Donut Browser
Donut
Get Started

Open source antidetect browser

Donut Browser is an open source antidetect browser. The app, its local REST API, MCP tooling and sync server are AGPL-3.0 on GitHub. It sends zero telemetry and needs no account. One part is closed: the Wayfern Chromium engine is proprietary.

Download Donut Browser Read the AGPL-3.0 licence
zhom/donutbrowser LICENSE AGPL-3.0
  • Profile manager and app AGPL-3.0
  • Local REST API AGPL-3.0
  • MCP tooling AGPL-3.0
  • Sync server, self-hostable AGPL-3.0
  • Wayfern Chromium engine Proprietary
Four parts you can read, build and change. The engine is closed, so it is shown sealed instead of left out.

What does open source change in an antidetect browser?

It does not make you harder to detect. It turns a few promises into things you can check.

  • Zero telemetry is testable

    Record what the app sends, then read the code that would send it. Two checks that agree beat a privacy policy.

  • The tool that holds your logins is readable

    An antidetect browser holds every profile, cookie and session you run. With the source published, you can read that code instead of trusting it.

  • It outlives the company

    Cloned AGPL-3.0 source cannot be taken back, and your profiles are folders on your own disk.

Detection depends on the fingerprint a profile shows and the network it uses. Measure both with the browser fingerprint tool and the bot detection test. Both work on any browser.

How do you verify an open source antidetect browser?

Four checks, one afternoon, tools you already have. Run them on any browser that claims a licence, this one included.

  1. 1Read the licence

    Open LICENSE in the repository root. Here it is AGPL-3.0. Without a licence file, you can look at the code but not rely on it.

  2. 2Clone and build

    The build instructions live with the code. Source you cannot build is reading material, not proof.

  3. 3Compare the binaries

    Hash your build and the download, then compare. A closed binary gives you nothing to compare against.

  4. 4Watch the network

    Run the app behind a proxy you control and log each connection. Then check that the code agrees.

A byte-identical build is not guaranteed. Compilers, timestamps and paths can change a hash, so treat a mismatch as a question, not as proof of tampering.

The local API is documented, not reverse-engineered. See the quickstart and the REST API reference.

Where are closed-source antidetect browsers ahead?

In scope, not in openness. Competitor details come from their own pages, read on 6 August 2026.

You cannot audit the engine
Fingerprint spoofing runs inside the Wayfern engine at the C++ layer, and that engine is proprietary. An audit covers the app around it.
Bundled proxies
GoLogin lists residential proxy traffic as a plan benefit. Donut Browser sells no proxies: you bring HTTP, HTTPS, SOCKS4, SOCKS5 or WireGuard from your own provider.
Mobile apps
GoLogin lists an Android app. Donut Browser runs on macOS, Windows and Linux only.
Chromium only
Donut Browser ships one engine, the Chromium-based Wayfern. If you need Firefox-engine profiles, use a different tool.
Local-first is less portable
Profiles live on your disk. Using them on a second machine takes paid sync or your own sync server.

Is there a free open source antidetect browser?

Yes. The free tier is not a trial: no time limit, no card, no account. Paid plans cover hosted and cross-machine features.

Free, no account

  • Unlimited local profiles
  • Per-profile HTTP, HTTPS, SOCKS4 and SOCKS5 proxies
  • Per-profile WireGuard VPN
  • The Wayfern browser engine
  • Local REST API
  • The full AGPL-3.0 source

Paid, from $29 a month

  • Fingerprints for other operating systems
  • Browser control API, remote MCP and automation throughput
  • Cloud profile backups and sync
  • Team sharing, which is not open source
  • A commercial licence without the AGPL duty, on Pro and above

Current prices are on the pricing page. The free tier does not expire.

Frequently asked questions

Is Donut Browser open source?

Mostly. The app is AGPL-3.0: the profile manager, local REST API, MCP tooling and sync server. The Wayfern Chromium engine it runs on is proprietary.

Where is the antidetect browser source code?

At github.com/zhom/donutbrowser, with the LICENSE file in the root. The Playwright humanizer is a separate MIT project at github.com/donutbrowser/wayfern-humanizer.

Is there a free open source antidetect browser?

Yes. The Donut Browser free tier needs no account or card. It includes unlimited local profiles, per-profile proxies and WireGuard, and the local REST API. Paid plans start at $29 a month.

Can I use it commercially?

Yes. AGPL-3.0 allows commercial use. If you share a modified version, including over a network, you must publish your changes. Pro and above include a commercial licence without that duty. No licence lets you resell Donut Browser as your own product or service.

Does open source make an antidetect browser harder to detect?

No. Sites see the fingerprint and the network, not the licence. Open source lets you check how the app works and whether it phones home.

Which other antidetect browsers are open source?

On the pages read on 6 August 2026, GoLogin, Multilogin, Dolphin Anty and AdsPower named no open source licence and no public repository. Run the four checks on this page against any browser you consider.

Should you choose an open source antidetect browser?

If one program holds every account you run, the ability to check it matters more than a feature you use twice. If you need bundled proxies or a phone app, a closed product fits better.

Download Donut Browser

Keep reading