Bot Arena
Selector resistance · Level 6 View on report ↗

Image-only labels

Email and Password labels are rendered as images. No DOM text exists.

What's measured on this page
- The form has real <input> elements — but the labels for them are rendered as SVG images, not as text. There is no <label>, no aria-label, no placeholder, no title. - The image alt attributes are empty, so screen readers and accessibility-tree-based locators get nothing either. - The visible "Email", "Password", and "Sign in" strings are pixels — exactly like a CAPTCHA prompt where the question text is itself drawn as an image to defeat scraping. - A test relying on page.getByLabel, getByText, or getByRole('textbox', { name }) finds nothing semantic to grab. - A vision-based automation tool reads "Email" off the image via OCR and clicks the input directly below it.

No DOM text exists on this card. Try Ctrl+F searching for "Email".

Production apps using this technique

  • Bank PIN keypads — Many banks render the numeric PIN entry pad entirely as images, with shuffled digit positions per session, specifically to defeat keyloggers and DOM-based scrapers.
    Market Standard on most BR + IN retail-bank login flows Users Hundreds of millions of online banking customers (Itaú, Bradesco, HDFC, SBI, ICICI…)
  • Older banking and brokerage portals — Banks across Brazil, India, and parts of EU traditionally render account-number labels and field prompts as inline images to make automation harder.
    Market Common in Tier-1 retail banking back-offices Users Tens of millions of brokerage and treasury-portal users
  • Anti-scraping news and listings sites — Some pricing pages and classifieds (real-estate, used-car, recruitment) render key text as images so the prices/details cannot be scraped without OCR.
    Market Common pattern on regional classifieds + paywalled news Users Reaches millions of property/auto/jobs visitors monthly
  • Legacy enterprise CRM and ERP screens — Older Oracle Forms / PeopleSoft / Siebel webifications used static label images bundled with the page. Each release ships a new image set.
    Market Oracle Apps still ~12% of ERP market; large legacy install base Users Oracle EBS ~70K customers; PeopleSoft ~6K; Siebel ~4K — each touches large internal user bases
  • CAPTCHA prompt text itself — Many CAPTCHA implementations render even the instruction ("Click on the bicycles") as an image, not as DOM text, to prevent scripts from reading the prompt.
    Market reCAPTCHA ~60% of CAPTCHA market; hCaptcha + Turnstile growing fast Users reCAPTCHA on 13M+ websites; hCaptcha protects ~250K+ sites

Figures are approximate / company-disclosed (~2024–2025). Sources: company filings, industry reports (Gartner, IDC, BuiltWith, npm stats), and public DAU disclosures.