Bot Arena
Selector resistance · Level 6 View on report ↗

Image-only labels

Email and Password labels are rendered as images. No DOM text exists.

What's measured on this page
- The form has real <input> elements — but the labels for them are rendered as SVG images, not as text. There is no <label>, no aria-label, no placeholder, no title. - The image alt attributes are empty, so screen readers and accessibility-tree-based locators get nothing either. - The visible "Email", "Password", and "Sign in" strings are pixels — exactly like a CAPTCHA prompt where the question text is itself drawn as an image to defeat scraping. - A test relying on page.getByLabel, getByText, or getByRole('textbox', { name }) finds nothing semantic to grab. - A vision-based automation tool reads "Email" off the image via OCR and clicks the input directly below it.

No DOM text exists on this card. Try Ctrl+F searching for "Email".

Production apps using this technique

  • Bank PIN keypads Many banks render the numeric PIN entry pad entirely as images, with shuffled digit positions per session, specifically to defeat keyloggers and DOM-based scrapers.
    Market Standard on most BR + IN retail-bank login flows Users Hundreds of millions of online banking customers (Itaú, Bradesco, HDFC, SBI, ICICI…)
  • Older banking and brokerage portals Banks across Brazil, India, and parts of EU traditionally render account-number labels and field prompts as inline images to make automation harder.
    Market Common in Tier-1 retail banking back-offices Users Tens of millions of brokerage and treasury-portal users
  • Anti-scraping news and listings sites Some pricing pages and classifieds (real-estate, used-car, recruitment) render key text as images so the prices/details cannot be scraped without OCR.
    Market Common pattern on regional classifieds + paywalled news Users Reaches millions of property/auto/jobs visitors monthly
  • Legacy enterprise CRM and ERP screens Older Oracle Forms / PeopleSoft / Siebel webifications used static label images bundled with the page. Each release ships a new image set.
    Market Oracle Apps still ~12% of ERP market; large legacy install base Users Oracle EBS ~70K customers; PeopleSoft ~6K; Siebel ~4K — each touches large internal user bases
  • CAPTCHA prompt text itself Many CAPTCHA implementations render even the instruction ("Click on the bicycles") as an image, not as DOM text, to prevent scripts from reading the prompt.
    Market reCAPTCHA ~60% of CAPTCHA market; hCaptcha + Turnstile growing fast Users reCAPTCHA on 13M+ websites; hCaptcha protects ~250K+ sites

Figures are approximate / company-disclosed (~2024–2025). Sources: company filings, industry reports (Gartner, IDC, BuiltWith, npm stats), and public DAU disclosures.