Permission Lie

Detection approach

Chrome notification permission inconsistency detected. The Notification API reports 'denied', but the permissions.query API reports 'prompt'. This is a known fingerprint of Headless Chrome.

How this helps detect bots

This signal is assessed with other independent session, browser, and network evidence. A single anomaly is a lead, not a verdict; corroborating anomalies make automated traffic more likely.

Legitimate traffic to consider

Brave Browser users or users running custom privacy configurations that block permission querying.