Seven Layers of Defense
Every click is inspected through 7 isolated detection layers. Cryptographic telemetry aggregates a weighted risk score in under 50ms.
CIDR matching against 100+ datacenter cloud ranges (AWS, GCP, Azure, Hetzner). TOR exit-node detection. Bogon and reserved IP quarantine.
User-Agent consistency, Sec-Ch-Ua client hints cross-validation, HTTP/1.x anomalies, automation signatures, and debugger headers.
Hardware-level GPU 2D drawing hash unique to each machine. Identifies SwiftShader, LLVMpipe, and software emulators.
GPU vendor/renderer fingerprint via unmasked WebGL. Detects headless Google server clusters, virtual GPUs, and hardware spoofing.
Oscillator-based audio pipeline fingerprint. Pinpoints missing or simulated audio hardware present in headless server crawlers.
Scrutinizes 15+ Puppeteer, Playwright, and Selenium flags: navigator.webdriver, cdc_* attributes, and chrome.runtime inconsistencies.
High-accuracy MaxMind GeoLite2 lookup cross-validated against client JavaScript time offset. Country-specific allowlists.
Measures local typographic fonts via document.fonts.check(). Headless environments lack standard desktop font configurations.
Granular risk scoring (0-100). Configurable ALLOW and BLOCK thresholds per campaign. Interactive challenges for ambiguous traffic.
Cloakly Pro vs. Basic Cloakers
Why modern media buyers choose deep hardware telemetry over simple IP lookups
| Feature | Basic Cloakers | Cloakly Pro |
|---|---|---|
| IP / ASN Cloud Datacenter Filtering | ✓ | ✓ |
| 100+ Cloud Datacenter Ranges (AWS, GCP) | ✗ | ✓ |
| TOR Exit Node & VPN Detection | ✗ | ✓ |
| User-Agent & Client-Hints Analysis | ✓ | ✓ |
| Hardware Canvas & WebGL GPU Fingerprint | ✗ | ✓ |
| Web AudioContext Pipeline Hash | ✗ | ✓ |
| Puppeteer / Playwright Headless Detection | ✗ | ✓ |
| AES-256-GCM Encrypted Payload | ✗ | ✓ |
| IP-Bound Nonce Anti-Replay System | ✗ | ✓ |
| Per-Campaign Custom Risk Thresholds | ✗ | ✓ |
| Real-Time 17-Column Traffic Telemetry | ✗ | ✓ |
Ready to protect your media spend?
Launch your first shielded campaign in under 2 minutes.