VexSolver

Akamai Bot Manager ACTIVE

Full sensor_data VM implementation. Live on /api/solve — no domain whitelisting required.

NOTICE

Akamai is the hardest vendor we support. Our solver covers most deployments out of the box, but some sites use custom scripts or strict ML scoring that may need a site-specific profile. If your target does not solve, please DM us on Discord with the URL and we will add support for it.

Overview

Akamai BMP collects device telemetry into the sensor_data field and evaluates it against the _abck cookie. VexSolver's Akamai engine implements the full VM in pure Go:

  • › Full opcode table with 100+ instructions
  • › Custom PRNG (Mersenne + rotate)
  • elementSwapping and characterSubstitution
  • › KLc prime factor extraction
  • › Detection hooks (plugin array, WebGL, canvas)
  • › 18+ pre-reversed script profiles (built-in skeleton profile covers most deployments)

Step 1 — Submit

Same async submit + poll contract as every other vendor. Auto-detected from the target URL — no routing config, no domain whitelisting.

curl -X POST https://api.vexsolver.com/api/solve \
  -H "X-API-Key: sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com/"}'

# → { "taskId": "..." }

Step 2 — Poll

curl -G "https://api.vexsolver.com/api/getTaskResult" \
  -H "X-API-Key: sk_live_..." \
  --data-urlencode "taskId=<taskId>"

Poll result

{
  "success": true,
  "cookies": "_abck=3A3ADAAC165E59ECD7FDE89FCC83EB62~0~YAAQ...; bm_sz=FDA1ECF83970863E...; bm_s=YAAQsRMoFzVjXmad...",
  "cookie_map": {
    "_abck": "3A3ADAAC165E59ECD7FDE89FCC83EB62~0~YAAQ...",
    "bm_sz": "FDA1ECF83970863E...",
    "bm_s":  "YAAQsRMoFzVjXmad..."
  },
  "elapsed_ms": 5441,
  "attempts": 1,
  "source": "akamai_solver",
  "vendor": "akamai",
  "target": "https://example.com/"
}

Cookies returned

  • _abck — main bot score cookie (contains ~0~ when valid)
  • bm_sz — session cookie
  • bm_s — handshake success marker
  • bm_sc — protected-page validation score (on strict sites)

Solve times

  • ~50ms on cached targets (warmup keeps popular Akamai sites hot)
  • 5-13s cold solve — real sensor exchange with Akamai (2 init + up to 6 event POSTs, each 1-1.5s network RTT)
  • › Tested against 18+ real-world Akamai Bot Manager deployments across US retail
Optional: bring your own proxy
Send a proxy field alongside url to route the solve through your own IPs (useful for country-locked Akamai sites). See the Solve Endpoint docs for accepted formats.