Back to blog
Engineering

Your E2E tests can't get past the login page. Here's why.

Ze AtalayaยทMar 15, 2026ยท6 min read

You write a clean Playwright test. Navigate to the signup page. Fill in email. Fill in password. Click submit. It worked in staging. It worked last week. Today it hangs, or redirects, or silently fails.

You didn't change anything. The app didn't change anything. So what happened?

Anti-bot fingerprinting happened. Services like Cloudflare Turnstile, PerimeterX, Arkose Labs, and DataDome run invisible checks on every visitor. They look at your browser fingerprint โ€” canvas rendering, WebGL hashes, installed fonts, mouse movement patterns, timing between keystrokes. Headless Chrome sticks out immediately.

The default Playwright setup has tells. The navigator.webdriver property is true. The User-Agent string says 'HeadlessChrome.' The window dimensions are wrong. There's no scroll behavior, no mouse jitter. These signals get scored, and if the score is too bot-like, you're blocked. No error. No message. Just a redirect to a captcha or a blank page.

Some teams fight this with stealth plugins โ€” puppeteer-extra-plugin-stealth, patching Chrome flags, randomizing viewports. It works for a while. Then the fingerprinting updates and you're back to debugging invisible failures.

But here's the deeper problem: even if you beat the fingerprint check, modern apps require real identity verification. Phone SMS codes. Email confirmation links. OAuth through Google or GitHub. Your test can't receive a text message. It doesn't have a real inbox.

This is the gap Zantiq fills. Instead of faking browser properties and hoping the bot detector doesn't update, Zantiq gives your tests real identities โ€” actual phone numbers that receive SMS, real email inboxes, real OAuth-capable accounts. The anti-bot system sees a real browser with a real identity. Because it is one.

We're not trying to trick the internet. We're giving tests the same credentials a real user would have. Turns out that's a much more reliable approach than stealth patches.

Get updates

New posts and product updates. No fluff, no spam.