Bypass Incapsula,
DataDome & Kasada,
without a browser.
Send us the challenge, get a valid token back - reese84, UTMVC, DataDome or Kasada - from a single API call. No headless browser to boot, no browser farm to babysit, no fingerprint to get flagged.
Join the Discord 0 online · 0 membersWhat you
can solve.
Each protection is completely reverse-engineered. We do not solve challenges using a sandbox or browser farm.
Incapsula / Imperva
Reese84 + UTMVC challenges
- · reese84 sensor
- · utmvc cookie
- · dynamic script handling
DataDome
Interstitial, Captcha, tags.js
- · tags payload
- · slider captcha
- · interstitial
Kasada
KPSDK payload & proof of work
- · ips.js sensor
- · x-kpsdk-* headers
- · unmetered proof of work
Another target?
Need a site or protection we don't list yet? Request it from the dashboard and we'll look at adding it.
Request a target →A request,
not a browser.
We don't execute any of the original challenge Javascript. We have ported all the challenge code to run natively, without a browser environment. This makes bypassing Incapsula, DataDome and Kasada extremely fast
- - A headless browser booted for every solve
- - Hundreds of milliseconds before the page is even ready
- - Heavy bandwidth and CPU once you're at scale
- - Browser fingerprints that get flagged and blocked
- - Fragile infrastructure to babysit on every release
- + One HTTP POST - the token comes back in milliseconds
- + No browser to boot, so no per-solve startup tax
- + A fraction of the bandwidth of loading the full page
- + No browser fingerprint for the site to detect
- + Nothing to host or maintain - it's just an endpoint
Send the challenge,
get a token.
You POST the page URL, the protection's script and the user-agent you'll use. We return the solved token. You attach it to your own request and carry on - with your own proxies and session, exactly as you do today.
import requests
resp = requests.post(
"https://incap.antibotapi.com/incapsula/reese84",
headers={"x-api-key": "dk_live_..."},
json={
"page_url": "https://www.example.com/",
"incapsula_url": "https://www.example.com/_Incapsula_Resource?...",
"user_agent": "Mozilla/5.0 ...",
"script_b64": "<base64-challenge-script>",
},
)
payload = resp.json()["reese84Payload"]
# post `payload` to the site, keep the cookie it sets, carry onIt's plain HTTP, so it works from any language - Python, Node, Go, C# - and drops straight into your projects.
Create an account
Sign up, pick a plan or go pay-as-you-go. Your API key is generated instantly.
Try the Playground
Run a full solve against a live protected site from the dashboard - no code needed.
Wire it into your stack
Drop the request into your bot or scraper, submit the token, and you're through the wall.
Per protection,
or per solve.
Each protection is priced on its own - monthly plans for steady volume, pay-as-you-go for everything else. Every account starts with a free trial. Prices exclude VAT.
reese84 sensor & ___utmvc cookie. PAYG overflow at £2.50 per 1K solves once a plan runs out. How the Incapsula bypass works →
Choose a planSlider captcha, interstitial & tags. PAYG overflow at £2.50 per 1K solves once a plan runs out. How the DataDome bypass works →
Choose a planKPSDK payloads; the proof of work every protected request needs is unlimited and never metered. Invite-only beta, 10,000 free solves to start. How the Kasada bypass works →
Request an invite- +No commitment - top up a wallet
- +Spend per solve on Incapsula or DataDome
- +Auto-overflow when a plan runs out
- +No expiry limit on wallet balance
Run a group?
Earn on every member.
Share your link, and members sign up, get auto-approved, and manage their own keys and billing. You earn 5% commission on everything they spend - with nothing to administer.
Apply to the partner program →Common
questions.
01 What do I send, and what do I get back? +
You POST the page URL, the protection's script (base64), and the user-agent you intend to use. We return the solved token - for Incapsula that's the reese84 payload or UTMVC cookie; for DataDome, the device/cookie payload; for Kasada, the x-kpsdk headers and the /tl payload. You attach it to your own request.
02 Do I need a headless browser? +
No. It's a pure HTTP API - no Puppeteer, Playwright or Selenium required to get a token. You only need an HTTP client.
03 Which languages and tools work? +
Anything that can send an HTTP request - Python, Node, Go, C#, Rust, and so on. It drops straight into your projects; you call the endpoint instead of solving in-browser.
04 Can I use my own proxies and sessions? +
Yes. We generate the token; you make the actual request to the target site. Keep using your own proxies, cookies and sessions exactly as you do now - just pass us the matching user-agent so the token lines up.
05 What sites are supported? +
Sites protected by Incapsula (Imperva), DataDome and Kasada, which is in invite-only beta. If a specific site isn't whitelisted yet, request it from your dashboard and we'll look at adding it.
06 How does pricing work? +
Each protection is priced separately. Incapsula runs from £85/mo (75K solves) up to £1,100/mo (1M solves); DataDome from £30/mo (20K solves) up to £1,500/mo (1M solves); Kasada from £45/mo (25K solves) up to £1,000/mo (1M solves), with its proof of work never metered. Prefer no commitment? On Incapsula and DataDome you can pay as you go from a wallet at £2.50 per 1,000 solves (£0.0025 a solve) - which also kicks in as overflow when a plan's quota runs out, so a job never stalls mid-run. Kasada is a monthly plan only while it is in beta.
07 Is there a partner program? +
Yes - group owners earn 5% on every payment their members make, and members who join through your link are auto-approved. There's nothing to manage on your end.
08 How do I get into the Kasada beta? +
Kasada is invite only while it is in beta. Apply from the beta page, tell us what you are pointing it at, and approved accounts start with 10,000 free solves - proof of work does not count against them.
Drop the
browser.
Start a free trial, grab a key, and pull your first token in a few minutes. No card required to begin.