Donut Browser — antidetect browser: rating and member reviews

Donut Browser is the only antidetect in our reviews whose app is open source: the code is public on GitHub under the AGPL-3.0 license, and the free plan gives unlimited local profiles with no account at all, for personal use. The part you can't read is the engine. Wayfern, the Chromium fork that sets every fingerprint, ships as a closed binary, and the automation that media buyers would script against it starts at $99 a month.

This review is built on what Donut Browser publishes: its pricing page, documentation, GitHub repository, changelog, about and performance pages, all checked on October 22 and 23, 2026. For how its kernel compares with Dolphin, AdsPower, Octo and GoLogin, see Antidetect Browsers for Media Buyers 2026: Real Differences.

What is Donut Browser, and who makes it?

A desktop antidetect browser for macOS, Windows and Linux. Version 0.35.0 came out on October 21, 2026, with builds for Apple Silicon Macs, 64-bit Windows and Linux in several package formats; Intel Macs aren't supported. There are no mobile apps.

One maintainer, a US company, EU servers. The about page says Donut is "built by one maintainer, in public" and operated by Internet Technology Services LLC, "a company registered in the United States," with services on infrastructure in the European Union. Neither the site nor the terms give the state or an address.

It started as something else. The GitHub repository was created in May 2025 for "a free and open source browser orchestrator." By August 2025 it ran anti-detect profiles on Camoufox, an open-source Firefox build; Wayfern, a Chromium engine, joined in March 2026, and Camoufox was fully dropped in July 2026. The project has about 4,100 stars on GitHub, and almost all of its code comes from 1 developer.

It's small. In May 2026, explaining why the Windows installer wasn't signed, the maintainer wrote that monthly revenue was "around $200, while I spend $400-500 on Donut monthly." Releases still come about every week.

Open app, closed engine. The about page says so plainly: the desktop app is open source and "every line of it is on GitHub," but "one component is not open source: the Wayfern browser engine, a Chromium fork, ships as a binary." The app collects no telemetry, Donut says, and the site uses cookie-free analytics.

How Donut Browser pricing works

Free is genuinely usable, for personal use. The install guide says: "The app is free for personal use. Commercial use is free for a 2-week trial; after that it needs a paid plan." Media buying is commercial use, so plan on Solo at $29. Free gives unlimited local profiles, the Wayfern engine, HTTP and SOCKS5 proxies, WireGuard VPN, cookie and extension management and a profile management API, with no account required.

The limits on Free are in the details. You can only show your own operating system; a Windows fingerprint on a Mac needs Pro. You can't view or edit an existing profile's fingerprint without Pro. And new fingerprints are rate-limited: 8 an hour while you have fewer than 40 profiles, falling to 2 an hour past 120.

Paid plans add cloud, bots and automation:

• Solo, $29 a month: 20 cloud profile backups, a nightly Cookie Bot with 40 hours, a remote MCP server for AI agents and a commercial-use license.
• Pro, $99 a month: the Browser Manipulation API, which launches profiles and drives them over CDP, remote MCP with browser control, fingerprints for other systems, the synchronizer, 50 cloud backups and 200 hours of remote execution and Cookie Bot.
• Team, $199 a month: everything in Pro plus cloud sync for 100 profiles, sharing and 2 seats; each extra seat costs $99.
• Enterprise: custom, with SSO, an audit log and self-hosted infrastructure.

Quarterly billing takes 10% off and yearly 20%: $23, $79 and $159 a month. The terms name card payments through Stripe and cryptocurrency.

The catch for media buyers is the automation price. On Free and Solo the API can create and edit profiles but can't launch them; launching, stopping and CDP control need Pro at $99. Rivals put a working API on far cheaper plans.

Which kernel is Donut Browser running?

Wayfern 155.0.8059.79, according to the version file the app reads, uploaded on October 21, 2026; the performance page still names 154. Chrome 156 came out on October 20, so Wayfern is 1 version behind. Donut publishes no Wayfern changelog, but the upload dates of its builds show the pace:

• 151. Chrome stable: July 28. Build uploaded: August 28. Days after Chrome: 31.
• 154. Chrome stable: September 22. Build uploaded: October 15. Days after Chrome: 23.
• 155. Chrome stable: October 6. Build uploaded: October 21. Days after Chrome: 15.

So 2 to 4 weeks behind, and getting faster. Wayfern updates itself, and the maintainer has refused requests to let users stay on older versions.

Fingerprints are set inside the engine. Donut says Wayfern sets "the fingerprint (user agent, platform, timezone, language, WebGL, canvas, audio, WebRTC and more) in C++, inside the browser." Because Wayfern is closed, that claim can't be checked against code the way the app can.

Big claims, no outside tests. The performance page says Wayfern "gets through" Google reCAPTCHA, Cloudflare, Kasada, DataDome, HUMAN, Akamai and hCaptcha. We found no published analysis by a detection company or researchers to confirm it. Users report problems in the open on GitHub: in October 2026 a fix stopped cross-system profiles from leaking the real operating system in a request header, and earlier a checker flagged incorrect RAM and WebGL values until Wayfern 146.

Automation, AI agents and sync

The local API runs on port 10108 with Python and Node.js SDKs, and Playwright, Puppeteer and Selenium attach to launched profiles over CDP. Wayfern accepts up to 100 automation requests a minute on Pro and Team. An open-source npm package called wayfern makes Playwright's clicks, typing and scrolling human-like.

AI agents get a remote MCP server: for managing profiles from Solo, with browser control and recipes from Pro. A Cookie Bot visits sites on a schedule to build up cookies, on paid plans.

Cloud sync is optional and end-to-end encrypted. It's off by default; when on, Donut says data is encrypted with Argon2id and AES-256-GCM before it leaves your computer. You can also host the sync server yourself. There's a second mode, Regular Sync, where the server can read the data; the Cookie Bot and remote browsers need it. Remote MCP calls also pass through Donut's relay, which the docs say is "not end-to-end encrypted."

Team work

Teams are the expensive part. Team costs $199 a month with 2 seats and adds $99 for each extra seat, so 3 people pay $298 a month, against $28 to $46 at RoxyBrowser, Nullprint or AdsPower. It adds 100 profiles of cloud sync, sharing and roles; an audit log and SSO come only with Enterprise.

Terms, refunds and trust

No refunds. The terms say "all payments are final and non-refundable," for cards and crypto, monthly and yearly, except where the law requires otherwise.

The terms are short and general. They ban fraud, identity theft, malware and harm to others, but say nothing specific about ad platforms, and they name no governing law, only arbitration. They also say you "may not run, deploy, or operate Donut Browser on a server, in a data center, or in any hosting or cloud environment," so plan on running it on your own computers.

Check what you install. macOS builds have been signed and notarized since version 0.14, the maintainer says. The Windows installer for 0.35.0 isn't signed: we checked it on October 23, 2026, and in spring Windows Defender flagged an earlier build, which the maintainer called a false positive. Intel Macs aren't supported.

Signing up and paying

Download it and start; no account is needed for Free. We don't have a referral link or a promo code for Donut Browser: get it from its site or GitHub.

Donut Browser pricing in October 2026

Plans from the pricing page on October 23, 2026, in USD:

• Free. Monthly: $0. Yearly, per month: $0. Local profiles: unlimited. Cloud: none. Automation: profile management API. Seats: 1.
• Solo. Monthly: $29. Yearly, per month: $23. Local profiles: unlimited. Cloud: 20 backups. Automation: remote MCP, Cookie Bot 40 hours. Seats: 1.
• Pro. Monthly: $99. Yearly, per month: $79. Local profiles: unlimited. Cloud: 50 backups. Automation: Browser Manipulation API, synchronizer, 200 hours. Seats: 1.
• Team. Monthly: $199. Yearly, per month: $159. Local profiles: unlimited. Cloud: 100 profiles synced. Automation: as Pro. Seats: 2, plus $99 each.
• Enterprise. Monthly: custom. Yearly, per month: custom. Local profiles: unlimited. Cloud: self-hosted. Automation: as Team, SSO, audit log. Seats: custom.

Donut Browser vs other antidetect browsers

How it compares, October 22, 2026:

• Donut Browser. 100 profiles, monthly: $0 personal, $29 for work. API that launches profiles: from $99 (Pro). 3 people: $298 (Team). On the free plan: unlimited local profiles, no account. Chromium kernel on October 22: Wayfern 154.
• Kameleo. 100 profiles, monthly: 59 EUR. API that launches profiles: every plan, including Free. 3 people: 59 EUR, seats free. On the free plan: unlimited local profiles, 2 at once, 300 minutes. Chromium kernel on October 22: 156.
• Nullprint. 100 profiles, monthly: $29, 2 seats. API that launches profiles: every plan. 3 people: $32. On the free plan: 5 profiles, API and MCP. Chromium kernel on October 22: 154.
• ixBrowser. 100 profiles, monthly: $0 to $3.99. API that launches profiles: from $3.99. 3 people: $0 to $3.99. On the free plan: unlimited profiles, 10 new a day. Chromium kernel on October 22: 151.
• RoxyBrowser. 100 profiles, monthly: $28. API that launches profiles: every plan. 3 people: $28, plus $10 once. On the free plan: 2 profiles, API. Chromium kernel on October 22: 155.

Donut vs Kameleo is the closest comparison for developers: both have unlimited local profiles and put automation first. Kameleo runs Chrome 156 and includes its API even on its free plan; Donut's app is open source, but its launch API costs $99. See our Kameleo review.

Donut vs Nullprint and ixBrowser: both put a working API on plans from $29 or even $3.99, which Donut doesn't. Our Nullprint review and ixBrowser review have the details. For the whole field, see the best free antidetect browsers.

If you sign up for one of the others, here are our referral links: ixBrowser and RoxyBrowser.