Methods / L7 / BROWSER
L7 · ApplicationLayer 7Headless BrowserJS ChallengeCaptcha
BROWSER stress test
Drives real headless browser sessions against your web stack to validate that captcha and JavaScript challenges hold up under sustained automated load.
How it works
This method spins up real browser instances that fully render pages, execute JavaScript, and solve interactive challenges the way a genuine client would, then hammers the target with that traffic at scale. Because the requests carry authentic browser behavior, they test whether your captcha gates, JS challenge pages, and bot scoring can tell a real user apart from automation under pressure. Use it to confirm that challenge-based defenses stay effective and that your origin is never reached without passing them.
Parameters
concurrency1-64 sessionsNumber of simultaneous browser sessions driving the target.
rate8-128 rpsRequests issued per browser session per second after rendering.
duration30s-30mTotal length of the sustained test window.
proxy_pool10-5k egress IPsSize of the residential or datacenter egress pool used to distribute sessions.
Run it from the CLI
retro-cli
$ retro run browser --target https://example.com --rps 800 --duration 120
BROWSER FAQ
How is this different from a plain HTTP flood?+
It uses real headless browsers that render pages and run JavaScript, so it can pass challenge gates a raw HTTP request cannot, giving a truer picture of how challenge-based defenses behave.
What does a passing result look like?+
Your challenge or captcha layer keeps absorbing the sessions, origin CPU and response times stay flat, and legitimate users see no degradation throughout the window.