---
title: "Open Source Antidetect Browser | Donut Browser"
description: "Donut Browser is an open source antidetect browser: the app is AGPL-3.0 on GitHub, with zero telemetry and no account. The Wayfern engine is proprietary."
url: "https://donutbrowser.com/open-source-antidetect-browser/"
---

1. [Home](https://donutbrowser.com/)

2. Open source antidetect browser

# Open source antidetect browser

Donut Browser is an open source antidetect browser. The app, its local REST API, MCP tooling and sync server are AGPL-3.0 on GitHub. It sends zero telemetry and needs no account. One part is closed: the Wayfern Chromium engine is proprietary.

[Download Donut Browser](https://donutbrowser.com/#download) [Read the AGPL-3.0 licence](https://github.com/zhom/donutbrowser/blob/main/LICENSE)

zhom/donutbrowser LICENSE AGPL-3.0

- Profile manager and app

AGPL-3.0

- Local REST API

AGPL-3.0

- MCP tooling

AGPL-3.0

- Sync server, self-hostable

AGPL-3.0

- Wayfern Chromium engine

Proprietary

Four parts you can read, build and change. The engine is closed, so it is shown sealed instead of left out.

## What does open source change in an antidetect browser?

It does not make you harder to detect. It turns a few promises into things you can check.

### Zero telemetry is testable

Record what the app sends, then read the code that would send it. Two checks that agree beat a privacy policy.

### The tool that holds your logins is readable

An antidetect browser holds every profile, cookie and session you run. With the source published, you can read that code instead of trusting it.

### It outlives the company

Cloned AGPL-3.0 source cannot be taken back, and your profiles are folders on your own disk.

Detection depends on the fingerprint a profile shows and the network it uses. Measure both with the [browser fingerprint tool](https://donutbrowser.com/tools/browser-fingerprint) and the [bot detection test](https://donutbrowser.com/tools/bot-detection). Both work on any browser.

## How do you verify an open source antidetect browser?

Four checks, one afternoon, tools you already have. Run them on any browser that claims a licence, this one included.

### 1 Read the licence

Open LICENSE in the repository root. Here it is AGPL-3.0. Without a licence file, you can look at the code but not rely on it.

### 2 Clone and build

The build instructions live with the code. Source you cannot build is reading material, not proof.

### 3 Compare the binaries

Hash your build and the download, then compare. A closed binary gives you nothing to compare against.

### 4 Watch the network

Run the app behind a proxy you control and log each connection. Then check that the code agrees.

A byte-identical build is not guaranteed. Compilers, timestamps and paths can change a hash, so treat a mismatch as a question, not as proof of tampering.

The local API is documented, not reverse-engineered. See the [quickstart](https://donutbrowser.com/docs/quickstart) and the [REST API reference](https://donutbrowser.com/docs/rest-api).

## Where are closed-source antidetect browsers ahead?

In scope, not in openness. Competitor details come from their own pages, read on 6 August 2026.

You cannot audit the engine

Fingerprint spoofing runs inside the Wayfern engine at the C++ layer, and that engine is proprietary. An audit covers the app around it.

Bundled proxies

GoLogin lists residential proxy traffic as a plan benefit. Donut Browser sells no proxies: you bring HTTP, HTTPS, SOCKS4, SOCKS5 or WireGuard from your own provider.

Mobile apps

GoLogin lists an Android app. Donut Browser runs on macOS, Windows and Linux only.

Chromium only

Donut Browser ships one engine, the Chromium-based Wayfern. If you need Firefox-engine profiles, use a different tool.

Local-first is less portable

Profiles live on your disk. Using them on a second machine takes paid sync or your own sync server.

## Is there a free open source antidetect browser?

Yes. The free tier is not a trial: no time limit, no card, no account. Paid plans cover hosted and cross-machine features.

### Free, no account

- Unlimited local profiles

- Per-profile HTTP, HTTPS, SOCKS4 and SOCKS5 proxies

- Per-profile WireGuard VPN

- The Wayfern browser engine

- Local REST API

- The full AGPL-3.0 source

### Paid, from $29 a month

- Fingerprints for other operating systems

- Browser control API, remote MCP and automation throughput

- Cloud profile backups and sync

- Team sharing, which is not open source

- A commercial licence without the AGPL duty, on Pro and above

Current prices are on the [pricing page](https://donutbrowser.com/pricing). The free tier does not expire.

## Frequently asked questions

Is Donut Browser open source?

Mostly. The app is AGPL-3.0: the profile manager, local REST API, MCP tooling and sync server. The Wayfern Chromium engine it runs on is proprietary.

Where is the antidetect browser source code?

At github.com/zhom/donutbrowser, with the LICENSE file in the root. The Playwright humanizer is a separate MIT project at github.com/donutbrowser/wayfern-humanizer.

Is there a free open source antidetect browser?

Yes. The Donut Browser free tier needs no account or card. It includes unlimited local profiles, per-profile proxies and WireGuard, and the local REST API. Paid plans start at $29 a month.

Can I use it commercially?

Yes. AGPL-3.0 allows commercial use. If you share a modified version, including over a network, you must publish your changes. Pro and above include a commercial licence without that duty. No licence lets you resell Donut Browser as your own product or service.

Does open source make an antidetect browser harder to detect?

No. Sites see the fingerprint and the network, not the licence. Open source lets you check how the app works and whether it phones home.

Which other antidetect browsers are open source?

On the pages read on 6 August 2026, GoLogin, Multilogin, Dolphin Anty and AdsPower named no open source licence and no public repository. Run the four checks on this page against any browser you consider.

## Should you choose an open source antidetect browser?

If one program holds every account you run, the ability to check it matters more than a feature you use twice. If you need bundled proxies or a phone app, a closed product fits better.

[Download Donut Browser](https://donutbrowser.com/#download)

## Keep reading

- Source on GitHub

The AGPL-3.0 repository.

- Documentation

Everything the app exposes to your code.

- REST API reference

Every endpoint on 127.0.0.1:10108.

- Self-host sync

Run the open source sync server yourself.

- Fingerprint tools

Free tests for any browser.

- Pricing

What the free tier covers and what paid adds.

- Multi-account

Isolated profiles that never meet.

- Automation

Drive profiles with Playwright and the local API.
