If you're building automation that touches platforms with serious anti-bot systems, User-Agent rotation is what you do in week one. Then you spend the next year learning everything else that fingerprints a browser session.
We hit this curve building HelperX. Our first detection was within hours of going to production — not because of the User-Agent (which we'd randomized cleanly), but because Canvas, WebGL, and AudioContext fingerprints were all identical across our sessions. The platform didn't need to look at the User-Agent. The fingerprint surface gave it away.
This is what actually matters in 2026.
The fingerprint stack
When a modern anti-bot system evaluates a session, it's looking at dozens of signals layered on top of each other. The top of the stack is the User-Agent header. The bottom is the silicon characteristics of the GPU you're rendering with.
