Empty Device List

Detection approach

navigator.mediaDevices.enumerateDevices() returned zero devices, but the User-Agent claims a desktop operating system. Genuine desktop browsers expose at least a default audio input. An empty list indicates a headless or heavily sandboxed automation container.

How this helps detect bots

This signal is assessed with other independent session, browser, and network evidence. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.

Legitimate traffic to consider

Legit users on desktop systems without mic/camera attached, or blocking device access.