Web agents look great in local demos, but break on live sites: they click empty space when pages shift, overlap badges on complex apps, and freeze silently mid-run. Aliax is a 10-line drop-in that locks onto live elements, keeps visual badges clean, and provides instant visual crash replays. Works alongside Browser-Use, Stagehand, or any custom agent.
drop-in SDK · Browser-Use · Stagehand · LangChain · custom agents
// 1. Zero signup — boots a keyless local sandbox (500 free parses)
import { Aliax, SYSTEM_INSTRUCTIONS } from "aliax";
const aliax = new Aliax();
// 2. CLS-immune perception: 1.5k visual map + Set-of-Mark screenshot
const ctx = await aliax.parseUi(page);
// 3. Your VLM picks an element_id — Aliax resolves & executes live (0 ghost clicks)
const decision = await askLLM(ctx); // {action: "CLICK", element_id: "el_41"}
await aliax.execute(page, decision);No API key required. Automatically caches a free sandbox (500 parses) in ~/.aliax/credentials on first run.
the missing reliability runtime for Browser-Use, Stagehand & custom VLM agents
why web agents break in production
Frameworks like Browser-Use and Stagehand handle planning. But when real websites shift layouts, pop up banners, or stack buttons, agents fail. Aliax makes sure every action actually lands.
Without Aliax
Fragile Execution
With Aliax (drop-in SDK)
Rock-Solid Execution
Wires into your existing stack in < 10 lines
Paste any public URL. A headless Chromium on Cloudflare runs the published Aliax SDK, stamps stable CLS-immune element IDs, and streams exact token counts vs raw HTML and aria-snapshot baselines. Every number measured server-side — nothing mocked, nothing cached.
recently measured · click any to run live
full benchmarkstripe.com/pricing
91%fewer tokens
38 stable IDs · checkout · TLS handshake page
see full trace
linear.app
87%fewer tokens
24 stable IDs · marketing · SPA hydration
see full trace
notion.so
93%fewer tokens
52 stable IDs · dense dashboard · auth wall
see full trace
See token breakdown, element overlay, and scale calculator on the full benchmark page
why developers add Aliax to their stack
Traditional visual agents click blind X,Y coordinates. If an ad loads, a banner appears, or a page re-renders, they click empty space and fail.
Aliax locks onto the live button directly on the page at the exact moment of execution. Popups, banners, layout shifts, and mobile viewports can't throw it off.
Sending huge, messy web pages to Claude on every step costs up to $0.20 per action, slows down reasoning, and blows through your API budget.
Aliax strips out tracking scripts, CSS noise, and hidden wrappers before your model sees the page. Your agent gets a crisp 1,500-token view of only the buttons and inputs that matter.
When a cloud agent crashes at Step 12, you're flying blind. You get a generic timeout and have to dig through thousands of lines of terminal logs.
When an agent gets stuck in a loop, Aliax captures the exact screenshot, the button it tried to click, and the model's thoughts into your dashboard. You see what went wrong in 5 seconds.
npm i aliax · pip install aliax — four primitives compatible with Browser-Use, Stagehand, LangChain, or custom loops. The code below is the whole loop.
parseUiThe Compactor. 100k-token DOM → 1.5k-token semantic map.SYSTEM_INSTRUCTIONSVersioned browser-control prompt, pinned to SDK release.executeThe Steady Hand. CLS-immune execution via data-aliax-id.reportIssueThe Airbag. Stagnation-proven crash capture.while (!done) {
const ctx = await aliax.parseUi(page);
const step = await vlm.decide({
system: SYSTEM_INSTRUCTIONS,
image: ctx.imageBytes,
map: ctx.llmTextBlock(),
});
const result = await aliax.execute(page, step);
// The Airbag: proves stagnation, then ships the visual crash trace to your dashboard
const issue = await aliax.reportIssue(page, {
goal: step.goal,
thoughts: step.thoughts,
lastAttemptedAction: step.action,
failureReason: step.failure_reason,
});
if (issue.status === "ok") break; // captured — screenshot + DOM + thoughts land in your dashboard with a visual replay
}ExecuteResult = { ok, action, element_id?, coords?, execution_tier: "locator"|"jsclick"|"rebind"|"coords"|"blocked_disabled", error? }
IssueResult = { status: "ok"|"rejected"|"error", msg?, capture_id? }
// stagnation is telemetry, not an exception. Neither call ever raises.Watch parse_ui and execute stream in real-time. Credit balance, success rate, peak load — pay-as-you-go, never a surprise bill.
goal submit checkout order
attempt CLICK el_41 (intercepted)
hash[n-2] 6f3a1c
hash[n-1] 6f3a1c
hash[n] 6f3a1c
3× identical → stagnation
› charged 200 credits
› queued · annotator assigned
› jsonl export ready in ~ 8h
works with your existing stack
Standalone: 3 API calls, own the loop. · Integrated: ~10 lines in your framework's per-step hook. Keep your planner, eliminate flakiness.
aliax.parseUi(page) → aliax.execute(page, step)on_step hook · ~10 lines · no planner rewriteEvery row is a production failure mode solved out of the box. Drop Aliax into Browser-Use or Stagehand to add durable IDs, visual crash telemetry, and PII redaction.
← scroll to compare →
› Not a replacement — a supercharger. Aliax wires into Browser-Use, Stagehand, or your custom Playwright agent in < 10 lines and gives it the production features users ask for on GitHub.
No seats. No platform fee. No minimums. We only earn when your agent runs — and every label the SDK rejects is auto-refunded.
worked example
500 parses + 3 escalations = $0.50 + $0.60 = $1.10 for a complete agent run that ends with three labeled failure rows in your export feed.
RLS by default. PII redacted client-side before upload. Cloudflare + Supabase carry SOC 2 Type II today. Aliax-owned Type I targeted Q4 2026.
Supabase Auth (email + Google OAuth) for accounts. Scoped, revocable API keys for SDKs — stored as SHA-256 hashes, shown once at creation.
Row-Level Security on every table · API keys scoped + revocable · clients cannot self-elevate.
We store account email, hashed keys, ledger entries, capture metadata, and the screenshots your SDK uploads. We do not sell, share, or train on customer data.
redactSelectors:[...] / redact_selectors=[...] — blurred client-side before upload. Retention 30d (enterprise: 24h).
Cloudflare Workers (6 regions) · Supabase Postgres (us-east-1) · R2/S3 blobs with AES-256 at rest · TLS terminated at edge, origin mTLS-locked.
Cloudflare + Supabase/AWS carry SOC 2 Type II and ISO 27001 today — inherited evidence available under NDA. Aliax-owned SOC 2 Type I targeted Q4 2026, Type II + ISO 27001 H2 2027.
compliance roadmap
last reviewed · jun 2026
CC6/CC7/CC8 shadow controls
Access reviews, change-management audit log, vendor list — internal evidence pack on request.
SOC 2 Type I
Auditor selected. Policy pack frozen. 3-month observation window starting Sep 2026.
SOC 2 Type II
12-month operating window. Report delivered to enterprise accounts under NDA.
ISO 27001 + DPA template
ISMS rolled out alongside Type II. Standard DPA + sub-processor list public.
Need the inherited Cloudflare + Supabase evidence pack, internal policies, or a pre-filled CAIQ today? We turn it around within 1 business day under NDA.
Short answers, no marketing fluff. If something is missing, mail support@aliax.xyz and we'll add it here.
Still need details? support@aliax.xyz · enterprise + procurement enterprise@aliax.xyz
Zero ghost clicks · Deterministic element binding · 90% fewer tokens
Install the SDK and call new Aliax() — no API key, no account. A free keyless sandbox is provisioned automatically with 500 free parses cached in ~/.aliax/credentials. When you're ready for the dashboard and visual crash telemetry, sign up for 1,000 bonus credits.
$ npm i aliax
·$ pip install aliax
no key needed · 500 free parses · cached locally · instant start