Pointer kinematics: Mouse movement distance, time, and curve count indicate human-like interaction patterns.

Keystroke dynamics: Typing speed, backspace frequency, and character count reveal input automation.

Device signals: Webdriver flag, hardware concurrency, and fingerprint presence are strong automation indicators.

Network hints: Connection type and data-saving mode provide additional context for risk assessment.