sardanioss/httpcloak

Some data may be outdated — see provenance labels.

Go HTTP client with browser-identical TLS/HTTP2 fingerprinting. Bypass bot detection by perfectly mimicking Chrome, Firefox, and Safari at the cryptographic level (JA3/JA4, Akamai fingerprint, header order). Supports HTTP/1.1, HTTP/2, HTTP/3, sessions, cookies, and proxies. observed · 2026-09-28

github.com/sardanioss/httpcloak · homepage · Go · MIT (permissive) observed · 2026-09-28

Health v2 · maintenance only

58/100

Activity 92
Release rhythm 35
Longevity 21

Flags: no_releases

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

gap_med: n/a
age_days: 296
days_rel: n/a
days_push: 48
n_releases_24m: 0

Full methodology

Adoption not part of the score

1319 stars · 95 forks observed · 2026-09-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

httpcloak is a Go HTTP client library that reproduces browser-identical TLS, HTTP/2, and HTTP/3 fingerprints (JA3/JA4, Akamai, header ordering) to bypass bot detection. It ships bindings for Python, Node.js, and .NET via a shared cgo library, with sessions, cookies, and proxy support including MASQUE.

Use cases

scrape sites protected by Cloudflare bot detection
make requests indistinguishable from Chrome at the TLS level
bypass JA3/JA4 fingerprint blocking
send HTTP/3 requests with browser-matching QUIC parameters
rotate browser presets like chrome-latest or firefox in a scraper
use encrypted SNI (ECH) to avoid SNI-based blocking
persist sessions with cookies and TLS tickets across processes

When to choose

you need HTTP/3 or ECH support that curl_cffi lacks
you're blocked by TLS or HTTP/2 fingerprinting on a target site
you want one API across Go, Python, Node.js, and .NET
you need MASQUE proxying or domain fronting

When to avoid

you just need a normal HTTP client with no anti-bot concerns
your use case violates a site's terms of service or local law
you need a pure-Python or pure-JS implementation without native binaries
you require long-term stability guarantees from a mature ecosystem library

Facets

library · maturity active

http-client web-scraping security networking proxy web-development security crawlers developer-tools privacy go python dotnet windows cross-platform tls-fingerprinting ja3 ja4 anti-bot-bypass http2 http3 quic ech browser-impersonation utls curl-cffi-alternative nodejs linux macos

5 sources

readme: https://github.com/sardanioss/httpcloak · fetched 2026-09-28 · 39c349437020
homepage: https://httpcloak.dev · fetched 2026-08-29 · 2ffa164990bd
site_page: https://httpcloak.dev/installation · fetched 2026-08-29 · cfba9709ae73
site_page: https://httpcloak.dev/getting-started · fetched 2026-08-29 · e573756742d8
site_page: https://httpcloak.dev/changelog · fetched 2026-08-29 · f803672a48a0

Member repositories

Repository	Role	Health v2
sardanioss/httpcloak	main	58

For agents

markdown · JSON · MCP: product_card(name="sardanioss/httpcloak")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem