaults substitute credential placeholders in supported browser actions outside the model context. Managed Auth checks requested saved connections before automation. Personas supply an inbox and optional phone number for verification workflows.

Kernel: Managed Auth handles website login and eligible connection recovery. Vault fill is a separate flow for applications that control navigation and form submission; the reviewed vault documentation labels that surface as preview.

Anchor Browser: Applications define the target website and authentication behavior. Identities attach managed sign-in to sessions. OmniConnect supplies an embeddable flow for end users to sign in from a product.

Sources: docs.notte.cc [1] ↗kernel.sh [2] ↗docs.anchorbrowser.io [3] ↗

What survives a session

Notte: Profiles save cookies, local storage and session storage. Sessions start with fresh state by default. Persisting a profile writes state back when the session ends; a running session can also save its state explicitly.

Kernel: Profiles preserve browser user-data-directory state, including cookies, site data, tabs and preferences. Profile sharing and save behavior need explicit treatment when parallel workers use seeded state.

Anchor Browser: Anchor documents browser profiles alongside an Applications and Identities model. A profile retains state; an identity supplies a managed sign-in connection used with browser sessions.

Sources: docs.notte.cc [1] ↗kernel.sh [2] ↗docs.anchorbrowser.io [3] ↗

Pricing model

Notte: The public usage rates are $0.01 per browser-hour, $0.05 per Function-hour and $10 per GB of managed proxy traffic. Paid plans return their price as usage credits. Price the relevant meters and plan eligibility for the workload.

Kernel: Use the plan and browser configuration in Kernel's pricing documentation. Managed networking, account allowances and app execution make a browser-hour comparison only one part of the decision.

Anchor Browser: Compare the selected browser and task offering using Anchor's current commercial terms. Include network usage and the execution path actually used; a batch API's capacity is not a price quote for that batch.

Sources: notte.cc [1] ↗kernel.sh [2] ↗anchorbrowser.io [3] ↗

What should change the choice?

Notte Managed Auth is relevant when a saved website connection and its readiness check should precede browser execution. A profile and a credential vault remain distinct resources.

Kernel: Kernel's browser-local Apps make execution placement part of the decision. Compare the repeated action path with the proposed Notte controller or Function deployment before concluding that a lifecycle or hourly-rate difference decides the workflow.

Anchor Browser: Anchor's demonstration or prompt-authored Automation Tasks and Notte's Python Functions suit different authoring preferences. Both document website-authentication tooling, so a credible recommendation must address the actual login and workflow-editing path.

Another provider's managed-auth flow can be the better fit when it already supports the application's consent and handoff experience. Confirm supported websites and the actual user path rather than comparing the feature name.

Sources: docs.notte.cc [1] ↗docs.notte.cc [2] ↗notte.cc [3] ↗kernel.sh [4] ↗kernel.sh [5] ↗kernel.sh [6] ↗docs.anchorbrowser.io [7] ↗docs.anchorbrowser.io [8] ↗anchorbrowser.io [9] ↗

Make a bounded pilot

Create an authorized connection, start a session for its application user, verify readiness and inspect the account identity before continuing.

Use the same authorized account, input and final-state check in each configuration. Treat a missing product contract as an open question; do not turn an undocumented capability into an unsupported claim or a successful test result.

  • Inventory the source connection's owner and the actions the user authorized.
  • Create a target connection through an authorized user flow instead of copying provider-owned IDs.
  • Verify readiness, account identity and the user handoff before moving customer tasks.

Keep comparing

Put the workflow to the test.

Try Notte Read the quickstart ↗