diff --git a/Makefile b/Makefile
index eb8a2757188..bd94d475925 100644
--- a/Makefile
+++ b/Makefile
@@ -320,6 +320,23 @@ cscli:  ## Build cscli
 crowdsec:  ## Build crowdsec
 	@$(MAKE) -C $(CROWDSEC_FOLDER) build $(MAKE_FLAGS)
 
+# Regenerate the WAF challenge JS artifacts: the bundled fpscanner source
+# (fpscanner/bundle.js), the obfuscator runtime (obfuscate/index.wasm.gz),
+# and the build-time pre-obfuscated initial bundle (initial_bundle.js.gz).
+# These are committed to the tree so a normal `make build` does NOT rebuild
+# them — only run this target after intentionally changing challenge.js,
+# fpscanner sources, the obfuscator wrapper, or the dynamic-module template.
+#
+# Requires `javy` (https://github.com/bytecodealliance/javy/releases) on
+# PATH. The full obfuscation pass is slow (~1 minute) because it runs
+# javascript-obfuscator's "high-obfuscation" preset over the full bundle;
+# this is the cost we are paying once at generate time so the runtime
+# doesn't pay it on every startup.
+.PHONY: generate-challenge-js
+generate-challenge-js:  ## Regenerate WAF challenge JS bundles (requires javy on PATH)
+	@command -v javy >/dev/null 2>&1 || (echo "Error: javy is not installed. Download it from https://github.com/bytecodealliance/javy/releases and put it on PATH." && exit 1)
+	$(GO) generate ./pkg/appsec/challenge/js/...
+
 testenv:
 ifeq ($(TEST_LOCAL_ONLY),)
 	@echo 'NOTE: You need to run "make localstack" in a separate shell, "make localstack-stop" to terminate it; or define the envvar TEST_LOCAL_ONLY to some value.'
diff --git a/pkg/acquisition/modules/appsec/config.go b/pkg/acquisition/modules/appsec/config.go
index ac3b20a327e..76dffc57547 100644
--- a/pkg/acquisition/modules/appsec/config.go
+++ b/pkg/acquisition/modules/appsec/config.go
@@ -43,6 +43,31 @@ type Configuration struct {
 	AppsecConfigs                     []string       `yaml:"appsec_configs"`
 	AppsecConfigPath                  string         `yaml:"appsec_config_path"`
 	AuthCacheDuration                 *time.Duration `yaml:"auth_cache_duration"`
+	// ChallengeMasterSecret is the long-lived secret used by the WAF
+	// challenge runtime to sign tickets / PoW MACs and seal challenge
+	// cookies. In a distributed (multi-WAF) deployment, all instances MUST
+	// share the same value so that a challenge issued by one instance
+	// validates against another. May be a hex-encoded byte string or a raw
+	// passphrase; minimum 32 bytes / characters. If unset, an ephemeral
+	// random secret is generated at startup (suitable for single-instance
+	// deployments only — restarts invalidate outstanding challenge cookies).
+	ChallengeMasterSecret string `yaml:"challenge_master_secret"`
+
+	// ChallengeKeyRotationInterval controls how often the per-epoch
+	// challenge key advances. All instances in a distributed setup MUST
+	// agree on this value to derive identical per-epoch keys.
+	ChallengeKeyRotationInterval *time.Duration `yaml:"challenge_key_rotation_interval"`
+
+	// ChallengeMaxLiveEpochs is how many past epochs (in addition to the
+	// current one) the keyring continues to accept. Sized so any submission
+	// within the freshness window has a non-evicted epoch.
+	ChallengeMaxLiveEpochs int `yaml:"challenge_max_live_epochs"`
+
+	// ChallengeCookieTTL controls how long a successful-challenge cookie
+	// stays valid. Decoupled from the keyring rotation window so cookies
+	// can be long-lived (e.g. 24h) without widening the per-epoch ticket-
+	// forgery exposure. Defaults to 12h when unset.
+	ChallengeCookieTTL                *time.Duration `yaml:"challenge_cookie_ttl"`
 	configuration.DataSourceCommonCfg `yaml:",inline"`
 }
 
@@ -191,7 +216,26 @@ func (w *Source) Configure(ctx context.Context, yamlConfig []byte, logger *log.E
 
 	if appsecRuntime.NeedWASMVM {
 		logger.Info("Initializing WASM runtime for challenge obfuscation")
-		challengeRuntime, err := challenge.NewChallengeRuntime(ctx)
+
+		var challengeOpts []challenge.Option
+		if w.config.ChallengeMasterSecret != "" {
+			secret, err := challenge.ParseConfiguredSecret(w.config.ChallengeMasterSecret)
+			if err != nil {
+				return fmt.Errorf("invalid challenge_master_secret: %w", err)
+			}
+			challengeOpts = append(challengeOpts, challenge.WithMasterSecret(secret))
+		}
+		if w.config.ChallengeKeyRotationInterval != nil {
+			challengeOpts = append(challengeOpts, challenge.WithRotationInterval(*w.config.ChallengeKeyRotationInterval))
+		}
+		if w.config.ChallengeMaxLiveEpochs > 0 {
+			challengeOpts = append(challengeOpts, challenge.WithMaxLiveEpochs(w.config.ChallengeMaxLiveEpochs))
+		}
+		if w.config.ChallengeCookieTTL != nil {
+			challengeOpts = append(challengeOpts, challenge.WithCookieTTL(*w.config.ChallengeCookieTTL))
+		}
+
+		challengeRuntime, err := challenge.NewChallengeRuntime(ctx, challengeOpts...)
 		if err != nil {
 			return fmt.Errorf("unable to create challenge runtime: %w", err)
 		}
diff --git a/pkg/appsec/challenge/challenge.go b/pkg/appsec/challenge/challenge.go
index e6853c20081..b744906bffa 100644
--- a/pkg/appsec/challenge/challenge.go
+++ b/pkg/appsec/challenge/challenge.go
@@ -5,32 +5,24 @@ import (
 	"compress/gzip"
 	"context"
 	"crypto/hmac"
-	crand "crypto/rand"
 	"crypto/sha256"
-	"encoding/base64"
-	"encoding/hex"
+	_ "embed"
 	"encoding/json"
 	"fmt"
 	"io"
-	"math/rand/v2"
 	"net/http"
 	"net/url"
-	"strconv"
 	"strings"
 	"sync"
-	"time"
-
-	_ "embed"
-
 	"text/template"
+	"time"
 
-	challengejs "github.com/crowdsecurity/crowdsec/pkg/appsec/challenge/js"
 	"github.com/crowdsecurity/crowdsec/pkg/appsec/challenge/pb"
 	"github.com/crowdsecurity/crowdsec/pkg/appsec/cookie"
-	"github.com/google/uuid"
 	log "github.com/sirupsen/logrus"
 	"github.com/tetratelabs/wazero"
 	"github.com/tetratelabs/wazero/imports/wasi_snapshot_preview1"
+	"golang.org/x/sync/singleflight"
 )
 
 const ChallengeJSPath = "/crowdsec-internal/challenge/challenge.js"
@@ -40,44 +32,119 @@ const ChallengeCookieName = "__crowdsec_challenge"
 const challengeJSCacheSize = 10
 const challengeJSRefreshInterval = 10 * time.Minute
 
-// PoW difficulty levels in leading zero bits. Pure JS SHA-256 through the
-// obfuscator runs ~500-5000 ops/sec, so keep these conservative.
-const (
-	PowDifficultyDisabled   = 0   // no PoW required, nonce "0" always valid
-	PowDifficultyLow        = 10  // ~1024 avg iterations ≈ 0.2-2s
-	PowDifficultyMedium     = 12  // ~4096 avg iterations ≈ 1-8s
-	PowDifficultyHigh       = 15  // ~32768 avg iterations ≈ 7-60s
-	PowDifficultyImpossible = 256 // full SHA-256 width: clients cannot solve, server always rejects
-
-	defaultPowDifficulty = PowDifficultyMedium
-)
+// defaultCookieTTL is how long a successful challenge cookie is valid by
+// default. Decoupled from the keyring rotation window: an operator can
+// configure long cookies (e.g. 24h) without widening the ticket-forgery
+// exposure window (keyring live window, default 15m).
+const defaultCookieTTL = 12 * time.Hour
 
 const DefaultChallengeCSP = "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; worker-src 'self' blob:;"
 
-// FIXME
-const masterSecret = "SUPER_SECRET_KEY"
-
 //go:embed challenge.html.tmpl
 var htmlTemplate string
 
 //go:embed pow-worker.js
 var PowWorkerJS string
 
-//go:embed js/obfuscate/index.wasm.gz
-var obfuscatorWasmGz []byte
-
-var (
-	obfuscatorWasm     []byte
-	obfuscatorWasmOnce sync.Once
-)
-
 type ChallengeRuntime struct {
-	r wazero.Runtime
+	r             wazero.Runtime
+	obfuscatorMod wazero.CompiledModule
 
 	obfuscatedJSCache []obfuscatedScript
 	cacheMutex        sync.RWMutex
 
 	powDifficulty int
+
+	// keys derives per-epoch sign keys (HMAC for tickets / PoW MACs) and the
+	// long-lived master cookie key from the configured master secret. All
+	// HMAC and AEAD operations route through this so that ticket rotation
+	// is a server-side bookkeeping change with no protocol impact. In
+	// distributed setups, every WAF instance with the same master_secret
+	// and rotation_interval derives bit-identical keys.
+	keys *KeyRing
+
+	// dynamicModuleCache memoizes the obfuscated per-epoch key module so we
+	// only pay the wazero / javascript-obfuscator cost once per epoch. The
+	// dynamic module is small (~30 lines), so each obfuscation call costs a
+	// few seconds on first call and is then served from memory until the
+	// epoch advances. Stale entries are pruned on every Get.
+	//
+	// dynamicModuleSF de-duplicates concurrent obfuscation requests for the
+	// same epoch: if N requests hit a freshly-rotated epoch simultaneously,
+	// only one runs the obfuscator and the others wait for its result. The
+	// cache mutex is only held for the fast read/write of the map, never
+	// across the multi-second obfuscation pass, so concurrent requests at a
+	// rotation boundary observe at most one obfuscation latency rather than
+	// N serialized ones.
+	dynamicModuleCache   map[int64]string
+	dynamicModuleCacheMu sync.RWMutex
+	dynamicModuleSF      singleflight.Group
+
+	// cookieTTL controls how long a successful-challenge cookie remains
+	// valid. Enforced by an explicit not_after timestamp inside the
+	// sealed envelope (see crypto.go), NOT by keyring eviction, so it
+	// can be much larger than the ticket-signing live window.
+	cookieTTL time.Duration
+}
+
+// Option configures a ChallengeRuntime at construction time.
+type Option func(*runtimeOptions)
+
+type runtimeOptions struct {
+	// masterSecret, if non-nil, overrides the secret-resolution path. The
+	// caller is responsible for ensuring it is at least minSecretBytes long.
+	masterSecret []byte
+
+	// rotationInterval is the wall-clock period after which the per-epoch
+	// derived keys advance. Zero falls back to keyringDefaultRotation.
+	rotationInterval time.Duration
+
+	// maxLiveEpochs is how many past epochs (plus the current one) the
+	// keyring keeps acceptable. Zero falls back to keyringDefaultMaxLive.
+	maxLiveEpochs int
+
+	// cookieTTL controls how long an issued challenge cookie remains
+	// valid. Zero falls back to defaultCookieTTL.
+	cookieTTL time.Duration
+}
+
+// WithMasterSecret sets the long-lived shared secret. In distributed
+// deployments this MUST be the same across all WAF instances. If not set,
+// NewChallengeRuntime generates a random secret at startup (suitable only for
+// single-instance deployments — restarts invalidate outstanding cookies).
+func WithMasterSecret(secret []byte) Option {
+	return func(o *runtimeOptions) {
+		o.masterSecret = secret
+	}
+}
+
+// WithRotationInterval sets the per-epoch key rotation period. All instances
+// in a distributed setup MUST agree on this value to derive identical keys.
+func WithRotationInterval(d time.Duration) Option {
+	return func(o *runtimeOptions) {
+		o.rotationInterval = d
+	}
+}
+
+// WithMaxLiveEpochs sets how many past epochs (in addition to the current
+// one) the keyring continues to accept. Sized so any submission within the
+// freshness window has a non-evicted epoch.
+func WithMaxLiveEpochs(n int) Option {
+	return func(o *runtimeOptions) {
+		o.maxLiveEpochs = n
+	}
+}
+
+// WithCookieTTL sets how long an issued challenge cookie remains valid.
+// Decoupled from the per-epoch keyring window so cookies can be long-lived
+// (e.g. 24h) while ticket-signing keys still rotate on a tight schedule.
+// Zero or negative values are ignored (defaultCookieTTL is used).
+func WithCookieTTL(ttl time.Duration) Option {
+	return func(o *runtimeOptions) {
+		if ttl > 0 {
+			o.cookieTTL = ttl
+		}
+	}
 }
 
 // DifficultyFromLevel resolves a named level ("low", "medium", "high") to
@@ -116,17 +183,45 @@ func (c *ChallengeRuntime) SetDifficulty(level string) error {
 	return nil
 }
 
-type obfuscatedScript struct {
-	Code string    // the obfuscated JS code
-	uuid uuid.UUID // unique ID to track the script
-}
+func NewChallengeRuntime(ctx context.Context, opts ...Option) (*ChallengeRuntime, error) {
+	resolvedOpts := runtimeOptions{}
+	for _, opt := range opts {
+		opt(&resolvedOpts)
+	}
+
+	secret := resolvedOpts.masterSecret
+	if secret == nil {
+		var err error
+		secret, err = generateRandomSecret()
+		if err != nil {
+			return nil, err
+		}
+		log.Warn("no master secret configured for the WAF challenge runtime; generated an ephemeral random secret. " +
+			"Distributed (multi-WAF) deployments MUST configure a shared master_secret in the appsec config; " +
+			"single-instance deployments will see outstanding challenge cookies invalidated on restart.")
+	} else if len(secret) < minSecretBytes {
+		return nil, fmt.Errorf("master secret is %d bytes; minimum is %d", len(secret), minSecretBytes)
+	}
+
+	rotationInterval := resolvedOpts.rotationInterval
+	if rotationInterval == 0 {
+		rotationInterval = keyringDefaultRotation
+	}
+
+	keys, err := NewKeyRing(secret, rotationInterval, resolvedOpts.maxLiveEpochs)
+	if err != nil {
+		return nil, fmt.Errorf("build challenge keyring: %w", err)
+	}
+
+	cookieTTL := resolvedOpts.cookieTTL
+	if cookieTTL <= 0 {
+		cookieTTL = defaultCookieTTL
+	}
 
-func NewChallengeRuntime(ctx context.Context) (*ChallengeRuntime, error) {
 	r := wazero.NewRuntime(ctx)
 
 	// No need to keep the closer around, we can just close the runtime itself when stopping
-	_, err := wasi_snapshot_preview1.Instantiate(ctx, r)
-	if err != nil {
+	if _, err := wasi_snapshot_preview1.Instantiate(ctx, r); err != nil {
 		return nil, fmt.Errorf("failed to instantiate WASI: %w", err)
 	}
 
@@ -151,169 +246,51 @@ func NewChallengeRuntime(ctx context.Context) (*ChallengeRuntime, error) {
 		return nil, obfuscatorWasmErr
 	}
 
-	challengeRuntime := &ChallengeRuntime{
-		r:                 r,
-		obfuscatedJSCache: make([]obfuscatedScript, 0, challengeJSCacheSize),
-		powDifficulty:     defaultPowDifficulty,
-	}
-
-	if err := challengeRuntime.generateAndCacheChallengeJS(ctx); err != nil {
-		return nil, fmt.Errorf("failed to generate initial challenge bundle: %w", err)
-	}
-
-	go challengeRuntime.challengeGenerator(ctx)
-
-	return challengeRuntime, nil
-}
-
-func (c *ChallengeRuntime) challengeGenerator(ctx context.Context) {
-	// Startup warm-up: grow the cache in background until full.
-	if err := c.fillCacheToCapacity(ctx); err != nil {
-		log.Errorf("failed to prefill challenge JS cache: %v", err)
-	}
-
-	ticker := time.NewTicker(challengeJSRefreshInterval)
-	defer ticker.Stop()
-
-	for {
-		select {
-		case <-ticker.C:
-			variants, err := c.generateChallengeVariants(ctx, challengeJSCacheSize)
-			if err != nil {
-				log.Errorf("failed to regenerate full challenge JS cache: %v", err)
-				continue
-			}
-
-			c.replaceCachedChallengeJS(variants)
-		case <-ctx.Done():
-			return
-		}
-	}
-}
-
-func (c *ChallengeRuntime) buildChallengeBundle() string {
-	return strings.NewReplacer(
-		"__CROWDSEC_SUBMIT_PATH__", ChallengeSubmitPath,
-		"__CROWDSEC_POW_WORKER_PATH__", ChallengePowWorkerPath,
-	).Replace(challengejs.FPScannerBundle)
-}
-
-func (c *ChallengeRuntime) generateAndCacheChallengeJS(ctx context.Context) error {
-	variants, err := c.generateChallengeVariants(ctx, 1)
+	// Pre-compile the obfuscator WASM once. Without this, every ObfuscateJS
+	// call re-parses the WASM bytes (~4-5s of overhead per call). Compiling
+	// once and instantiating on each call drops per-call overhead to the
+	// instantiation cost alone.
+	compiledMod, err := r.CompileModule(ctx, obfuscatorWasm)
 	if err != nil {
-		return err
+		return nil, fmt.Errorf("failed to compile obfuscator wasm module: %w", err)
 	}
 
-	c.appendCachedChallengeJS(variants)
-
-	return nil
-}
-
-func (c *ChallengeRuntime) generateChallengeVariants(ctx context.Context, count int) ([]obfuscatedScript, error) {
-	if count <= 0 {
-		return []obfuscatedScript{}, nil
-	}
-
-	variants := make([]obfuscatedScript, 0, count)
-
-	bundle := c.buildChallengeBundle()
-
-	for range count {
-		o := obfuscatedScript{}
-		o.uuid = uuid.New()
-		obfuscatedJS, err := c.ObfuscateJS(ctx, bundle)
-		if err != nil {
-			return nil, err
+	challengeRuntime := &ChallengeRuntime{
+		r:                  r,
+		obfuscatorMod:      compiledMod,
+		obfuscatedJSCache:  make([]obfuscatedScript, 0, challengeJSCacheSize),
+		powDifficulty:      defaultPowDifficulty,
+		keys:               keys,
+		dynamicModuleCache: make(map[int64]string),
+		cookieTTL:          cookieTTL,
+	}
+
+	// Seed the cache from the baked-in pre-obfuscated bundle so the service is
+	// immediately ready to serve challenges. The background generator below
+	// continues to add fresh runtime-generated variants and rotates them on
+	// the normal refresh interval.
+	if err := challengeRuntime.seedCacheFromInitialBundle(); err != nil {
+		// If the initial bundle is missing or corrupt, fall back to the old
+		// behavior of generating one variant synchronously. This keeps the
+		// service correct even if `go generate` was not run.
+		log.Warnf("failed to load baked-in initial challenge bundle (%v); falling back to synchronous generation", err)
+		if err := challengeRuntime.generateAndCacheChallengeJS(ctx); err != nil {
+			return nil, fmt.Errorf("failed to generate initial challenge bundle: %w", err)
 		}
-		o.Code = obfuscatedJS
-		variants = append(variants, o)
-	}
-
-	return variants, nil
-}
-
-func (c *ChallengeRuntime) fillCacheToCapacity(ctx context.Context) error {
-	c.cacheMutex.RLock()
-	missing := challengeJSCacheSize - len(c.obfuscatedJSCache)
-	c.cacheMutex.RUnlock()
-
-	if missing <= 0 {
-		return nil
-	}
-
-	variants, err := c.generateChallengeVariants(ctx, missing)
-	if err != nil {
-		return err
-	}
-
-	c.appendCachedChallengeJS(variants)
-	return nil
-}
-
-func (c *ChallengeRuntime) appendCachedChallengeJS(variants []obfuscatedScript) {
-	if len(variants) == 0 {
-		return
 	}
 
-	c.cacheMutex.Lock()
-	c.obfuscatedJSCache = append(c.obfuscatedJSCache, variants...)
-	if len(c.obfuscatedJSCache) > challengeJSCacheSize {
-		c.obfuscatedJSCache = c.obfuscatedJSCache[len(c.obfuscatedJSCache)-challengeJSCacheSize:]
+	// Pre-warm the dynamic key module for the current epoch so the very
+	// first GetChallengePage call doesn't pay the ~5s obfuscation cost
+	// on the request-serving path. The dynamic module is small enough
+	// that this stays well under the startup budget.
+	if _, err := challengeRuntime.currentDynamicModule(ctx); err != nil {
+		return nil, fmt.Errorf("warm dynamic key module: %w", err)
 	}
-	c.cacheMutex.Unlock()
-}
 
-func (c *ChallengeRuntime) replaceCachedChallengeJS(variants []obfuscatedScript) {
-	if len(variants) == 0 {
-		return
-	}
-
-	c.cacheMutex.Lock()
-	c.obfuscatedJSCache = append([]obfuscatedScript(nil), variants...)
-	c.cacheMutex.Unlock()
-}
-
-func (c *ChallengeRuntime) getCachedChallengeJS() obfuscatedScript {
-	c.cacheMutex.RLock()
-	defer c.cacheMutex.RUnlock()
-
-	cacheSize := len(c.obfuscatedJSCache)
-	if cacheSize == 0 {
-		return obfuscatedScript{}
-	}
-
-	idx := rand.IntN(cacheSize)
-	return c.obfuscatedJSCache[idx]
-}
-
-func (c *ChallengeRuntime) ObfuscateJS(ctx context.Context, inputJS string) (string, error) {
-	stdin := bytes.NewReader([]byte(inputJS))
-	var stdout bytes.Buffer
-	var stderr bytes.Buffer
-
-	config := wazero.NewModuleConfig().
-		WithStdin(stdin).
-		WithStdout(&stdout).
-		WithStderr(&stderr)
-
-	mod, err := c.r.InstantiateWithConfig(ctx, obfuscatorWasm, config)
-	if err != nil {
-		if stderr.Len() > 0 {
-			return "", fmt.Errorf("wasm runtime error: %v | stderr: %s", err, stderr.String())
-		}
-		return "", fmt.Errorf("wasm instantiation error: %v", err)
-	}
-
-	mod.Close(ctx)
-
-	return stdout.String(), nil
-}
-
-func computeTicket(ts string) string {
-	h := hmac.New(sha256.New, []byte(masterSecret))
-	h.Write([]byte(ts))
+	go challengeRuntime.challengeGenerator(ctx)
+	go challengeRuntime.dynamicModulePreWarmer(ctx)
 
-	return fmt.Sprintf("%x", h.Sum(nil))
+	return challengeRuntime, nil
 }
 
 // GetChallengePage renders the challenge HTML page with the given PoW difficulty.
@@ -343,114 +320,40 @@ func (c *ChallengeRuntime) GetChallengePage(userAgent string, difficulty int) (s
 		}
 	}
 
-	// All per-request values: ticket, timestamp, PoW salt, PoW MAC.
+	// All per-request values: timestamp, PoW salt, PoW MAC.
 	// Fully stateless — no server-side storage, works across HA instances.
+	//
+	// The client recomputes the ticket itself from the per-epoch key
+	// embedded in the dynamic key module (so the signing material never
+	// appears in plain HTML). The server-side ticket here is only used to
+	// bind the PoW salt to ts via computePowMAC.
 	ts := fmt.Sprintf("%d", time.Now().UnixNano())
-	ticket := computeTicket(ts)
+	ticket := c.computeTicket(ts)
 	powSalt := generatePowPrefix()
-	powMAC := computePowMAC(powSalt, ticket, ts)
+	powMAC := c.computePowMAC(powSalt, ticket, ts)
+
+	// Build and (cheaply) obfuscate the dynamic key module for the current
+	// epoch. The static bundle in obfuscatedJS.Code only carries the hook
+	// registration; the dynamic module is what carries the per-epoch K — so
+	// K never appears in plain HTML.
+	dynamicModule, err := c.currentDynamicModule(context.Background())
+	if err != nil {
+		return "", fmt.Errorf("build dynamic key module: %w", err)
+	}
 
 	var renderedPage strings.Builder
 
 	templateObj.Execute(&renderedPage, map[string]interface{}{
 		"JSChallenge":   obfuscatedJS.Code,
+		"DynamicModule": dynamicModule,
 		"PowDifficulty": difficulty,
 		"PowPrefix":     powSalt,
 		"PowMAC":        powMAC,
-		"Ticket":        ticket,
 		"Timestamp":     ts,
 	})
 	return renderedPage.String(), nil
 }
 
-func generatePowPrefix() string {
-	buf := make([]byte, 16)
-	if _, err := crand.Read(buf); err != nil {
-		panic(fmt.Sprintf("failed to generate PoW prefix: %v", err))
-	}
-
-	return hex.EncodeToString(buf)
-}
-
-// computePowMAC produces an HMAC that authenticates a PoW salt as server-generated
-// and bound to a specific ticket window. Stateless: any instance sharing the
-// masterSecret can verify it.
-func computePowMAC(salt, ticket, ts string) string {
-	h := hmac.New(sha256.New, []byte(masterSecret))
-	h.Write([]byte(salt))
-	h.Write([]byte(ticket))
-	h.Write([]byte(ts))
-
-	return fmt.Sprintf("%x", h.Sum(nil))
-}
-
-func hasLeadingZeroBits(hash []byte, bits int) bool {
-	fullBytes := bits / 8
-	remainBits := bits % 8
-
-	for i := range fullBytes {
-		if hash[i] != 0 {
-			return false
-		}
-	}
-
-	if remainBits > 0 {
-		mask := byte(0xFF << (8 - remainBits))
-		if hash[fullBytes]&mask != 0 {
-			return false
-		}
-	}
-
-	return true
-}
-
-func (c *ChallengeRuntime) getSessionKey(ticket string, nonce string) string {
-	hash := sha256.Sum256([]byte(ticket + nonce))
-	return fmt.Sprintf("%x", hash)
-}
-
-func (c *ChallengeRuntime) decryptFingerprint(sessionKey string, encrypted string) (string, error) {
-	encryptedBytes, err := base64.StdEncoding.DecodeString(encrypted)
-	if err != nil {
-		return "", fmt.Errorf("failed to decode encrypted fingerprint: %w", err)
-	}
-
-	decryptedBytes := make([]byte, len(encryptedBytes))
-
-	for i := range encryptedBytes {
-		decryptedBytes[i] = encryptedBytes[i] ^ sessionKey[i%len(sessionKey)]
-	}
-
-	return string(decryptedBytes), nil
-}
-
-// matchesChallenge verifies that the ticket/timestamp/PoW salt are authentically
-// server-generated and the timestamp is recent. Fully stateless — any instance
-// sharing masterSecret can verify.
-func matchesChallenge(clientTicket, clientTS, clientPowSalt, clientPowMAC string) bool {
-	// Verify the ticket is an authentic HMAC of the timestamp.
-	expectedTicket := computeTicket(clientTS)
-	if !hmac.Equal([]byte(clientTicket), []byte(expectedTicket)) {
-		return false
-	}
-
-	// Verify the timestamp is recent (within 2 refresh intervals for safety).
-	tsVal, err := strconv.ParseInt(clientTS, 10, 64)
-	if err != nil {
-		return false
-	}
-
-	age := time.Since(time.Unix(0, tsVal))
-	if age < 0 || age > 2*challengeJSRefreshInterval {
-		return false
-	}
-
-	// Verify the PoW salt MAC is authentic and bound to this ticket+timestamp.
-	expectedMAC := computePowMAC(clientPowSalt, clientTicket, clientTS)
-
-	return hmac.Equal([]byte(clientPowMAC), []byte(expectedMAC))
-}
-
 func (c *ChallengeRuntime) ValidateChallengeResponse(request *http.Request, body []byte) (*cookie.AppsecCookie, FingerprintData, error) {
 	vars, err := url.ParseQuery(string(body))
 	if err != nil {
@@ -470,7 +373,7 @@ func (c *ChallengeRuntime) ValidateChallengeResponse(request *http.Request, body
 	}
 
 	// Verify ticket/timestamp match and PoW salt is authentically server-generated (stateless).
-	if !matchesChallenge(clientTicket, clientTS, clientPowSalt, clientPowMAC) {
+	if !c.matchesChallenge(clientTicket, clientTS, clientPowSalt, clientPowMAC) {
 		return nil, FingerprintData{}, fmt.Errorf("invalid ticket in challenge response")
 	}
 
@@ -507,6 +410,8 @@ func (c *ChallengeRuntime) ValidateChallengeResponse(request *http.Request, body
 		return nil, FingerprintData{}, fmt.Errorf("failed to decrypt fingerprint: %w", err)
 	}
 
+	log.Errorf("challenge response: %s", fingerprint)
+
 	var fpData FingerprintData
 
 	if err := json.Unmarshal([]byte(fingerprint), &fpData); err != nil {
@@ -519,12 +424,18 @@ func (c *ChallengeRuntime) ValidateChallengeResponse(request *http.Request, body
 		PowDifficulty: int32(c.powDifficulty),
 	}
 
-	cookieValue, err := sealCookie(envelope, masterSecret, []byte(request.UserAgent()))
+	// Seal under the long-lived master cookie key; the sealed envelope
+	// embeds an explicit not_after timestamp so the server-side validity
+	// window is exactly c.cookieTTL, independent of the keyring's per-
+	// epoch rotation cadence. The browser-side Max-Age below is set to
+	// the same TTL so the browser drops the cookie at the same moment.
+	notAfter := time.Now().Add(c.cookieTTL).Unix()
+	cookieValue, err := sealCookieV0(envelope, c.keys.MasterCookieKey(), notAfter, []byte(request.UserAgent()))
 	if err != nil {
 		return nil, FingerprintData{}, fmt.Errorf("failed to seal challenge cookie: %w", err)
 	}
 
-	ck := cookie.NewAppsecCookie(ChallengeCookieName).HttpOnly().Path("/").SameSite(cookie.SameSiteLax).ExpiresIn(2 * time.Hour).Value(cookieValue)
+	ck := cookie.NewAppsecCookie(ChallengeCookieName).HttpOnly().Path("/").SameSite(cookie.SameSiteLax).ExpiresIn(c.cookieTTL).Value(cookieValue)
 	if request.URL.Scheme == "https" {
 		ck = ck.Secure()
 	}
@@ -545,7 +456,7 @@ func (c *ChallengeRuntime) ValidCookie(ck *http.Cookie, userAgent string) (*Cook
 		return nil, fmt.Errorf("nil cookie")
 	}
 
-	envelope, err := openCookie(ck.Value, masterSecret, []byte(userAgent))
+	envelope, err := openCookie(ck.Value, c.keys.MasterCookieKey(), []byte(userAgent))
 	if err != nil {
 		return nil, fmt.Errorf("invalid challenge cookie: %w", err)
 	}
diff --git a/pkg/appsec/challenge/challenge.html.tmpl b/pkg/appsec/challenge/challenge.html.tmpl
index 0d774387e69..089b898793c 100644
--- a/pkg/appsec/challenge/challenge.html.tmpl
+++ b/pkg/appsec/challenge/challenge.html.tmpl
@@ -387,9 +387,15 @@
       })();
     </script>
 
-    <script>var _powD={{.PowDifficulty}},_powP="{{.PowPrefix}}",_powM="{{.PowMAC}}",_t="{{.Ticket}}",_ts="{{.Timestamp}}"</script>
+    <!--
+      _powD/_powP/_powM/_ts are non-secret per-request protocol parameters.
+      The signing key is delivered separately by the obfuscated dynamic
+      key module below; the ticket is computed client-side from that key.
+    -->
+    <script>var _powD={{.PowDifficulty}},_powP="{{.PowPrefix}}",_powM="{{.PowMAC}}",_ts="{{.Timestamp}}"</script>
     <script type="module">
 {{.JSChallenge}}
+{{.DynamicModule}}
     </script>
 
     <script>
diff --git a/pkg/appsec/challenge/challenge.js b/pkg/appsec/challenge/challenge.js
index 4b196344912..36f0689fce2 100644
--- a/pkg/appsec/challenge/challenge.js
+++ b/pkg/appsec/challenge/challenge.js
@@ -123,6 +123,20 @@ function hmacSHA256Hex(keyStr, msgStr) {
   return toHex(hmacSHA256(encode(keyStr), encode(msgStr)));
 }
 
+// hexToBytes decodes a hex string into a Uint8Array. Used to materialize the
+// per-epoch HMAC key delivered as hex by the dynamic module.
+function hexToBytes(hex) {
+  const out = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < out.length; i++) {
+    out[i] = parseInt(hex.substr(i * 2, 2), 16);
+  }
+  return out;
+}
+
+function hmacSHA256HexKey(keyHex, msgStr) {
+  return toHex(hmacSHA256(hexToBytes(keyHex), encode(msgStr)));
+}
+
 // --- Proof-of-Work (offloaded to Web Worker) ---
 
 const powWorkerPath = "__CROWDSEC_POW_WORKER_PATH__";
@@ -186,10 +200,20 @@ function encryptFingerprint(key, fingerprint) {
   return btoa(binaryString);
 }
 
-// --- Template-injected values (replaced server-side before obfuscation) ---
+// --- Non-secret per-request values (plain template injection) ---
+//
+// _ts, _powP, _powM, _powD are set on `globalThis` by a small plain <script>
+// tag rendered by the server before this module loads. They are NOT secrets:
+//   _ts   — current server time (forgeable but freshness-windowed)
+//   _powP — random PoW salt (must be server-issued so clients can't pick favorable salts)
+//   _powM — HMAC binding (_powP, _ts) under the server's per-epoch sign key
+//   _powD — PoW difficulty (a number)
+//
+// What IS secret: the per-epoch K used to derive the ticket and submission
+// HMAC. K is delivered by the dynamic key module (re-obfuscated each
+// rotation) which calls the hook below with { key, epoch }.
 
 const ts = typeof _ts !== "undefined" ? _ts : "";
-const ticket = typeof _t !== "undefined" ? _t : "";
 const powPrefix = typeof _powP !== "undefined" ? _powP : "";
 const powMAC = typeof _powM !== "undefined" ? _powM : "";
 const powDifficulty = typeof _powD !== "undefined" ? _powD : 12;
@@ -211,27 +235,54 @@ function reportChallengeStatus(status) {
 }
 
 // --- Main flow ---
-// PoW runs in a Web Worker while fingerprint collection runs on the main thread.
-// Both run in parallel; the main thread stays responsive for event collection.
-
-const [nonce, fpResult] = await Promise.all([
-  solvePoWAsync(powPrefix, powDifficulty),
-  new FingerprintScanner().collectFingerprint({ encrypt: false }),
-]);
-
-const sessionKey = sha256Hex(ticket + nonce);
-const f = encryptFingerprint(sessionKey, JSON.stringify(fpResult));
-const h = hmacSHA256Hex(sessionKey, f + ts + ticket + nonce);
-fetch(submitPath, {
-  method: "POST",
-  credentials: "same-origin",
-  body: new URLSearchParams({ f: f, t: ticket, ts: ts, h: h, n: nonce, p: powPrefix, m: powMAC }),
-})
-  .then((response) => response.json())
-  .then((data) => {
-    const status = typeof data?.status === "string" ? data.status : "fail";
-    reportChallengeStatus(status);
+// The static bundle exposes a hook on globalThis. The dynamic key module
+// (loaded after this static bundle) calls the hook with { key, epoch }.
+// All cryptographic operations that depend on the per-epoch key live here:
+// the static bundle never sees a hardcoded K, only the per-call argument.
+//
+// The hook name is a sentinel that survives JS obfuscation via the
+// `reservedStrings` option — the same literal must appear in both the
+// static bundle and the dynamic module so they meet on globalThis.
+
+const CSEC_HOOK_NAME = "__CSEC_CHALLENGE_HOOK_v1__";
+
+async function runChallenge(epochKey) {
+  const [nonce, fpResult] = await Promise.all([
+    solvePoWAsync(powPrefix, powDifficulty),
+    new FingerprintScanner().collectFingerprint({ encrypt: false }),
+  ]);
+
+  // Client derives the ticket using the per-epoch key — the secret never
+  // appears in plaintext HTML, only in the obfuscated dynamic module.
+  // epochKey is hex-encoded; HMAC over the raw bytes.
+  const ticket = hmacSHA256HexKey(epochKey, ts);
+
+  const sessionKey = sha256Hex(ticket + nonce);
+  const f = encryptFingerprint(sessionKey, JSON.stringify(fpResult));
+  const h = hmacSHA256Hex(sessionKey, f + ts + ticket + nonce);
+
+  return fetch(submitPath, {
+    method: "POST",
+    credentials: "same-origin",
+    body: new URLSearchParams({ f: f, t: ticket, ts: ts, h: h, n: nonce, p: powPrefix, m: powMAC }),
   })
-  .catch(() => {
+    .then((response) => response.json())
+    .then((data) => {
+      const status = typeof data?.status === "string" ? data.status : "fail";
+      reportChallengeStatus(status);
+    })
+    .catch(() => {
+      reportChallengeStatus("fail");
+    });
+}
+
+// Register the hook. The dynamic module (loaded after this) reads the same
+// CSEC_HOOK_NAME string and invokes runChallenge with the per-epoch key.
+globalThis[CSEC_HOOK_NAME] = function (params) {
+  // Defensive: the dynamic module must pass a non-empty string key.
+  if (!params || typeof params.key !== "string" || params.key.length === 0) {
     reportChallengeStatus("fail");
-  });
+    return;
+  }
+  runChallenge(params.key);
+};
diff --git a/pkg/appsec/challenge/challenge_test.go b/pkg/appsec/challenge/challenge_test.go
index ded6354963f..572510c496a 100644
--- a/pkg/appsec/challenge/challenge_test.go
+++ b/pkg/appsec/challenge/challenge_test.go
@@ -115,7 +115,7 @@ func TestDifficultyFromLevel(t *testing.T) {
 }
 
 func TestSetDifficulty(t *testing.T) {
-	c := &ChallengeRuntime{powDifficulty: defaultPowDifficulty}
+	c := newTestRuntimeWithDifficulty(defaultPowDifficulty)
 
 	assert.NoError(t, c.SetDifficulty("low"))
 	assert.Equal(t, PowDifficultyLow, c.powDifficulty)
@@ -149,48 +149,99 @@ func TestGetSessionKey(t *testing.T) {
 }
 
 func TestComputeTicket(t *testing.T) {
+	// Use a fixed test secret so the HMAC equality check is reproducible.
+	secret := []byte("0123456789abcdef0123456789abcdef")
+	keys, err := NewKeyRing(secret, time.Minute, 3)
+	require.NoError(t, err)
+	c := &ChallengeRuntime{keys: keys}
+
+	// Use a current timestamp so the keyring derives the right epoch.
+	ts1 := fmt.Sprintf("%d", time.Now().UnixNano())
+
 	// Deterministic for same timestamp
-	t1 := computeTicket("12345")
-	t2 := computeTicket("12345")
+	t1 := c.computeTicket(ts1)
+	t2 := c.computeTicket(ts1)
 	assert.Equal(t, t1, t2)
 
 	// Different for different timestamps
-	t3 := computeTicket("67890")
+	ts2 := fmt.Sprintf("%d", time.Now().Add(2*time.Second).UnixNano())
+	t3 := c.computeTicket(ts2)
 	assert.NotEqual(t, t1, t3)
 
-	// Matches expected HMAC-SHA256
-	h := hmac.New(sha256.New, []byte(masterSecret))
-	h.Write([]byte("12345"))
+	// Matches HMAC-SHA256 under the per-epoch sign key for ts1's epoch.
+	epoch := c.epochForTimestamp(ts1)
+	signKey, ok := c.keys.SignKey(epoch)
+	require.True(t, ok)
+	h := hmac.New(sha256.New, signKey)
+	h.Write([]byte(ts1))
 	assert.Equal(t, fmt.Sprintf("%x", h.Sum(nil)), t1)
 }
 
 func TestMatchesChallenge(t *testing.T) {
+	keys, err := NewKeyRing([]byte("0123456789abcdef0123456789abcdef"), time.Minute, 3)
+	require.NoError(t, err)
+	c := &ChallengeRuntime{keys: keys}
+
 	ts := fmt.Sprintf("%d", time.Now().UnixNano())
-	ticket := computeTicket(ts)
+	ticket := c.computeTicket(ts)
 	salt := generatePowPrefix()
-	mac := computePowMAC(salt, ticket, ts)
+	mac := c.computePowMAC(salt, ticket, ts)
 
 	// Valid challenge
-	assert.True(t, matchesChallenge(ticket, ts, salt, mac))
+	assert.True(t, c.matchesChallenge(ticket, ts, salt, mac))
 
 	// Wrong ticket
-	assert.False(t, matchesChallenge("wrong-ticket", ts, salt, mac))
+	assert.False(t, c.matchesChallenge("wrong-ticket", ts, salt, mac))
 
 	// Wrong timestamp (ticket doesn't match)
-	assert.False(t, matchesChallenge(ticket, "9999999999999999999", salt, mac))
+	assert.False(t, c.matchesChallenge(ticket, "9999999999999999999", salt, mac))
 
 	// Forged MAC
-	assert.False(t, matchesChallenge(ticket, ts, salt, "forged-mac"))
+	assert.False(t, c.matchesChallenge(ticket, ts, salt, "forged-mac"))
 
 	// MAC from different salt
 	otherSalt := generatePowPrefix()
-	assert.False(t, matchesChallenge(ticket, ts, otherSalt, mac))
+	assert.False(t, c.matchesChallenge(ticket, ts, otherSalt, mac))
 
 	// Expired timestamp (too old)
 	oldTS := fmt.Sprintf("%d", time.Now().Add(-3*challengeJSRefreshInterval).UnixNano())
-	oldTicket := computeTicket(oldTS)
-	oldMAC := computePowMAC(salt, oldTicket, oldTS)
-	assert.False(t, matchesChallenge(oldTicket, oldTS, salt, oldMAC))
+	oldTicket := c.computeTicket(oldTS)
+	oldMAC := c.computePowMAC(salt, oldTicket, oldTS)
+	assert.False(t, c.matchesChallenge(oldTicket, oldTS, salt, oldMAC))
+
+	// Cross-secret rejection: a ticket signed by a different instance with a
+	// different master secret must NOT validate.
+	otherKeys, err := NewKeyRing([]byte("ffffffffffffffffffffffffffffffff"), time.Minute, 3)
+	require.NoError(t, err)
+	other := &ChallengeRuntime{keys: otherKeys}
+	otherTicket := other.computeTicket(ts)
+	otherMAC := other.computePowMAC(salt, otherTicket, ts)
+	assert.False(t, c.matchesChallenge(otherTicket, ts, salt, otherMAC))
+}
+
+// TestDistributedAgreement asserts that two ChallengeRuntime instances
+// configured with the same master_secret produce bit-identical tickets and
+// PoW MACs — the property that makes load-balanced deployments work.
+func TestDistributedAgreement(t *testing.T) {
+	secret := []byte("shared-secret-shared-secret-shar") // 32 bytes
+	keysA, err := NewKeyRing(secret, time.Minute, 3)
+	require.NoError(t, err)
+	keysB, err := NewKeyRing(secret, time.Minute, 3)
+	require.NoError(t, err)
+	a := &ChallengeRuntime{keys: keysA}
+	b := &ChallengeRuntime{keys: keysB}
+
+	// Use a freshness-window-valid timestamp so matchesChallenge accepts it.
+	ts := fmt.Sprintf("%d", time.Now().UnixNano())
+	salt := "deadbeefcafebabe"
+
+	assert.Equal(t, a.computeTicket(ts), b.computeTicket(ts))
+
+	ticket := a.computeTicket(ts)
+	assert.Equal(t, a.computePowMAC(salt, ticket, ts), b.computePowMAC(salt, ticket, ts))
+
+	// And a challenge issued by A validates against B.
+	assert.True(t, b.matchesChallenge(ticket, ts, salt, a.computePowMAC(salt, ticket, ts)))
 }
 
 // solvePoWGo is a Go implementation of the PoW solver matching the JS client.
@@ -232,18 +283,45 @@ func TestPoWVerification(t *testing.T) {
 	assert.True(t, hasLeadingZeroBits(powHash[:], difficulty))
 }
 
+// testSecret is a fixed master secret used by all test helpers below so that
+// tickets / MACs / cookies issued in one helper validate in another.
+var testSecret = []byte("test-secret-test-secret-test-sec") // 32 bytes
+
+// testKeyRing returns a fresh KeyRing built around testSecret. Returned by
+// value would defeat the cache, so we hand back a pointer and rely on the
+// caller to discard it after the test.
+func testKeyRing() *KeyRing {
+	k, err := NewKeyRing(testSecret, time.Minute, 3)
+	if err != nil {
+		panic(err)
+	}
+	return k
+}
+
+// newTestRuntime returns a minimal ChallengeRuntime suitable for the helpers
+// in this file (no WASM, no obfuscation cache — those tests construct full
+// runtimes via NewChallengeRuntime).
+func newTestRuntime() *ChallengeRuntime {
+	return &ChallengeRuntime{keys: testKeyRing()}
+}
+
+// newTestRuntimeWithDifficulty is a small convenience for the many ValidateChallengeResponse tests.
+func newTestRuntimeWithDifficulty(d int) *ChallengeRuntime {
+	return &ChallengeRuntime{keys: testKeyRing(), powDifficulty: d}
+}
+
 // freshTicket generates a per-request ticket+timestamp pair (matching GetChallengePage).
 func freshTicket() (ticket, ts string) {
 	ts = fmt.Sprintf("%d", time.Now().UnixNano())
-	ticket = computeTicket(ts)
+	ticket = newTestRuntime().computeTicket(ts)
 	return
 }
 
 // buildValidBody constructs a valid challenge POST body.
 func buildValidBody(difficulty int, ticket, ts string) string {
-	c := &ChallengeRuntime{}
+	c := newTestRuntime()
 	salt := generatePowPrefix()
-	powMAC := computePowMAC(salt, ticket, ts)
+	powMAC := c.computePowMAC(salt, ticket, ts)
 	nonce := solvePoWGo(salt, difficulty)
 	sessionKey := c.getSessionKey(ticket, nonce)
 
@@ -276,7 +354,7 @@ func buildValidBody(difficulty int, ticket, ts string) string {
 }
 
 func TestValidateChallengeResponse(t *testing.T) {
-	c := &ChallengeRuntime{powDifficulty: 8}
+	c := newTestRuntimeWithDifficulty(8)
 	ticket, ts := freshTicket()
 	body := buildValidBody(c.powDifficulty, ticket, ts)
 
@@ -290,7 +368,7 @@ func TestValidateChallengeResponse(t *testing.T) {
 }
 
 func TestValidateChallengeResponse_MultipleConcurrentClients(t *testing.T) {
-	c := &ChallengeRuntime{powDifficulty: 8}
+	c := newTestRuntimeWithDifficulty(8)
 
 	for range 20 {
 		ticket, ts := freshTicket()
@@ -304,10 +382,10 @@ func TestValidateChallengeResponse_MultipleConcurrentClients(t *testing.T) {
 }
 
 func TestValidateChallengeResponse_InvalidPoW(t *testing.T) {
-	c := &ChallengeRuntime{powDifficulty: 8}
+	c := newTestRuntimeWithDifficulty(8)
 	ticket, ts := freshTicket()
 	salt := generatePowPrefix()
-	powMAC := computePowMAC(salt, ticket, ts)
+	powMAC := c.computePowMAC(salt, ticket, ts)
 
 	body := url.Values{
 		"f":  {"dGVzdA=="},
@@ -327,7 +405,7 @@ func TestValidateChallengeResponse_InvalidPoW(t *testing.T) {
 func TestValidateChallengeResponse_ImpossibleDifficulty(t *testing.T) {
 	// A submission that would otherwise pass at low difficulty is rejected
 	// outright when the runtime is set to impossible.
-	c := &ChallengeRuntime{powDifficulty: PowDifficultyImpossible}
+	c := newTestRuntimeWithDifficulty(PowDifficultyImpossible)
 	ticket, ts := freshTicket()
 	body := buildValidBody(8, ticket, ts) // satisfies 8-bit PoW but not impossible
 
@@ -339,9 +417,9 @@ func TestValidateChallengeResponse_ImpossibleDifficulty(t *testing.T) {
 }
 
 func TestValidateChallengeResponse_ExpiredTimestamp(t *testing.T) {
-	c := &ChallengeRuntime{powDifficulty: 8}
+	c := newTestRuntimeWithDifficulty(8)
 	oldTS := fmt.Sprintf("%d", time.Now().Add(-3*challengeJSRefreshInterval).UnixNano())
-	oldTicket := computeTicket(oldTS)
+	oldTicket := c.computeTicket(oldTS)
 	body := buildValidBody(c.powDifficulty, oldTicket, oldTS)
 
 	req, _ := http.NewRequest("POST", "http://example.com/submit", strings.NewReader(body))
@@ -352,10 +430,10 @@ func TestValidateChallengeResponse_ExpiredTimestamp(t *testing.T) {
 }
 
 func TestValidateChallengeResponse_InvalidTicket(t *testing.T) {
-	c := &ChallengeRuntime{powDifficulty: 8}
+	c := newTestRuntimeWithDifficulty(8)
 	ticket, ts := freshTicket()
 	salt := generatePowPrefix()
-	powMAC := computePowMAC(salt, ticket, ts)
+	powMAC := c.computePowMAC(salt, ticket, ts)
 
 	body := url.Values{
 		"f":  {"dGVzdA=="},
@@ -373,7 +451,7 @@ func TestValidateChallengeResponse_InvalidTicket(t *testing.T) {
 }
 
 func TestValidateChallengeResponse_ForgedMAC(t *testing.T) {
-	c := &ChallengeRuntime{powDifficulty: 8}
+	c := newTestRuntimeWithDifficulty(8)
 	ticket, ts := freshTicket()
 	salt := generatePowPrefix()
 
@@ -393,10 +471,10 @@ func TestValidateChallengeResponse_ForgedMAC(t *testing.T) {
 }
 
 func TestValidateChallengeResponse_InvalidHMAC(t *testing.T) {
-	c := &ChallengeRuntime{powDifficulty: 8}
+	c := newTestRuntimeWithDifficulty(8)
 	ticket, ts := freshTicket()
 	salt := generatePowPrefix()
-	powMAC := computePowMAC(salt, ticket, ts)
+	powMAC := c.computePowMAC(salt, ticket, ts)
 	nonce := solvePoWGo(salt, c.powDifficulty)
 
 	body := url.Values{
diff --git a/pkg/appsec/challenge/crypto.go b/pkg/appsec/challenge/crypto.go
index b70d8867f4d..7f36a59800b 100644
--- a/pkg/appsec/challenge/crypto.go
+++ b/pkg/appsec/challenge/crypto.go
@@ -6,8 +6,10 @@ import (
 	"crypto/rand"
 	"crypto/sha256"
 	"encoding/base64"
+	"encoding/binary"
 	"errors"
 	"fmt"
+	"time"
 
 	"golang.org/x/crypto/hkdf"
 
@@ -19,12 +21,37 @@ var (
 	ErrCookieMalformed = errors.New("malformed cookie")
 	ErrCookieSignature = errors.New("invalid cookie signature")
 	ErrCookiePayload   = errors.New("invalid cookie payload")
+	ErrCookieExpired   = errors.New("cookie expired")
+	ErrCookieVersion   = errors.New("unknown cookie version")
 )
 
 const hkdfInfo = "crowdsec-challenge-cookie"
 
-func deriveKey(secret string) ([]byte, error) {
-	h := hkdf.New(sha256.New, []byte(secret), nil, []byte(hkdfInfo))
+// Cookie wire format. A single version byte at offset 0 lets us evolve the
+// format without flag-day-style cookie invalidation. New formats add a new
+// case in openCookie's switch.
+//
+//	v0: cookieVersionV0 || nonce(12) || ciphertext
+//
+//	    Sealed under KeyRing.MasterCookieKey() — a long-lived AES-GCM key
+//	    derived from master_secret with no epoch dependency. Cookie
+//	    expiration is enforced by an explicit unix-seconds not_after
+//	    timestamp prepended to the plaintext BEFORE encryption, so any
+//	    tampering with the expiration invalidates the AEAD tag. AAD is
+//	    the User-Agent.
+//
+//	    Decoupling the cookie key from the epoch keyring is what lets us
+//	    have e.g. 24h cookies while keeping ticket-signing keys rotating
+//	    every few minutes — the two security windows are independent.
+const cookieVersionV0 byte = 0x00
+
+// cookiePlaintextHeaderLen is the size of the not_after_be8 prefix that
+// gets glued in front of the marshalled ChallengeCookie proto before
+// AES-GCM seal. It is INSIDE the encrypted+authenticated envelope.
+const cookiePlaintextHeaderLen = 8
+
+func deriveKey(secret []byte) ([]byte, error) {
+	h := hkdf.New(sha256.New, secret, nil, []byte(hkdfInfo))
 	key := make([]byte, 32) // AES-256
 
 	if _, err := h.Read(key); err != nil {
@@ -34,13 +61,18 @@ func deriveKey(secret string) ([]byte, error) {
 	return key, nil
 }
 
-func sealCookie(envelope *pb.ChallengeCookie, secret string, aad []byte) (string, error) {
-	plaintext, err := proto.Marshal(envelope)
+// sealCookieV0 produces a v0 cookie sealed under the long-lived master
+// cookie key. notAfter is the unix-seconds expiration; it is prepended to
+// the marshalled proto BEFORE encryption so it is both confidential (not
+// observable from the wire) and authenticated (any tamper attempt
+// invalidates the GCM tag).
+func sealCookieV0(envelope *pb.ChallengeCookie, masterCookieKey []byte, notAfter int64, aad []byte) (string, error) {
+	envelopeBytes, err := proto.Marshal(envelope)
 	if err != nil {
 		return "", fmt.Errorf("failed to marshal challenge cookie proto: %w", err)
 	}
 
-	key, err := deriveKey(secret)
+	key, err := deriveKey(masterCookieKey)
 	if err != nil {
 		return "", err
 	}
@@ -60,18 +92,45 @@ func sealCookie(envelope *pb.ChallengeCookie, secret string, aad []byte) (string
 		return "", fmt.Errorf("failed to generate nonce: %w", err)
 	}
 
+	// Build the plaintext: not_after_be8 || envelope_bytes
+	plaintext := make([]byte, 0, cookiePlaintextHeaderLen+len(envelopeBytes))
+	var notAfterBytes [cookiePlaintextHeaderLen]byte
+	binary.BigEndian.PutUint64(notAfterBytes[:], uint64(notAfter))
+	plaintext = append(plaintext, notAfterBytes[:]...)
+	plaintext = append(plaintext, envelopeBytes...)
+
 	ciphertext := gcm.Seal(nonce, nonce, plaintext, aad)
 
-	return base64.RawURLEncoding.EncodeToString(ciphertext), nil
+	// Wire form: version || nonce || ciphertext
+	out := make([]byte, 0, 1+len(ciphertext))
+	out = append(out, cookieVersionV0)
+	out = append(out, ciphertext...)
+
+	return base64.RawURLEncoding.EncodeToString(out), nil
 }
 
-func openCookie(encoded string, secret string, aad []byte) (*pb.ChallengeCookie, error) {
-	ciphertext, err := base64.RawURLEncoding.DecodeString(encoded)
+// openCookie decodes a sealed cookie, dispatching on the version byte.
+// Unknown versions are rejected with ErrCookieVersion. Expired cookies
+// (notAfter <= now) are rejected with ErrCookieExpired.
+func openCookie(encoded string, masterCookieKey []byte, aad []byte) (*pb.ChallengeCookie, error) {
+	raw, err := base64.RawURLEncoding.DecodeString(encoded)
 	if err != nil {
 		return nil, fmt.Errorf("%w: failed to decode: %w", ErrCookieMalformed, err)
 	}
+	if len(raw) < 1 {
+		return nil, fmt.Errorf("%w: empty cookie", ErrCookieMalformed)
+	}
+
+	switch raw[0] {
+	case cookieVersionV0:
+		return openCookieV0Bytes(raw[1:], masterCookieKey, aad, time.Now())
+	default:
+		return nil, fmt.Errorf("%w: 0x%02x", ErrCookieVersion, raw[0])
+	}
+}
 
-	key, err := deriveKey(secret)
+func openCookieV0Bytes(body []byte, masterCookieKey []byte, aad []byte, now time.Time) (*pb.ChallengeCookie, error) {
+	key, err := deriveKey(masterCookieKey)
 	if err != nil {
 		return nil, err
 	}
@@ -87,19 +146,28 @@ func openCookie(encoded string, secret string, aad []byte) (*pb.ChallengeCookie,
 	}
 
 	nonceSize := gcm.NonceSize()
-	if len(ciphertext) < nonceSize {
+	if len(body) < nonceSize {
 		return nil, fmt.Errorf("%w: ciphertext too short", ErrCookieMalformed)
 	}
 
-	nonce, ciphertext := ciphertext[:nonceSize], ciphertext[nonceSize:]
+	nonce, ciphertext := body[:nonceSize], body[nonceSize:]
 
 	plaintext, err := gcm.Open(nil, nonce, ciphertext, aad)
 	if err != nil {
 		return nil, fmt.Errorf("%w: %w", ErrCookieSignature, err)
 	}
 
+	if len(plaintext) < cookiePlaintextHeaderLen {
+		return nil, fmt.Errorf("%w: plaintext shorter than not_after header", ErrCookieMalformed)
+	}
+
+	notAfter := int64(binary.BigEndian.Uint64(plaintext[:cookiePlaintextHeaderLen]))
+	if notAfter <= now.Unix() {
+		return nil, fmt.Errorf("%w: not_after=%d now=%d", ErrCookieExpired, notAfter, now.Unix())
+	}
+
 	envelope := &pb.ChallengeCookie{}
-	if err := proto.Unmarshal(plaintext, envelope); err != nil {
+	if err := proto.Unmarshal(plaintext[cookiePlaintextHeaderLen:], envelope); err != nil {
 		return nil, fmt.Errorf("%w: %w", ErrCookiePayload, err)
 	}
 
diff --git a/pkg/appsec/challenge/dynamic_module.go b/pkg/appsec/challenge/dynamic_module.go
new file mode 100644
index 00000000000..37e56f05f90
--- /dev/null
+++ b/pkg/appsec/challenge/dynamic_module.go
@@ -0,0 +1,182 @@
+package challenge
+
+import (
+	"context"
+	_ "embed"
+	"encoding/hex"
+	"fmt"
+	"strconv"
+	"strings"
+	"text/template"
+	"time"
+
+	log "github.com/sirupsen/logrus"
+)
+
+//go:embed dynamic_module.js.tmpl
+var dynamicModuleTemplate string
+
+// preWarmLeadTime returns how far before the next rotation boundary we want
+// to start obfuscating the upcoming epoch's dynamic module. Capped at 30s
+// (no point starting much earlier — the module is unused until the
+// boundary), floored at 1s so very small rotation intervals don't make the
+// ticker degenerate into a tight loop.
+func (c *ChallengeRuntime) preWarmLeadTime() time.Duration {
+	lead := c.keys.rotationInterval / 4
+	if lead > 30*time.Second {
+		lead = 30 * time.Second
+	}
+	if lead < time.Second {
+		lead = time.Second
+	}
+	return lead
+}
+
+// dynamicModulePreWarmer runs in the background and obfuscates the next
+// epoch's dynamic key module shortly before the rotation boundary, so the
+// first request after a rotation finds the module already cached and pays
+// no obfuscation latency on the request-serving path.
+//
+// The ticker goroutine calls dynamicModuleForEpoch synchronously. The
+// singleflight inside that call coalesces a real request that arrives
+// slightly after the rotation, and time.Ticker drops ticks while the
+// receiver is busy — so successive triggers during a single obfuscation
+// are naturally absorbed.
+func (c *ChallengeRuntime) dynamicModulePreWarmer(ctx context.Context) {
+	leadTime := c.preWarmLeadTime()
+	tick := time.NewTicker(leadTime)
+	defer tick.Stop()
+
+	intervalSecs := int64(c.keys.rotationInterval / time.Second)
+
+	for {
+		select {
+		case <-ctx.Done():
+			return
+		case <-tick.C:
+			now := c.keys.now()
+			current := c.keys.CurrentEpoch()
+			nextBoundary := time.Unix((current+1)*intervalSecs, 0)
+
+			// Skip ticks that are not yet inside the lead-time window
+			// before the next boundary — pre-warming a far-future epoch
+			// would waste CPU on a module that might never be served.
+			if nextBoundary.Sub(now) > leadTime {
+				continue
+			}
+
+			nextEpoch := current + 1
+			log.WithFields(log.Fields{
+				"epoch":               nextEpoch,
+				"current_epoch":       current,
+				"seconds_to_boundary": int64(nextBoundary.Sub(now).Seconds()),
+			}).Info("WAF challenge: pre-warming dynamic key module for upcoming epoch")
+
+			if _, err := c.dynamicModuleForEpoch(ctx, nextEpoch); err != nil {
+				log.WithError(err).WithField("epoch", nextEpoch).
+					Warn("WAF challenge: pre-warm of next epoch failed; first request after rotation will pay obfuscation cost")
+			}
+		}
+	}
+}
+
+// dynamicModuleForEpoch returns the obfuscated per-epoch key module for the
+// given epoch, deriving the per-epoch key on demand from the keyring. The
+// result is cached; concurrent calls for the same epoch are coalesced via
+// singleflight so only one obfuscation runs even under a thundering-herd
+// arrival pattern at a rotation boundary.
+//
+// The cache mutex is only held for the fast read/write of the map, never
+// across the obfuscation call — concurrent requests for the same epoch
+// coalesce via singleflight rather than serialize on the mutex.
+func (c *ChallengeRuntime) dynamicModuleForEpoch(ctx context.Context, epoch int64) (string, error) {
+	// Fast path: cached.
+	c.dynamicModuleCacheMu.RLock()
+	if cached, ok := c.dynamicModuleCache[epoch]; ok {
+		c.dynamicModuleCacheMu.RUnlock()
+		return cached, nil
+	}
+	c.dynamicModuleCacheMu.RUnlock()
+
+	// Slow path: deduplicate concurrent obfuscation calls for the same
+	// epoch. Only one goroutine runs the obfuscator; the others block on
+	// the singleflight result. The key is the epoch itself, formatted as
+	// a string.
+	key := strconv.FormatInt(epoch, 10)
+	v, err, _ := c.dynamicModuleSF.Do(key, func() (interface{}, error) {
+		// Re-check the cache inside the singleflight callback in case
+		// another goroutine populated it between the fast-path read and
+		// our entry into Do.
+		c.dynamicModuleCacheMu.RLock()
+		if cached, ok := c.dynamicModuleCache[epoch]; ok {
+			c.dynamicModuleCacheMu.RUnlock()
+			return cached, nil
+		}
+		c.dynamicModuleCacheMu.RUnlock()
+
+		signKey, ok := c.keys.SignKey(epoch)
+		if !ok {
+			return "", fmt.Errorf("epoch %d is outside the keyring live window", epoch)
+		}
+
+		tmpl, err := template.New("dynamic-module").Parse(dynamicModuleTemplate)
+		if err != nil {
+			return "", fmt.Errorf("parse dynamic module template: %w", err)
+		}
+		var rendered strings.Builder
+		if err := tmpl.Execute(&rendered, map[string]interface{}{
+			"Key":   hex.EncodeToString(signKey),
+			"Epoch": epoch,
+		}); err != nil {
+			return "", fmt.Errorf("render dynamic module template: %w", err)
+		}
+		inputSize := rendered.Len()
+
+		obfuscateStart := time.Now()
+		obfuscated, err := c.ObfuscateJS(ctx, rendered.String())
+		obfuscateDuration := time.Since(obfuscateStart)
+		if err != nil {
+			return "", fmt.Errorf("obfuscate dynamic module: %w", err)
+		}
+		if obfuscated == "" {
+			return "", fmt.Errorf("obfuscator produced empty dynamic module output")
+		}
+
+		log.WithFields(log.Fields{
+			"epoch":        epoch,
+			"input_bytes":  inputSize,
+			"output_bytes": len(obfuscated),
+			"duration_ms":  obfuscateDuration.Milliseconds(),
+		}).Info("WAF challenge: obfuscated dynamic key module for new epoch")
+
+		c.dynamicModuleCacheMu.Lock()
+		// Prune any cached modules whose epoch has fallen out of the
+		// live window before inserting the new one.
+		live := make(map[int64]bool, len(c.dynamicModuleCache))
+		for _, e := range c.keys.LiveEpochs() {
+			live[e] = true
+		}
+		for e := range c.dynamicModuleCache {
+			if !live[e] {
+				delete(c.dynamicModuleCache, e)
+			}
+		}
+		c.dynamicModuleCache[epoch] = obfuscated
+		c.dynamicModuleCacheMu.Unlock()
+
+		return obfuscated, nil
+	})
+	if err != nil {
+		return "", err
+	}
+
+	return v.(string), nil
+}
+
+// currentDynamicModule returns (or builds) the dynamic key module for the
+// keyring's current epoch. Thin wrapper around dynamicModuleForEpoch that
+// hides the "look up the current epoch" boilerplate from callers.
+func (c *ChallengeRuntime) currentDynamicModule(ctx context.Context) (string, error) {
+	epoch, _ := c.keys.Current()
+	return c.dynamicModuleForEpoch(ctx, epoch)
+}
diff --git a/pkg/appsec/challenge/dynamic_module.js.tmpl b/pkg/appsec/challenge/dynamic_module.js.tmpl
new file mode 100644
index 00000000000..ecf2859e049
--- /dev/null
+++ b/pkg/appsec/challenge/dynamic_module.js.tmpl
@@ -0,0 +1,32 @@
+// dynamic_module.js.tmpl is the template for the per-epoch dynamic module
+// that is obfuscated at runtime when the keyring rotates. It is small (a
+// few dozen lines) so the obfuscation cost is bounded — the heavyweight
+// fingerprint scanner / crypto code lives in the static bundle and is
+// pre-obfuscated at build time.
+//
+// The {{.Key}} placeholder is replaced with the hex-encoded per-epoch HMAC
+// key. {{.Epoch}} is the integer epoch identifier. The hook name string
+// MUST match the CSEC_HOOK_NAME constant in challenge.js so the static
+// bundle and dynamic module agree on the global symbol after obfuscation.
+//
+// reservedStrings registration in obfuscate.js prevents the obfuscator's
+// string-array transform from rewriting the hook name (which would break
+// the cross-bundle handshake). The KEY string is intentionally NOT
+// reserved — we want the obfuscator to encode it.
+(function () {
+  var hookName = "__CSEC_CHALLENGE_HOOK_v1__";
+  var key = "{{.Key}}";
+  var epoch = {{.Epoch}};
+
+  // The static bundle registers the hook synchronously at module load. If
+  // for some reason it is not present yet, retry on a microtask.
+  function invoke() {
+    var hook = globalThis[hookName];
+    if (typeof hook === "function") {
+      hook({ key: key, epoch: epoch });
+      return;
+    }
+    setTimeout(invoke, 10);
+  }
+  invoke();
+})();
diff --git a/pkg/appsec/challenge/feasibility_benchmark_test.go b/pkg/appsec/challenge/feasibility_benchmark_test.go
new file mode 100644
index 00000000000..1c6ac873ffc
--- /dev/null
+++ b/pkg/appsec/challenge/feasibility_benchmark_test.go
@@ -0,0 +1,139 @@
+//go:build feasibility
+
+package challenge
+
+// Step 0 feasibility benchmark for the split-bundle plan.
+//
+// Goals:
+//   - Measure ObfuscateJS wall-clock cost on a small dynamic-module-shaped input
+//     vs. the full challenge bundle, to validate the assumption that splitting
+//     the bundle reduces obfuscation cost from ~1 minute to sub-second/few-second.
+//   - Sanity-check that the existing WASM pipeline accepts a tiny input without
+//     errors.
+//
+// Run with:
+//   go test -v -run TestFeasibility -tags=feasibility ./pkg/appsec/challenge/
+//   go test -v -bench BenchmarkObfuscate -benchtime=1x -tags=feasibility ./pkg/appsec/challenge/
+//
+// The build tag keeps these out of the normal CI run since each invocation
+// takes tens of seconds to a minute.
+
+import (
+	"context"
+	"testing"
+	"time"
+)
+
+// dynamicModuleSample mimics the shape of the per-epoch dynamic module that
+// the split-bundle plan introduces. ~30 lines of JS, contains a sentinel
+// string for the `globalThis` hook lookup and a hex key literal.
+const dynamicModuleSample = `(() => {
+  const k = "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef";
+  const e = 1234567890;
+  const hookName = "__CSEC_HOOK_4f3c0a9e__";
+
+  function waitForHook(name, cb, attempts) {
+    if (attempts === undefined) attempts = 200;
+    if (typeof globalThis[name] === "function") {
+      cb(globalThis[name]);
+      return;
+    }
+    if (attempts <= 0) return;
+    setTimeout(() => waitForHook(name, cb, attempts - 1), 10);
+  }
+
+  waitForHook(hookName, (hook) => {
+    try {
+      hook({ key: k, epoch: e });
+    } catch (err) {
+      console.error("challenge dynamic module: hook invocation failed", err);
+    }
+  });
+})();
+`
+
+func newRuntimeForBench(tb testing.TB) *ChallengeRuntime {
+	tb.Helper()
+	ctx := context.Background()
+	rt, err := NewChallengeRuntime(ctx)
+	if err != nil {
+		tb.Fatalf("NewChallengeRuntime: %v", err)
+	}
+	return rt
+}
+
+// TestFeasibilityDynamicModuleObfuscation runs ObfuscateJS once on the small
+// dynamic-module-shaped input and reports the wall-clock cost.
+func TestFeasibilityDynamicModuleObfuscation(t *testing.T) {
+	rt := newRuntimeForBench(t)
+
+	// Warm up the WASM runtime (first call pays init cost we don't want to count).
+	warmStart := time.Now()
+	_, err := rt.ObfuscateJS(context.Background(), `const x = 1;`)
+	if err != nil {
+		t.Fatalf("warmup ObfuscateJS: %v", err)
+	}
+	t.Logf("warmup obfuscation (1-line input):   %s", time.Since(warmStart))
+
+	// Measured run: the realistic dynamic-module-shaped input.
+	start := time.Now()
+	out, err := rt.ObfuscateJS(context.Background(), dynamicModuleSample)
+	dur := time.Since(start)
+	if err != nil {
+		t.Fatalf("ObfuscateJS dynamic-module sample: %v", err)
+	}
+	t.Logf("dynamic-module-sample obfuscation:   %s", dur)
+	t.Logf("input size:  %d bytes", len(dynamicModuleSample))
+	t.Logf("output size: %d bytes", len(out))
+
+	if len(out) == 0 {
+		t.Fatalf("obfuscator returned empty output")
+	}
+
+	// Verdict per the plan:
+	//   <1s   -> high-obfuscation viable for dynamic module (ideal)
+	//   1-5s  -> still acceptable for "every few minutes" rotation
+	//   >5s   -> downgrade to medium-obfuscation
+	switch {
+	case dur < time.Second:
+		t.Logf("VERDICT: high-obfuscation viable for dynamic module (<1s)")
+	case dur < 5*time.Second:
+		t.Logf("VERDICT: high-obfuscation acceptable for dynamic module (1-5s)")
+	default:
+		t.Logf("VERDICT: high-obfuscation too slow for dynamic module (>5s); plan to downgrade to medium-obfuscation")
+	}
+}
+
+// TestFeasibilityFullBundleObfuscation establishes the baseline cost — the full
+// challenge bundle through the same pipeline. This is the ~1 minute we are
+// trying to eliminate from the runtime path.
+func TestFeasibilityFullBundleObfuscation(t *testing.T) {
+	rt := newRuntimeForBench(t)
+	bundle := rt.buildChallengeBundle()
+
+	t.Logf("full bundle input size: %d bytes", len(bundle))
+
+	start := time.Now()
+	out, err := rt.ObfuscateJS(context.Background(), bundle)
+	dur := time.Since(start)
+	if err != nil {
+		t.Fatalf("ObfuscateJS full bundle: %v", err)
+	}
+	t.Logf("full-bundle obfuscation: %s", dur)
+	t.Logf("output size: %d bytes", len(out))
+}
+
+// BenchmarkObfuscateDynamicModule runs the dynamic-module-shaped input
+// repeatedly. Use -benchtime=Nx to control iteration count.
+func BenchmarkObfuscateDynamicModule(b *testing.B) {
+	rt := newRuntimeForBench(b)
+	ctx := context.Background()
+
+	b.ResetTimer()
+	for i := 0; i < b.N; i++ {
+		_, err := rt.ObfuscateJS(ctx, dynamicModuleSample)
+		if err != nil {
+			b.Fatalf("ObfuscateJS: %v", err)
+		}
+	}
+}
diff --git a/pkg/appsec/challenge/initial_bundle.js.gz b/pkg/appsec/challenge/initial_bundle.js.gz
new file mode 100644
index 00000000000..09309c33cc5
Binary files /dev/null and b/pkg/appsec/challenge/initial_bundle.js.gz differ
diff --git a/pkg/appsec/challenge/initial_bundle_test.go b/pkg/appsec/challenge/initial_bundle_test.go
new file mode 100644
index 00000000000..b172b7fe247
--- /dev/null
+++ b/pkg/appsec/challenge/initial_bundle_test.go
@@ -0,0 +1,63 @@
+package challenge
+
+import (
+	"context"
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/require"
+)
+
+// TestNewChallengeRuntimeStartupBudget ensures NewChallengeRuntime returns
+// quickly (seeded from the baked-in bundle), without paying the ~1 minute of
+// synchronous obfuscation it used to.
+func TestNewChallengeRuntimeStartupBudget(t *testing.T) {
+	const budget = 10 * time.Second
+
+	start := time.Now()
+	rt, err := NewChallengeRuntime(context.Background())
+	dur := time.Since(start)
+
+	require.NoError(t, err)
+	require.NotNil(t, rt)
+	t.Logf("NewChallengeRuntime returned in %s", dur)
+
+	if dur > budget {
+		t.Fatalf("NewChallengeRuntime took %s, exceeds budget of %s; baked-in initial bundle should make this near-instant", dur, budget)
+	}
+
+	// The cache must hold at least the seeded bundle so the very first request
+	// can be served.
+	got := rt.getCachedChallengeJS()
+	require.NotEmpty(t, got.Code, "cache should be seeded with the baked-in initial bundle")
+}
+
+// TestSeedCacheFromInitialBundle directly exercises the seeding helper and
+// asserts the bundle decompresses to non-empty obfuscated JS.
+func TestSeedCacheFromInitialBundle(t *testing.T) {
+	rt := &ChallengeRuntime{
+		obfuscatedJSCache: make([]obfuscatedScript, 0, challengeJSCacheSize),
+	}
+
+	require.NoError(t, rt.seedCacheFromInitialBundle())
+
+	rt.cacheMutex.RLock()
+	defer rt.cacheMutex.RUnlock()
+	require.Len(t, rt.obfuscatedJSCache, 1)
+	require.NotEmpty(t, rt.obfuscatedJSCache[0].Code)
+
+	// Sanity check: the obfuscated output should be much larger than the
+	// source bundle (high-obfuscation roughly 20x inflation observed in the
+	// feasibility benchmark).
+	t.Logf("seeded variant size: %d bytes", len(rt.obfuscatedJSCache[0].Code))
+	require.Greater(t, len(rt.obfuscatedJSCache[0].Code), 100_000,
+		"seeded bundle is suspiciously small; was it actually obfuscated?")
+
+	// The placeholders that the source bundle uses for path substitution must
+	// have been replaced before obfuscation (their literal form should not
+	// remain in the output).
+	require.NotContains(t, rt.obfuscatedJSCache[0].Code, "__CROWDSEC_SUBMIT_PATH__",
+		"submit path placeholder still present; substitution missed at build time")
+	require.NotContains(t, rt.obfuscatedJSCache[0].Code, "__CROWDSEC_POW_WORKER_PATH__",
+		"pow worker path placeholder still present; substitution missed at build time")
+}
diff --git a/pkg/appsec/challenge/js/README.md b/pkg/appsec/challenge/js/README.md
new file mode 100644
index 00000000000..a9f4e937efc
--- /dev/null
+++ b/pkg/appsec/challenge/js/README.md
@@ -0,0 +1,96 @@
+# WAF challenge JS pipeline
+
+This directory holds the JavaScript sources that the WAF challenge runtime
+serves to clients, and the build-time tools that turn them into the
+artifacts embedded in the crowdsec binary.
+
+End users running `make build` do **not** need any of the tools below —
+the generated artifacts are committed to the repository and pulled in via
+`//go:embed`. The pipeline is only exercised when someone intentionally
+changes the JS sources.
+
+## What gets generated
+
+Three pipeline steps, all driven by `go:generate` directives in
+`generate.go`:
+
+| Step | Tool used | Output | Used at runtime by |
+|---|---|---|---|
+| `cmd/bundle` | esbuild (Go module) | `fpscanner/bundle.js` | The runtime obfuscator (input) |
+| `cmd/obfuscate` | esbuild + `javy` | `obfuscate/index.wasm.gz` | `wazero` to obfuscate the dynamic key module per epoch |
+| `cmd/initialbundle` | `wazero` running the obfuscator wasm | `../initial_bundle.js.gz` | Seeded into the challenge cache at startup so the service is ready in seconds, not minutes |
+
+`fpscanner/bundle.js` is itself a transformed copy of `../challenge.js`
+plus the `fpscanner/src/*` TypeScript sources, bundled to a single
+ES2022 module by esbuild.
+
+`obfuscate/obfuscate.js` is a small driver around the vendored
+`obfuscate/javascript-obfuscator.js` (≈1.6 MB, kept in tree so we don't
+pull from npm at build time). The driver reads source code from stdin,
+runs `JavaScriptObfuscator.obfuscate(...)` with the `high-obfuscation`
+preset (plus a `reservedStrings` entry for the `__CSEC_CHALLENGE_HOOK_v1__`
+sentinel that bridges the static and dynamic bundles), and writes the
+obfuscated code to stdout. `javy` then compiles that driver to a WASM
+module.
+
+## How to regenerate
+
+```sh
+make generate-challenge-js
+```
+
+Or directly:
+
+```sh
+go generate ./pkg/appsec/challenge/js/...
+```
+
+Both invocations require `javy` (the Bytecode Alliance JS-to-WASM
+compiler) to be on `PATH`. There is no apt/brew package; install via
+the upstream releases:
+
+```sh
+curl -sL -o javy.gz \
+  https://github.com/bytecodealliance/javy/releases/download/v8.1.1/javy-x86_64-linux-v8.1.1.gz
+gunzip javy.gz && chmod +x javy && mv javy /usr/local/bin/
+```
+
+(Substitute the platform suffix for macOS/Windows.) `javy` is
+**build-time only** — it is not a runtime dependency of crowdsec.
+
+The full regeneration takes about a minute on a modern laptop because
+the obfuscator's `high-obfuscation` preset runs heavy
+control-flow-flattening + string-array transforms over the ~37 KB
+fpscanner bundle.
+
+## When to regenerate
+
+Run `make generate-challenge-js` after changing any of:
+
+- `pkg/appsec/challenge/challenge.js`
+- `pkg/appsec/challenge/dynamic_module.js.tmpl`
+- `pkg/appsec/challenge/js/fpscanner/src/**/*.ts`
+- `pkg/appsec/challenge/js/obfuscate/obfuscate.js`
+- The vendored `pkg/appsec/challenge/js/obfuscate/javascript-obfuscator.js`
+  (only when intentionally upgrading)
+
+The pipeline output bytes (`bundle.js`, `index.wasm.gz`,
+`initial_bundle.js.gz`) are committed so a clean `git clone` builds and
+runs without javy.
+
+## Sentinel survival
+
+The `__CSEC_CHALLENGE_HOOK_v1__` literal must appear verbatim in both
+the static bundle (`initial_bundle.js.gz`) and any dynamic key module
+generated at runtime, so the two bundles meet at the same `globalThis`
+key after independent obfuscation passes. The
+`reservedStrings: ["__CSEC_CHALLENGE_HOOK_v1__"]` option in
+`obfuscate/obfuscate.js` is what guarantees this. If you change the
+sentinel string, change it in **all three** places:
+
+- `obfuscate/obfuscate.js` — `reservedStrings`
+- `pkg/appsec/challenge/challenge.js` — `CSEC_HOOK_NAME`
+- `pkg/appsec/challenge/dynamic_module.js.tmpl` — `hookName`
+
+The Go-side regression test
+`TestSplitBundle_HookSentinelInBakedBundle` will fire on a mismatch.
diff --git a/pkg/appsec/challenge/js/cmd/initialbundle/main.go b/pkg/appsec/challenge/js/cmd/initialbundle/main.go
new file mode 100644
index 00000000000..5b662d0ec58
--- /dev/null
+++ b/pkg/appsec/challenge/js/cmd/initialbundle/main.go
@@ -0,0 +1,173 @@
+// initialbundle is a build-time tool that produces a pre-obfuscated initial
+// challenge bundle, embedded into the Go binary. This eliminates the ~1 minute
+// of synchronous obfuscation that NewChallengeRuntime would otherwise have to
+// pay at startup before the service is ready to serve challenges.
+//
+// Pipeline:
+//
+//   fpscanner/bundle.js  ──substitute placeholders──▶  source JS
+//   obfuscate/index.wasm.gz ──decompress──▶ obfuscator WASM
+//   wazero(obfuscator).Run(stdin=source) ──▶ obfuscated JS
+//   gzip ──▶ ../initial_bundle.js.gz
+//
+// The output `initial_bundle.js.gz` is committed and embedded via go:embed in
+// pkg/appsec/challenge/challenge.go.
+package main
+
+import (
+	"bytes"
+	"compress/gzip"
+	"context"
+	"fmt"
+	"io"
+	"os"
+	"strings"
+	"time"
+
+	"github.com/tetratelabs/wazero"
+	"github.com/tetratelabs/wazero/imports/wasi_snapshot_preview1"
+)
+
+// These must match the ChallengeSubmitPath / ChallengePowWorkerPath constants
+// in pkg/appsec/challenge/challenge.go. Kept as plain strings here to avoid an
+// import cycle (pkg/appsec/challenge depends on this js subpackage).
+const (
+	submitPath    = "/crowdsec-internal/challenge/submit"
+	powWorkerPath = "/crowdsec-internal/challenge/pow-worker.js"
+)
+
+const (
+	// Inputs (relative to pkg/appsec/challenge/js where this tool runs).
+	fpscannerBundlePath = "fpscanner/bundle.js"
+	obfuscatorWasmGz    = "obfuscate/index.wasm.gz"
+	// Output (relative to pkg/appsec/challenge/js).
+	outputPath = "../initial_bundle.js.gz"
+)
+
+func main() {
+	start := time.Now()
+
+	if err := run(); err != nil {
+		fmt.Fprintf(os.Stderr, "initialbundle: %v\n", err)
+		os.Exit(1)
+	}
+
+	fmt.Fprintf(os.Stderr, "initialbundle: wrote %s in %s\n", outputPath, time.Since(start).Round(time.Second))
+}
+
+func run() error {
+	source, err := buildSourceBundle()
+	if err != nil {
+		return fmt.Errorf("build source bundle: %w", err)
+	}
+
+	wasmBytes, err := loadObfuscatorWasm()
+	if err != nil {
+		return fmt.Errorf("load obfuscator wasm: %w", err)
+	}
+
+	ctx := context.Background()
+	r := wazero.NewRuntime(ctx)
+	defer r.Close(ctx)
+
+	if _, err := wasi_snapshot_preview1.Instantiate(ctx, r); err != nil {
+		return fmt.Errorf("instantiate wasi: %w", err)
+	}
+
+	compiled, err := r.CompileModule(ctx, wasmBytes)
+	if err != nil {
+		return fmt.Errorf("compile obfuscator wasm: %w", err)
+	}
+
+	obfuscated, err := obfuscate(ctx, r, compiled, source)
+	if err != nil {
+		return fmt.Errorf("obfuscate: %w", err)
+	}
+
+	if len(obfuscated) == 0 {
+		return fmt.Errorf("obfuscator produced empty output")
+	}
+
+	if err := writeGzip(outputPath, obfuscated); err != nil {
+		return fmt.Errorf("write %s: %w", outputPath, err)
+	}
+
+	fmt.Fprintf(os.Stderr, "initialbundle: input %d bytes -> obfuscated %d bytes -> compressed file written\n",
+		len(source), len(obfuscated))
+
+	return nil
+}
+
+func buildSourceBundle() (string, error) {
+	raw, err := os.ReadFile(fpscannerBundlePath)
+	if err != nil {
+		return "", fmt.Errorf("read %s: %w", fpscannerBundlePath, err)
+	}
+
+	// Same substitution as ChallengeRuntime.buildChallengeBundle in challenge.go.
+	source := strings.NewReplacer(
+		"__CROWDSEC_SUBMIT_PATH__", submitPath,
+		"__CROWDSEC_POW_WORKER_PATH__", powWorkerPath,
+	).Replace(string(raw))
+
+	return source, nil
+}
+
+func loadObfuscatorWasm() ([]byte, error) {
+	f, err := os.Open(obfuscatorWasmGz)
+	if err != nil {
+		return nil, err
+	}
+	defer f.Close()
+
+	gz, err := gzip.NewReader(f)
+	if err != nil {
+		return nil, fmt.Errorf("gzip reader: %w", err)
+	}
+	defer gz.Close()
+
+	return io.ReadAll(gz)
+}
+
+func obfuscate(ctx context.Context, r wazero.Runtime, compiled wazero.CompiledModule, source string) (string, error) {
+	stdin := bytes.NewReader([]byte(source))
+	var stdout, stderr bytes.Buffer
+
+	cfg := wazero.NewModuleConfig().
+		WithStdin(stdin).
+		WithStdout(&stdout).
+		WithStderr(&stderr)
+
+	mod, err := r.InstantiateModule(ctx, compiled, cfg)
+	if err != nil {
+		if stderr.Len() > 0 {
+			return "", fmt.Errorf("wasm runtime error: %v | stderr: %s", err, stderr.String())
+		}
+		return "", fmt.Errorf("wasm instantiation: %w", err)
+	}
+	mod.Close(ctx)
+
+	return stdout.String(), nil
+}
+
+func writeGzip(path string, data string) error {
+	f, err := os.Create(path)
+	if err != nil {
+		return err
+	}
+	defer f.Close()
+
+	zw, err := gzip.NewWriterLevel(f, gzip.BestCompression)
+	if err != nil {
+		return fmt.Errorf("gzip writer: %w", err)
+	}
+	zw.Name = "initial_bundle.js"
+	zw.ModTime = time.Unix(0, 0)
+
+	if _, err := zw.Write([]byte(data)); err != nil {
+		zw.Close()
+		return err
+	}
+
+	return zw.Close()
+}
diff --git a/pkg/appsec/challenge/js/fpscanner/bundle.js b/pkg/appsec/challenge/js/fpscanner/bundle.js
index a2ee21b7f03..ee8f97caf76 100644
--- a/pkg/appsec/challenge/js/fpscanner/bundle.js
+++ b/pkg/appsec/challenge/js/fpscanner/bundle.js
@@ -1,4 +1,4 @@
-function q(){return navigator.webdriver}function J(){return navigator.userAgent}function Y(){return navigator.platform}var c="ERROR",n="INIT";var S="SKIPPED",y="high";var Z="medium";function h(t){let e=0;for(let r=0,i=t.length;r<i;r++){let o=t.charCodeAt(r);e=(e<<5)-e+o,e|=0}return e.toString(16).padStart(8,"0")}function m(t,e){for(let r in t)t[r]=e}function X(){return navigator.buildID==="20181001000000"}function ee(){try{let t=!1,e=Error.prepareStackTrace;Error.prepareStackTrace=function(){return t=!0,e};let r=new Error("");return console.log(r),t}catch{return c}}function te(){let t={vendor:n,renderer:n};if(X())return m(t,"NA"),t;try{var e=document.createElement("canvas"),r=e.getContext("webgl")||e.getContext("experimental-webgl");r.getSupportedExtensions().indexOf("WEBGL_debug_renderer_info")>=0?(t.vendor=r.getParameter(r.getExtension("WEBGL_debug_renderer_info").UNMASKED_VENDOR_WEBGL),t.renderer=r.getParameter(r.getExtension("WEBGL_debug_renderer_info").UNMASKED_RENDERER_WEBGL)):m(t,"NA")}catch{m(t,c)}return t}function re(){return"__pwInitScripts"in window||"__playwright__binding__"in window}function ne(){return navigator.hardwareConcurrency||"NA"}function ie(){let t=[],e=.123456789;return["E","LN10","LN2","LOG10E","LOG2E","PI","SQRT1_2","SQRT2"].forEach(function(o){try{t.push(Math[o])}catch{t.push(-1)}}),["tan","sin","exp","atan","acosh","asinh","atanh","expm1","log1p","sinh"].forEach(function(o){try{t.push(Math[o](e))}catch{t.push(-1)}}),h(t.map(String).join(","))}function oe(){return navigator.deviceMemory||"NA"}function ae(){return eval.toString().length}function se(){let t={timezone:n,localeLanguage:n};try{if(typeof Intl<"u"&&typeof Intl.DateTimeFormat<"u"){let e=Intl.DateTimeFormat().resolvedOptions();t.timezone=e.timeZone,t.localeLanguage=e.locale}else t.timezone="NA",t.localeLanguage="NA"}catch{t.timezone=c,t.localeLanguage=c}return t}function ce(){return{width:window.screen.width,height:window.screen.height,pixelDepth:window.screen.pixelDepth,colorDepth:window.screen.colorDepth,availableWidth:window.screen.availWidth,availableHeight:window.screen.availHeight,innerWidth:window.innerWidth,innerHeight:window.innerHeight,hasMultipleDisplays:typeof screen.isExtended<"u"?screen.isExtended:"NA"}}function le(){return{languages:navigator.languages,language:navigator.language}}async function ue(){let t={vendor:n,architecture:n,device:n,description:n};if("gpu"in navigator)try{let e=await navigator.gpu.requestAdapter();e&&(t.vendor=e.info.vendor,t.architecture=e.info.architecture,t.device=e.info.device,t.description=e.info.description)}catch{m(t,c)}else m(t,"NA");return t}function de(){let t=["__driver_evaluate","__webdriver_evaluate","__selenium_evaluate","__fxdriver_evaluate","__driver_unwrapped","__webdriver_unwrapped","__selenium_unwrapped","__fxdriver_unwrapped","_Selenium_IDE_Recorder","_selenium","calledSelenium","$cdc_asdjflasutopfhvcZLmcfl_","$chrome_asyncScriptInfo","__$webdriverAsyncExecutor","webdriver","__webdriverFunc","domAutomation","domAutomationController","__lastWatirAlert","__lastWatirConfirm","__lastWatirPrompt","__webdriver_script_fn","_WEBDRIVER_ELEM_CACHE"],e=!1;for(let r=0;r<t.length;r++)if(t[r]in window){e=!0;break}return e=e||!!document.__webdriver_script_fn||!!window.domAutomation||!!window.domAutomationController,e}function pe(){try{let t="webdriver",e=window.navigator;if(!e[t]&&!e.hasOwnProperty(t)){e[t]=1;let r=e[t]===1;return delete e[t],r}return!0}catch{return!1}}async function me(){let t=window.navigator,e={architecture:n,bitness:n,brands:n,mobile:n,model:n,platform:n,platformVersion:n,uaFullVersion:n};if("userAgentData"in t)try{let r=await t.userAgentData.getHighEntropyValues(["architecture","bitness","brands","mobile","model","platform","platformVersion","uaFullVersion"]);e.architecture=r.architecture,e.bitness=r.bitness,e.brands=r.brands,e.mobile=r.mobile,e.model=r.model,e.platform=r.platform,e.platformVersion=r.platformVersion,e.uaFullVersion=r.uaFullVersion}catch{m(e,c)}else m(e,"NA");return e}function vt(){if(!navigator.plugins)return!1;let t=typeof navigator.plugins.toString=="function"?navigator.plugins.toString():navigator.plugins.constructor&&typeof navigator.plugins.constructor.toString=="function"?navigator.plugins.constructor.toString():typeof navigator.plugins;return t==="[object PluginArray]"||t==="[object MSPluginsCollection]"||t==="[object HTMLPluginsCollection]"}function wt(){if(!navigator.plugins)return"NA";let t=[];for(let e=0;e<navigator.plugins.length;e++)t.push(navigator.plugins[e].name);return h(t.join(","))}function bt(){return navigator.plugins?navigator.plugins.length:"NA"}function xt(){if(!navigator.plugins)return"NA";try{return navigator.plugins[0]===navigator.plugins[0][0].enabledPlugin}catch{return c}}function St(){if(!navigator.plugins)return"NA";try{return navigator.plugins.item(4294967296)!==navigator.plugins[0]}catch{return c}}function ge(){let t={isValidPluginArray:n,pluginCount:n,pluginNamesHash:n,pluginConsistency1:n,pluginOverflow:n};try{t.isValidPluginArray=vt(),t.pluginCount=bt(),t.pluginNamesHash=wt(),t.pluginConsistency1=xt(),t.pluginOverflow=St()}catch{m(t,c)}return t}async function fe(){return new Promise(async function(t){var e={audiooutput:0,audioinput:0,videoinput:0};if(navigator.mediaDevices&&navigator.mediaDevices.enumerateDevices){let o=await navigator.mediaDevices.enumerateDevices();if(typeof o<"u"){for(var r=0;r<o.length;r++){var i=o[r].kind;e[i]=e[i]+1}return t({speakers:e.audiooutput,microphones:e.audioinput,webcams:e.videoinput})}else return m(e,"NA"),t(e)}else return m(e,"NA"),t(e)})}function he(){let t={webdriver:n,userAgent:n,platform:n,memory:n,cpuCount:n,language:n},e=document.createElement("iframe"),r=!1;try{e.style.display="none",e.src="about:blank",document.body.appendChild(e),r=!0;let i=e.contentWindow?.navigator;t.webdriver=i.webdriver??!1,t.userAgent=i.userAgent??"NA",t.platform=i.platform??"NA",t.memory=i.deviceMemory??"NA",t.cpuCount=i.hardwareConcurrency??"NA",t.language=i.language??"NA"}catch{m(t,c)}finally{if(r)try{document.body.removeChild(e)}catch{}}return t}async function ye(){return new Promise(t=>{let e={vendor:n,renderer:n,userAgent:n,language:n,platform:n,memory:n,cpuCount:n},r=null,i=null,o=null,u=()=>{o&&clearTimeout(o),r&&r.terminate(),i&&URL.revokeObjectURL(i)};try{let l=`try {
+function J(){return navigator.webdriver}function Y(){return navigator.userAgent}function Z(){return navigator.platform}var c="ERROR",n="INIT";var S="SKIPPED",y="high";var X="medium";function h(t){let e=0;for(let r=0,i=t.length;r<i;r++){let o=t.charCodeAt(r);e=(e<<5)-e+o,e|=0}return e.toString(16).padStart(8,"0")}function g(t,e){for(let r in t)t[r]=e}function ee(){return navigator.buildID==="20181001000000"}function te(){try{let t=!1,e=Error.prepareStackTrace;Error.prepareStackTrace=function(){return t=!0,e};let r=new Error("");return console.log(r),t}catch{return c}}function re(){let t={vendor:n,renderer:n};if(ee())return g(t,"NA"),t;try{var e=document.createElement("canvas"),r=e.getContext("webgl")||e.getContext("experimental-webgl");r.getSupportedExtensions().indexOf("WEBGL_debug_renderer_info")>=0?(t.vendor=r.getParameter(r.getExtension("WEBGL_debug_renderer_info").UNMASKED_VENDOR_WEBGL),t.renderer=r.getParameter(r.getExtension("WEBGL_debug_renderer_info").UNMASKED_RENDERER_WEBGL)):g(t,"NA")}catch{g(t,c)}return t}function ne(){return"__pwInitScripts"in window||"__playwright__binding__"in window}function ie(){return navigator.hardwareConcurrency||"NA"}function oe(){let t=[],e=.123456789;return["E","LN10","LN2","LOG10E","LOG2E","PI","SQRT1_2","SQRT2"].forEach(function(o){try{t.push(Math[o])}catch{t.push(-1)}}),["tan","sin","exp","atan","acosh","asinh","atanh","expm1","log1p","sinh"].forEach(function(o){try{t.push(Math[o](e))}catch{t.push(-1)}}),h(t.map(String).join(","))}function ae(){return navigator.deviceMemory||"NA"}function se(){return eval.toString().length}function ce(){let t={timezone:n,localeLanguage:n};try{if(typeof Intl<"u"&&typeof Intl.DateTimeFormat<"u"){let e=Intl.DateTimeFormat().resolvedOptions();t.timezone=e.timeZone,t.localeLanguage=e.locale}else t.timezone="NA",t.localeLanguage="NA"}catch{t.timezone=c,t.localeLanguage=c}return t}function le(){return{width:window.screen.width,height:window.screen.height,pixelDepth:window.screen.pixelDepth,colorDepth:window.screen.colorDepth,availableWidth:window.screen.availWidth,availableHeight:window.screen.availHeight,innerWidth:window.innerWidth,innerHeight:window.innerHeight,hasMultipleDisplays:typeof screen.isExtended<"u"?screen.isExtended:"NA"}}function ue(){return{languages:navigator.languages,language:navigator.language}}async function de(){let t={vendor:n,architecture:n,device:n,description:n};if("gpu"in navigator)try{let e=await navigator.gpu.requestAdapter();e&&(t.vendor=e.info.vendor,t.architecture=e.info.architecture,t.device=e.info.device,t.description=e.info.description)}catch{g(t,c)}else g(t,"NA");return t}function pe(){let t=["__driver_evaluate","__webdriver_evaluate","__selenium_evaluate","__fxdriver_evaluate","__driver_unwrapped","__webdriver_unwrapped","__selenium_unwrapped","__fxdriver_unwrapped","_Selenium_IDE_Recorder","_selenium","calledSelenium","$cdc_asdjflasutopfhvcZLmcfl_","$chrome_asyncScriptInfo","__$webdriverAsyncExecutor","webdriver","__webdriverFunc","domAutomation","domAutomationController","__lastWatirAlert","__lastWatirConfirm","__lastWatirPrompt","__webdriver_script_fn","_WEBDRIVER_ELEM_CACHE"],e=!1;for(let r=0;r<t.length;r++)if(t[r]in window){e=!0;break}return e=e||!!document.__webdriver_script_fn||!!window.domAutomation||!!window.domAutomationController,e}function me(){try{let t="webdriver",e=window.navigator;if(!e[t]&&!e.hasOwnProperty(t)){e[t]=1;let r=e[t]===1;return delete e[t],r}return!0}catch{return!1}}async function ge(){let t=window.navigator,e={architecture:n,bitness:n,brands:n,mobile:n,model:n,platform:n,platformVersion:n,uaFullVersion:n};if("userAgentData"in t)try{let r=await t.userAgentData.getHighEntropyValues(["architecture","bitness","brands","mobile","model","platform","platformVersion","uaFullVersion"]);e.architecture=r.architecture,e.bitness=r.bitness,e.brands=r.brands,e.mobile=r.mobile,e.model=r.model,e.platform=r.platform,e.platformVersion=r.platformVersion,e.uaFullVersion=r.uaFullVersion}catch{g(e,c)}else g(e,"NA");return e}function ft(){if(!navigator.plugins)return!1;let t=typeof navigator.plugins.toString=="function"?navigator.plugins.toString():navigator.plugins.constructor&&typeof navigator.plugins.constructor.toString=="function"?navigator.plugins.constructor.toString():typeof navigator.plugins;return t==="[object PluginArray]"||t==="[object MSPluginsCollection]"||t==="[object HTMLPluginsCollection]"}function ht(){if(!navigator.plugins)return"NA";let t=[];for(let e=0;e<navigator.plugins.length;e++)t.push(navigator.plugins[e].name);return h(t.join(","))}function yt(){return navigator.plugins?navigator.plugins.length:"NA"}function vt(){if(!navigator.plugins)return"NA";try{return navigator.plugins[0]===navigator.plugins[0][0].enabledPlugin}catch{return c}}function wt(){if(!navigator.plugins)return"NA";try{return navigator.plugins.item(4294967296)!==navigator.plugins[0]}catch{return c}}function fe(){let t={isValidPluginArray:n,pluginCount:n,pluginNamesHash:n,pluginConsistency1:n,pluginOverflow:n};try{t.isValidPluginArray=ft(),t.pluginCount=yt(),t.pluginNamesHash=ht(),t.pluginConsistency1=vt(),t.pluginOverflow=wt()}catch{g(t,c)}return t}async function he(){return new Promise(async function(t){var e={audiooutput:0,audioinput:0,videoinput:0};if(navigator.mediaDevices&&navigator.mediaDevices.enumerateDevices){let o=await navigator.mediaDevices.enumerateDevices();if(typeof o<"u"){for(var r=0;r<o.length;r++){var i=o[r].kind;e[i]=e[i]+1}return t({speakers:e.audiooutput,microphones:e.audioinput,webcams:e.videoinput})}else return g(e,"NA"),t(e)}else return g(e,"NA"),t(e)})}function ye(){let t={webdriver:n,userAgent:n,platform:n,memory:n,cpuCount:n,language:n},e=document.createElement("iframe"),r=!1;try{e.style.display="none",e.src="about:blank",document.body.appendChild(e),r=!0;let i=e.contentWindow?.navigator;t.webdriver=i.webdriver??!1,t.userAgent=i.userAgent??"NA",t.platform=i.platform??"NA",t.memory=i.deviceMemory??"NA",t.cpuCount=i.hardwareConcurrency??"NA",t.language=i.language??"NA"}catch{g(t,c)}finally{if(r)try{document.body.removeChild(e)}catch{}}return t}async function ve(){return new Promise(t=>{let e={vendor:n,renderer:n,userAgent:n,language:n,platform:n,memory:n,cpuCount:n},r=null,i=null,o=null,l=()=>{o&&clearTimeout(o),r&&r.terminate(),i&&URL.revokeObjectURL(i)};try{let u=`try {
                 var fingerprintWorker = {};
 
                 fingerprintWorker.userAgent = navigator.userAgent;
@@ -29,4 +29,4 @@ function q(){return navigator.webdriver}function J(){return navigator.userAgent}
                 self.postMessage(fingerprintWorker);
             } catch (e) {
                 self.postMessage(fingerprintWorker);
-            }`,f=new Blob([l],{type:"application/javascript"});i=URL.createObjectURL(f),r=new Worker(i),o=window.setTimeout(()=>{u(),m(e,c),t(e)},2e3),r.onmessage=function(a){try{e.vendor=a.data.vendor,e.renderer=a.data.renderer,e.userAgent=a.data.userAgent,e.language=a.data.language,e.platform=a.data.platform,e.memory=a.data.memory,e.cpuCount=a.data.cpuCount}catch{m(e,c)}finally{u(),t(e)}},r.onerror=function(){u(),m(e,c),t(e)}}catch{u(),m(e,c),t(e)}})}function ve(){let t={toSourceError:n,hasToSource:!1};try{null.usdfsh}catch(e){t.toSourceError=e.toString()}try{throw"xyz"}catch(e){try{e.toSource(),t.hasToSource=!0}catch{t.hasToSource=!1}}return t}var we=['audio/mp4; codecs="mp4a.40.2"',"audio/mpeg;",'audio/webm; codecs="vorbis"','audio/ogg; codecs="vorbis"','audio/wav; codecs="1"','audio/ogg; codecs="speex"','audio/ogg; codecs="flac"','audio/3gpp; codecs="samr"'],be=['video/mp4; codecs="avc1.42E01E, mp4a.40.2"','video/mp4; codecs="avc1.42E01E"','video/mp4; codecs="avc1.58A01E"','video/mp4; codecs="avc1.4D401E"','video/mp4; codecs="avc1.64001E"','video/mp4; codecs="mp4v.20.8"','video/mp4; codecs="mp4v.20.240"','video/webm; codecs="vp8"','video/ogg; codecs="theora"','video/ogg; codecs="dirac"','video/3gpp; codecs="mp4v.20.8"','video/x-matroska; codecs="theora"'];function xe(t,e){let r={};try{let i=document.createElement(e);for(let o of t)try{r[o]=i.canPlayType(o)||null}catch{r[o]=null}}catch{for(let i of t)r[i]=null}return r}function Se(t){let e={},r=window.MediaSource;if(!r||typeof r.isTypeSupported!="function"){for(let i of t)e[i]=null;return e}for(let i of t)try{e[i]=r.isTypeSupported(i)}catch{e[i]=null}return e}function Re(t){try{let e=window.RTCRtpReceiver;if(e&&typeof e.getCapabilities=="function"){let r=e.getCapabilities(t);return h(JSON.stringify(r))}return"NA"}catch{return c}}function Ce(){let t={audioCanPlayTypeHash:"NA",videoCanPlayTypeHash:"NA",audioMediaSourceHash:"NA",videoMediaSourceHash:"NA",rtcAudioCapabilitiesHash:"NA",rtcVideoCapabilitiesHash:"NA",hasMediaSource:!1};try{t.hasMediaSource=!!window.MediaSource;let e=xe(we,"audio"),r=xe(be,"video");t.audioCanPlayTypeHash=h(JSON.stringify(e)),t.videoCanPlayTypeHash=h(JSON.stringify(r));let i=Se(we),o=Se(be);t.audioMediaSourceHash=h(JSON.stringify(i)),t.videoMediaSourceHash=h(JSON.stringify(o)),t.rtcAudioCapabilitiesHash=Re("audio"),t.rtcVideoCapabilitiesHash=Re("video")}catch{m(t,c)}return t}async function Rt(){return new Promise(t=>{try{let e=new Image,r=document.createElement("canvas").getContext("2d");e.onload=()=>{r.drawImage(e,0,0),t(r.getImageData(0,0,1,1).data.filter(i=>i===0).length!=4)},e.onerror=()=>{t(c)},e.src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAC0lEQVQYV2NgAAIAAAUAAarVyFEAAAAASUVORK5CYII="}catch{t(c)}})}function Ct(){var t=document.createElement("canvas");t.width=400,t.height=200,t.style.display="inline";var e=t.getContext("2d");try{return e.rect(0,0,10,10),e.rect(2,2,6,6),e.textBaseline="alphabetic",e.fillStyle="#f60",e.fillRect(125,1,62,20),e.fillStyle="#069",e.font="11pt no-real-font-123",e.fillText("Cwm fjordbank glyphs vext quiz, \u{1F603}",2,15),e.fillStyle="rgba(102, 204, 0, 0.2)",e.font="18pt Arial",e.fillText("Cwm fjordbank glyphs vext quiz, \u{1F603}",4,45),e.globalCompositeOperation="multiply",e.fillStyle="rgb(255,0,255)",e.beginPath(),e.arc(50,50,50,0,2*Math.PI,!0),e.closePath(),e.fill(),e.fillStyle="rgb(0,255,255)",e.beginPath(),e.arc(100,50,50,0,2*Math.PI,!0),e.closePath(),e.fill(),e.fillStyle="rgb(255,255,0)",e.beginPath(),e.arc(75,100,50,0,2*Math.PI,!0),e.closePath(),e.fill(),e.fillStyle="rgb(255,0,255)",e.arc(75,75,75,0,2*Math.PI,!0),e.arc(75,75,25,0,2*Math.PI,!0),e.fill("evenodd"),h(t.toDataURL())}catch{return c}}async function Ae(){let t={hasModifiedCanvas:n,canvasFingerprint:n};return t.hasModifiedCanvas=await Rt(),t.canvasFingerprint=Ct(),t}function Ee(){let t=["deviceMemory","hardwareConcurrency","language","languages","platform"],e=[];for(let r of t){let i=Object.getOwnPropertyDescriptor(Object.getPrototypeOf(navigator),r);i&&i.value?e.push("1"):e.push("0")}return e.join("")}function Pe(){return Math.random().toString(36).substring(2,15)}function We(){return new Date().getTime()}function Me(){return window.location.href}function G(t,e){let r=t.signals;return e==="iframe"?r.contexts.iframe.webdriver!==r.automation.webdriver||r.contexts.iframe.userAgent!==r.browser.userAgent||r.contexts.iframe.platform!==r.device.platform||r.contexts.iframe.memory!==r.device.memory||r.contexts.iframe.cpuCount!==r.device.cpuCount:r.contexts.webWorker.webdriver!==r.automation.webdriver||r.contexts.webWorker.userAgent!==r.browser.userAgent||r.contexts.webWorker.platform!==r.device.platform||r.contexts.webWorker.memory!==r.device.memory||r.contexts.webWorker.cpuCount!==r.device.cpuCount}function ke(){let t={bitmask:n,extensions:[]},e=document.body.hasAttribute("data-gr-ext-installed"),r=typeof window.ethereum<"u",i=document.getElementById("coupon-birds-drop-div")!==null,o=document.querySelector("deepl-input-controller")!==null,u=document.getElementById("monica-content-root")!==null,l=document.querySelector("chatgpt-sidebar")!==null,f=typeof window.__REQUESTLY__<"u",a=Array.from(document.querySelectorAll("*")).filter(w=>w.tagName.toLowerCase().startsWith("veepn-")).length>0;return t.bitmask=[e?"1":"0",r?"1":"0",i?"1":"0",o?"1":"0",u?"1":"0",l?"1":"0",f?"1":"0",a?"1":"0"].join(""),e&&t.extensions.push("grammarly"),r&&t.extensions.push("metamask"),i&&t.extensions.push("coupon-birds"),o&&t.extensions.push("deepl"),u&&t.extensions.push("monica-ai"),l&&t.extensions.push("sider-ai"),f&&t.extensions.push("requestly"),a&&t.extensions.push("veepn"),t}function d(t){try{return t()}catch{return!1}}function De(){let t={bitmask:n,chrome:d(()=>"chrome"in window),brave:d(()=>"brave"in navigator),applePaySupport:d(()=>"ApplePaySetup"in window),opera:d(()=>typeof window.opr<"u"||typeof window.onoperadetachedviewchange=="object"),serial:d(()=>window.navigator.serial!==void 0),attachShadow:d(()=>!!Element.prototype.attachShadow),caches:d(()=>!!window.caches),webAssembly:d(()=>!!window.WebAssembly&&!!window.WebAssembly.instantiate),buffer:d(()=>"Buffer"in window),showModalDialog:d(()=>"showModalDialog"in window),safari:d(()=>"safari"in window),webkitPrefixedFunction:d(()=>"webkitCancelAnimationFrame"in window),mozPrefixedFunction:d(()=>"mozGetUserMedia"in navigator),usb:d(()=>typeof window.USB=="function"),browserCapture:d(()=>typeof window.BrowserCaptureMediaStreamTrack=="function"),paymentRequestUpdateEvent:d(()=>typeof window.PaymentRequestUpdateEvent=="function"),pressureObserver:d(()=>typeof window.PressureObserver=="function"),audioSession:d(()=>"audioSession"in navigator),selectAudioOutput:d(()=>typeof navigator<"u"&&typeof navigator.mediaDevices<"u"&&typeof navigator.mediaDevices.selectAudioOutput=="function"),barcodeDetector:d(()=>"BarcodeDetector"in window),battery:d(()=>"getBattery"in navigator),devicePosture:d(()=>"DevicePosture"in window),documentPictureInPicture:d(()=>"documentPictureInPicture"in window),eyeDropper:d(()=>"EyeDropper"in window),editContext:d(()=>"EditContext"in window),fencedFrame:d(()=>"FencedFrameConfig"in window),sanitizer:d(()=>"Sanitizer"in window),otpCredential:d(()=>"OTPCredential"in window)},e=Object.keys(t).filter(r=>r!=="bitmask").map(r=>t[r]?"1":"0").join("");return t.bitmask=e,t}function Ie(){let t={prefersColorScheme:n,prefersReducedMotion:n,prefersReducedTransparency:n,colorGamut:n,pointer:n,anyPointer:n,hover:n,anyHover:n,colorDepth:n};try{window.matchMedia("(prefers-color-scheme: dark)").matches?t.prefersColorScheme="dark":window.matchMedia("(prefers-color-scheme: light)").matches?t.prefersColorScheme="light":t.prefersColorScheme=null,t.prefersReducedMotion=window.matchMedia("(prefers-reduced-motion: reduce)").matches,t.prefersReducedTransparency=window.matchMedia("(prefers-reduced-transparency: reduce)").matches,window.matchMedia("(color-gamut: rec2020)").matches?t.colorGamut="rec2020":window.matchMedia("(color-gamut: p3)").matches?t.colorGamut="p3":window.matchMedia("(color-gamut: srgb)").matches?t.colorGamut="srgb":t.colorGamut=null,window.matchMedia("(pointer: fine)").matches?t.pointer="fine":window.matchMedia("(pointer: coarse)").matches?t.pointer="coarse":window.matchMedia("(pointer: none)").matches?t.pointer="none":t.pointer=null,window.matchMedia("(any-pointer: fine)").matches?t.anyPointer="fine":window.matchMedia("(any-pointer: coarse)").matches?t.anyPointer="coarse":window.matchMedia("(any-pointer: none)").matches?t.anyPointer="none":t.anyPointer=null,t.hover=window.matchMedia("(hover: hover)").matches,t.anyHover=window.matchMedia("(any-hover: hover)").matches;let e=0;for(let r=0;r<=16;r++)window.matchMedia(`(color: ${r})`).matches&&(e=r);t.colorDepth=e}catch{m(t,c)}return t}function _e(t){let e=t.signals.device.screenResolution;return e.width===800&&e.height===600||e.availableWidth===800&&e.availableHeight===600||e.innerWidth===800&&e.innerHeight===600}function Oe(t){return t.signals.automation.webdriver===!0}function Fe(t){return!!t.signals.automation.selenium}function Te(t){return t.signals.automation.cdp===!0}function Ne(t){return t.signals.automation.playwright===!0}function Ue(t){return typeof t.signals.device.memory!="number"?!1:t.signals.device.memory>32||t.signals.device.memory<.25}function Le(t){return typeof t.signals.device.cpuCount!="number"?!1:t.signals.device.cpuCount>70}function He(t){let e=t.signals.browser.userAgent;return t.signals.browser.features.chrome===!1&&typeof e=="string"&&e.includes("Chrome")}function Ve(t){return t.signals.contexts.iframe.webdriver===!0}function je(t){return t.signals.contexts.webWorker.webdriver===!0}function Be(t){let e=t.signals.contexts.webWorker,r=t.signals.graphics.webGL;return e.vendor===c||e.renderer===c||r.vendor==="NA"||r.renderer==="NA"||e.vendor===S?!1:e.vendor!==r.vendor||e.renderer!==r.renderer}function Ge(t){return t.signals.contexts.webWorker.platform==="NA"||t.signals.contexts.webWorker.platform===c||t.signals.contexts.webWorker.platform===S?!1:t.signals.device.platform!==t.signals.contexts.webWorker.platform}function ze(t){return t.signals.contexts.iframe.platform==="NA"||t.signals.contexts.iframe.platform===c?!1:t.signals.device.platform!==t.signals.contexts.iframe.platform}function $e(t){return t.signals.automation.webdriverWritable===!0}function Qe(t){return t.signals.graphics.webGL.renderer.includes("SwiftShader")}function Ke(t){return t.signals.locale.internationalization.timezone==="UTC"}function qe(t){let e=t.signals.locale.languages.languages,r=t.signals.locale.languages.language;return r&&e&&Array.isArray(e)&&e.length>0?e[0]!==r:!1}function Je(t){return!!(t.signals.browser.features.chrome&&t.signals.browser.etsl!==33||t.signals.browser.features.safari&&t.signals.browser.etsl!==37||t.signals.browser.userAgent.includes("Firefox")&&t.signals.browser.etsl!==37)}function Ye(t){return[t.signals.browser.userAgent,t.signals.contexts.iframe.userAgent,t.signals.contexts.webWorker.userAgent].some(r=>/bot|headless/i.test(r.toLowerCase()))}function Ze(t){let e=t.signals.graphics.webgpu,r=t.signals.graphics.webGL,i=t.signals.browser.userAgent;return!!((r.vendor.includes("Apple")||r.renderer.includes("Apple"))&&!i.includes("Mac")||e.vendor.includes("apple")&&!i.includes("Mac")||e.vendor.includes("apple")&&!r.renderer.includes("Apple"))}function Xe(t){let e=t.signals.device.platform,r=t.signals.browser.userAgent,i=t.signals.browser.highEntropyValues.platform;return!!(r.includes("Mac")&&(e.includes("Win")||e.includes("Linux"))||r.includes("Windows")&&(e.includes("Mac")||e.includes("Linux"))||r.includes("Linux")&&(e.includes("Mac")||e.includes("Win"))||i!==c&&i!=="NA"&&(i.includes("Mac")&&(e.includes("Win")||e.includes("Linux"))||i.includes("Windows")&&(e.includes("Mac")||e.includes("Linux"))||i.includes("Linux")&&(e.includes("Mac")||e.includes("Win"))))}async function et(t,e){let r=new TextEncoder().encode(e),i=new TextEncoder().encode(t),o=new Uint8Array(i.length);for(let l=0;l<i.length;l++)o[l]=i[l]^r[l%r.length];let u=String.fromCharCode(...o);return btoa(u)}var z=class{fingerprint;constructor(){this.fingerprint={signals:{automation:{webdriver:n,webdriverWritable:n,selenium:n,cdp:n,playwright:n,navigatorPropertyDescriptors:n},device:{cpuCount:n,memory:n,platform:n,screenResolution:{width:n,height:n,pixelDepth:n,colorDepth:n,availableWidth:n,availableHeight:n,innerWidth:n,innerHeight:n,hasMultipleDisplays:n},multimediaDevices:{speakers:n,microphones:n,webcams:n},mediaQueries:{prefersColorScheme:n,prefersReducedMotion:n,prefersReducedTransparency:n,colorGamut:n,pointer:n,anyPointer:n,hover:n,anyHover:n,colorDepth:n}},browser:{userAgent:n,features:{bitmask:n,chrome:n,brave:n,applePaySupport:n,opera:n,serial:n,attachShadow:n,caches:n,webAssembly:n,buffer:n,showModalDialog:n,safari:n,webkitPrefixedFunction:n,mozPrefixedFunction:n,usb:n,browserCapture:n,paymentRequestUpdateEvent:n,pressureObserver:n,audioSession:n,selectAudioOutput:n,barcodeDetector:n,battery:n,devicePosture:n,documentPictureInPicture:n,eyeDropper:n,editContext:n,fencedFrame:n,sanitizer:n,otpCredential:n},plugins:{isValidPluginArray:n,pluginCount:n,pluginNamesHash:n,pluginConsistency1:n,pluginOverflow:n},extensions:{bitmask:n,extensions:n},highEntropyValues:{architecture:n,bitness:n,brands:n,mobile:n,model:n,platform:n,platformVersion:n,uaFullVersion:n},etsl:n,maths:n,toSourceError:{toSourceError:n,hasToSource:n}},graphics:{webGL:{vendor:n,renderer:n},webgpu:{vendor:n,architecture:n,device:n,description:n},canvas:{hasModifiedCanvas:n,canvasFingerprint:n}},codecs:{audioCanPlayTypeHash:n,videoCanPlayTypeHash:n,audioMediaSourceHash:n,videoMediaSourceHash:n,rtcAudioCapabilitiesHash:n,rtcVideoCapabilitiesHash:n,hasMediaSource:n},locale:{internationalization:{timezone:n,localeLanguage:n},languages:{languages:n,language:n}},contexts:{iframe:{webdriver:n,userAgent:n,platform:n,memory:n,cpuCount:n,language:n},webWorker:{webdriver:n,userAgent:n,platform:n,memory:n,cpuCount:n,language:n,vendor:n,renderer:n}}},fsid:n,nonce:n,time:n,url:n,fastBotDetection:!1,fastBotDetectionDetails:{headlessChromeScreenResolution:{detected:!1,severity:"high"},hasWebdriver:{detected:!1,severity:"high"},hasWebdriverWritable:{detected:!1,severity:"high"},hasSeleniumProperty:{detected:!1,severity:"high"},hasCDP:{detected:!1,severity:"high"},hasPlaywright:{detected:!1,severity:"high"},hasImpossibleDeviceMemory:{detected:!1,severity:"high"},hasHighCPUCount:{detected:!1,severity:"high"},hasMissingChromeObject:{detected:!1,severity:"high"},hasWebdriverIframe:{detected:!1,severity:"high"},hasWebdriverWorker:{detected:!1,severity:"high"},hasMismatchWebGLInWorker:{detected:!1,severity:"high"},hasMismatchPlatformIframe:{detected:!1,severity:"high"},hasMismatchPlatformWorker:{detected:!1,severity:"high"},hasSwiftshaderRenderer:{detected:!1,severity:"low"},hasUTCTimezone:{detected:!1,severity:"medium"},hasMismatchLanguages:{detected:!1,severity:"low"},hasInconsistentEtsl:{detected:!1,severity:"high"},hasBotUserAgent:{detected:!1,severity:"high"},hasGPUMismatch:{detected:!1,severity:"high"},hasPlatformMismatch:{detected:!1,severity:"high"}}}}async collectSignal(e){try{return await e()}catch{return c}}generateFingerprintScannerId(){try{let e=this.fingerprint.signals,r=this.fingerprint.fastBotDetectionDetails,i="FS1",u=[r.headlessChromeScreenResolution.detected,r.hasWebdriver.detected,r.hasWebdriverWritable.detected,r.hasSeleniumProperty.detected,r.hasCDP.detected,r.hasPlaywright.detected,r.hasImpossibleDeviceMemory.detected,r.hasHighCPUCount.detected,r.hasMissingChromeObject.detected,r.hasWebdriverIframe.detected,r.hasWebdriverWorker.detected,r.hasMismatchWebGLInWorker.detected,r.hasMismatchPlatformIframe.detected,r.hasMismatchPlatformWorker.detected,r.hasSwiftshaderRenderer.detected,r.hasUTCTimezone.detected,r.hasMismatchLanguages.detected,r.hasInconsistentEtsl.detected,r.hasBotUserAgent.detected,r.hasGPUMismatch.detected,r.hasPlatformMismatch.detected].map(g=>g?"1":"0").join(""),l=[e.automation.webdriver===!0,e.automation.webdriverWritable===!0,e.automation.selenium===!0,e.automation.cdp===!0,e.automation.playwright===!0].map(g=>g?"1":"0").join(""),f=h(String(e.automation.navigatorPropertyDescriptors)).slice(0,4),a=`${l}h${f}`,w=typeof e.device.screenResolution.width=="number"?e.device.screenResolution.width:0,M=typeof e.device.screenResolution.height=="number"?e.device.screenResolution.height:0,U=typeof e.device.cpuCount=="number"?String(e.device.cpuCount).padStart(2,"0"):"00",k=typeof e.device.memory=="number"?String(Math.round(e.device.memory)).padStart(2,"0"):"00",D=[e.device.screenResolution.hasMultipleDisplays===!0,e.device.mediaQueries.prefersReducedMotion===!0,e.device.mediaQueries.prefersReducedTransparency===!0,e.device.mediaQueries.hover===!0,e.device.mediaQueries.anyHover===!0].map(g=>g?"1":"0").join(""),L=[e.device.platform,e.device.screenResolution.pixelDepth,e.device.screenResolution.colorDepth,e.device.multimediaDevices.speakers,e.device.multimediaDevices.microphones,e.device.multimediaDevices.webcams,e.device.mediaQueries.prefersColorScheme,e.device.mediaQueries.colorGamut,e.device.mediaQueries.pointer,e.device.mediaQueries.anyPointer,e.device.mediaQueries.colorDepth].map(g=>String(g)).join("|"),v=h(L).slice(0,6),H=`${w}x${M}c${U}m${k}b${D}h${v}`,R=typeof e.browser.features.bitmask=="string"?e.browser.features.bitmask:"0000000000",I=typeof e.browser.extensions.bitmask=="string"?e.browser.extensions.bitmask:"00000000",b=[e.browser.plugins.isValidPluginArray===!0,e.browser.plugins.pluginConsistency1===!0,e.browser.plugins.pluginOverflow===!0,e.browser.toSourceError.hasToSource===!0].map(g=>g?"1":"0").join(""),C=[e.browser.userAgent,e.browser.etsl,e.browser.maths,e.browser.plugins.pluginCount,e.browser.plugins.pluginNamesHash,e.browser.toSourceError.toSourceError,e.browser.highEntropyValues.architecture,e.browser.highEntropyValues.bitness,e.browser.highEntropyValues.platform,e.browser.highEntropyValues.platformVersion,e.browser.highEntropyValues.uaFullVersion,e.browser.highEntropyValues.mobile].map(g=>String(g)).join("|"),A=h(C).slice(0,6),_=`f${R}e${I}p${b}h${A}`,x=[e.graphics.canvas.hasModifiedCanvas===!0].map(g=>g?"1":"0").join(""),E=[e.graphics.webGL.vendor,e.graphics.webGL.renderer,e.graphics.webgpu.vendor,e.graphics.webgpu.architecture,e.graphics.webgpu.device,e.graphics.webgpu.description,e.graphics.canvas.canvasFingerprint].map(g=>String(g)).join("|"),P=h(E).slice(0,6),O=`${x}h${P}`,p=[e.codecs.hasMediaSource===!0].map(g=>g?"1":"0").join(""),F=[e.codecs.audioCanPlayTypeHash,e.codecs.videoCanPlayTypeHash,e.codecs.audioMediaSourceHash,e.codecs.videoMediaSourceHash,e.codecs.rtcAudioCapabilitiesHash,e.codecs.rtcVideoCapabilitiesHash].map(g=>String(g)).join("|"),T=h(F).slice(0,6),V=`${p}h${T}`,j=typeof e.locale.languages.language=="string"?e.locale.languages.language.slice(0,2).toLowerCase():"xx",B=Array.isArray(e.locale.languages.languages)?e.locale.languages.languages.length:0,ut=(typeof e.locale.internationalization.timezone=="string"?e.locale.internationalization.timezone:"unknown").replace(/[\/\s]/g,"-"),dt=[e.locale.internationalization.timezone,e.locale.internationalization.localeLanguage,Array.isArray(e.locale.languages.languages)?e.locale.languages.languages.join(","):e.locale.languages.languages,e.locale.languages.language].map(g=>String(g)).join("|"),pt=h(dt).slice(0,4),mt=`${j}${B}t${ut}_h${pt}`,gt=[G(this.fingerprint,"iframe"),G(this.fingerprint,"worker"),e.contexts.iframe.webdriver===!0,e.contexts.webWorker.webdriver===!0].map(g=>g?"1":"0").join(""),ft=[e.contexts.iframe.userAgent,e.contexts.iframe.platform,e.contexts.iframe.memory,e.contexts.iframe.cpuCount,e.contexts.iframe.language,e.contexts.webWorker.userAgent,e.contexts.webWorker.platform,e.contexts.webWorker.memory,e.contexts.webWorker.cpuCount,e.contexts.webWorker.language,e.contexts.webWorker.vendor,e.contexts.webWorker.renderer].map(g=>String(g)).join("|"),ht=h(ft).slice(0,6),yt=`${gt}h${ht}`;return[i,u,a,H,_,O,V,mt,yt].join("_")}catch(e){return console.error("Error generating fingerprint scanner id",e),c}}async encryptFingerprint(e){let r=__FP_ENCRYPTION_KEY__;return r.length>20&&r.indexOf("DEFAULT")>0&&r.indexOf("FPSCANNER")>0&&console.warn('[fpscanner] WARNING: Using default encryption key! Run "npx fpscanner build --key=your-secret-key" to inject your own key. See: https://github.com/antoinevastel/fpscanner#advanced-custom-builds'),await et(JSON.stringify(e),r)}getDetectionRules(){return[{name:"headlessChromeScreenResolution",severity:y,test:_e},{name:"hasWebdriver",severity:y,test:Oe},{name:"hasWebdriverWritable",severity:y,test:$e},{name:"hasSeleniumProperty",severity:y,test:Fe},{name:"hasCDP",severity:y,test:Te},{name:"hasPlaywright",severity:y,test:Ne},{name:"hasImpossibleDeviceMemory",severity:y,test:Ue},{name:"hasHighCPUCount",severity:y,test:Le},{name:"hasMissingChromeObject",severity:y,test:He},{name:"hasWebdriverIframe",severity:y,test:Ve},{name:"hasWebdriverWorker",severity:y,test:je},{name:"hasMismatchWebGLInWorker",severity:y,test:Be},{name:"hasMismatchPlatformIframe",severity:y,test:ze},{name:"hasMismatchPlatformWorker",severity:y,test:Ge},{name:"hasSwiftshaderRenderer",severity:"low",test:Qe},{name:"hasUTCTimezone",severity:Z,test:Ke},{name:"hasMismatchLanguages",severity:"low",test:qe},{name:"hasInconsistentEtsl",severity:y,test:Je},{name:"hasBotUserAgent",severity:y,test:Ye},{name:"hasGPUMismatch",severity:y,test:Ze},{name:"hasPlatformMismatch",severity:y,test:Xe}]}runDetectionRules(){let e=this.getDetectionRules(),r={headlessChromeScreenResolution:{detected:!1,severity:"high"},hasWebdriver:{detected:!1,severity:"high"},hasWebdriverWritable:{detected:!1,severity:"high"},hasSeleniumProperty:{detected:!1,severity:"high"},hasCDP:{detected:!1,severity:"high"},hasPlaywright:{detected:!1,severity:"high"},hasImpossibleDeviceMemory:{detected:!1,severity:"high"},hasHighCPUCount:{detected:!1,severity:"high"},hasMissingChromeObject:{detected:!1,severity:"high"},hasWebdriverIframe:{detected:!1,severity:"high"},hasWebdriverWorker:{detected:!1,severity:"high"},hasMismatchWebGLInWorker:{detected:!1,severity:"high"},hasMismatchPlatformIframe:{detected:!1,severity:"high"},hasMismatchPlatformWorker:{detected:!1,severity:"high"},hasSwiftshaderRenderer:{detected:!1,severity:"low"},hasUTCTimezone:{detected:!1,severity:"medium"},hasMismatchLanguages:{detected:!1,severity:"low"},hasInconsistentEtsl:{detected:!1,severity:"high"},hasBotUserAgent:{detected:!1,severity:"high"},hasGPUMismatch:{detected:!1,severity:"high"},hasPlatformMismatch:{detected:!1,severity:"high"}};for(let i of e)try{let o=i.test(this.fingerprint);r[i.name]={detected:o,severity:i.severity}}catch{r[i.name]={detected:!1,severity:i.severity}}return r}async collectFingerprint(e={encrypt:!0}){let{encrypt:r=!0,skipWorker:i=!1}=e,o=this.fingerprint.signals,u={webdriver:this.collectSignal(q),webdriverWritable:this.collectSignal(pe),selenium:this.collectSignal(de),cdp:this.collectSignal(ee),playwright:this.collectSignal(re),navigatorPropertyDescriptors:this.collectSignal(Ee),cpuCount:this.collectSignal(ne),memory:this.collectSignal(oe),platform:this.collectSignal(Y),screenResolution:this.collectSignal(ce),multimediaDevices:this.collectSignal(fe),mediaQueries:this.collectSignal(Ie),userAgent:this.collectSignal(J),browserFeatures:this.collectSignal(De),plugins:this.collectSignal(ge),browserExtensions:this.collectSignal(ke),highEntropyValues:this.collectSignal(me),etsl:this.collectSignal(ae),maths:this.collectSignal(ie),toSourceError:this.collectSignal(ve),webGL:this.collectSignal(te),webgpu:this.collectSignal(ue),canvas:this.collectSignal(Ae),mediaCodecs:this.collectSignal(Ce),internationalization:this.collectSignal(se),languages:this.collectSignal(le),iframe:this.collectSignal(he),webWorker:i?Promise.resolve({webdriver:S,userAgent:S,platform:S,memory:S,cpuCount:S,language:S,vendor:S,renderer:S}):this.collectSignal(ye),nonce:this.collectSignal(Pe),time:this.collectSignal(We),url:this.collectSignal(Me)},l=Object.keys(u),f=await Promise.all(Object.values(u)),a=Object.fromEntries(l.map((w,M)=>[w,f[M]]));return o.automation.webdriver=a.webdriver,o.automation.webdriverWritable=a.webdriverWritable,o.automation.selenium=a.selenium,o.automation.cdp=a.cdp,o.automation.playwright=a.playwright,o.automation.navigatorPropertyDescriptors=a.navigatorPropertyDescriptors,o.device.cpuCount=a.cpuCount,o.device.memory=a.memory,o.device.platform=a.platform,o.device.screenResolution=a.screenResolution,o.device.multimediaDevices=a.multimediaDevices,o.device.mediaQueries=a.mediaQueries,o.browser.userAgent=a.userAgent,o.browser.features=a.browserFeatures,o.browser.plugins=a.plugins,o.browser.extensions=a.browserExtensions,o.browser.highEntropyValues=a.highEntropyValues,o.browser.etsl=a.etsl,o.browser.maths=a.maths,o.browser.toSourceError=a.toSourceError,o.graphics.webGL=a.webGL,o.graphics.webgpu=a.webgpu,o.graphics.canvas=a.canvas,o.codecs=a.mediaCodecs,o.locale.internationalization=a.internationalization,o.locale.languages=a.languages,o.contexts.iframe=a.iframe,o.contexts.webWorker=a.webWorker,this.fingerprint.nonce=a.nonce,this.fingerprint.time=a.time,this.fingerprint.url=a.url,this.fingerprint.fastBotDetectionDetails=this.runDetectionRules(),this.fingerprint.fastBotDetection=Object.values(this.fingerprint.fastBotDetectionDetails).some(w=>w.detected),this.fingerprint.fsid=this.generateFingerprintScannerId(),r?await this.encryptFingerprint(JSON.stringify(this.fingerprint)):this.fingerprint}},rt=z;var At=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298];function N(t){let e=1779033703,r=3144134277,i=1013904242,o=2773480762,u=1359893119,l=2600822924,f=528734635,a=1541459225,w=t.length,M=w*8,U=64-(w+9)%64,k=w+1+(U===64?0:U)+8,D=new Uint8Array(k);D.set(t),D[w]=128;let L=new DataView(D.buffer);L.setUint32(k-4,M,!1);let v=new Int32Array(64);for(let I=0;I<k;I+=64){for(let p=0;p<16;p++)v[p]=L.getInt32(I+p*4,!1);for(let p=16;p<64;p++){let F=(v[p-15]>>>7|v[p-15]<<25)^(v[p-15]>>>18|v[p-15]<<14)^v[p-15]>>>3|0,T=(v[p-2]>>>17|v[p-2]<<15)^(v[p-2]>>>19|v[p-2]<<13)^v[p-2]>>>10|0;v[p]=v[p-16]+F+v[p-7]+T|0}let b=e,C=r,A=i,_=o,x=u,E=l,P=f,O=a;for(let p=0;p<64;p++){let F=(x>>>6|x<<26)^(x>>>11|x<<21)^(x>>>25|x<<7)|0,T=x&E^~x&P|0,V=O+F+T+At[p]+v[p]|0,j=(b>>>2|b<<30)^(b>>>13|b<<19)^(b>>>22|b<<10)|0,B=b&C^b&A^C&A|0,K=j+B|0;O=P,P=E,E=x,x=_+V|0,_=A,A=C,C=b,b=V+K|0}e=e+b|0,r=r+C|0,i=i+A|0,o=o+_|0,u=u+x|0,l=l+E|0,f=f+P|0,a=a+O|0}let H=new Uint8Array(32),R=new DataView(H.buffer);return R.setUint32(0,e,!1),R.setUint32(4,r,!1),R.setUint32(8,i,!1),R.setUint32(12,o,!1),R.setUint32(16,u,!1),R.setUint32(20,l,!1),R.setUint32(24,f,!1),R.setUint32(28,a,!1),H}function ot(t){let e="";for(let r=0;r<t.length;r++)e+=(t[r]>>4).toString(16)+(t[r]&15).toString(16);return e}function W(t){return new TextEncoder().encode(t)}function Et(t){return ot(N(W(t)))}function Pt(t,e){t.length>64&&(t=N(t));let r=new Uint8Array(64);r.set(t);let i=new Uint8Array(64),o=new Uint8Array(64);for(let a=0;a<64;a++)i[a]=r[a]^54,o[a]=r[a]^92;let u=new Uint8Array(64+e.length);u.set(i),u.set(e,64);let l=N(u),f=new Uint8Array(96);return f.set(o),f.set(l,64),N(f)}function Wt(t,e){return ot(Pt(W(t),W(e)))}var Mt="__CROWDSEC_POW_WORKER_PATH__";function kt(t,e){if(e<=0)return Promise.resolve("0");try{let r=new Worker(Mt);return new Promise(i=>{r.onmessage=o=>{r.terminate(),i(o.data)},r.onerror=()=>{r.terminate(),i(nt(t,e))},r.postMessage({p:t,d:e})})}catch{return Promise.resolve(nt(t,e))}}function nt(t,e){let r=0;for(;;){let i=t+r.toString(36),o=N(W(i)),u=e>>3,l=e&7,f=!0;for(let a=0;a<u;a++)if(o[a]!==0){f=!1;break}if(f&&l>0){let a=255<<8-l&255;(o[u]&a)!==0&&(f=!1)}if(f)return r.toString(36);r++}}function Dt(t,e){let r=W(t),i=W(e),o=new Uint8Array(i.length);for(let l=0;l<i.length;l++)o[l]=i[l]^r[l%r.length];let u=String.fromCharCode(...o);return btoa(u)}var at=typeof _ts<"u"?_ts:"",$=typeof _t<"u"?_t:"",st=typeof _powP<"u"?_powP:"",It=typeof _powM<"u"?_powM:"",Ot=typeof _powD<"u"?_powD:12,Ft="__CROWDSEC_SUBMIT_PATH__";function it(t){if(typeof window.crowdsecSetChallengeStatus=="function"){window.crowdsecSetChallengeStatus(t);return}window.dispatchEvent(new CustomEvent("crowdsec-challenge-status",{detail:{status:t}}))}var[Q,Tt]=await Promise.all([kt(st,Ot),new rt().collectFingerprint({encrypt:!1})]),ct=Et($+Q),lt=Dt(ct,JSON.stringify(Tt)),Nt=Wt(ct,lt+at+$+Q);fetch(Ft,{method:"POST",credentials:"same-origin",body:new URLSearchParams({f:lt,t:$,ts:at,h:Nt,n:Q,p:st,m:It})}).then(t=>t.json()).then(t=>{let e=typeof t?.status=="string"?t.status:"fail";it(e)}).catch(()=>{it("fail")});
+            }`,p=new Blob([u],{type:"application/javascript"});i=URL.createObjectURL(p),r=new Worker(i),o=window.setTimeout(()=>{l(),g(e,c),t(e)},2e3),r.onmessage=function(a){try{e.vendor=a.data.vendor,e.renderer=a.data.renderer,e.userAgent=a.data.userAgent,e.language=a.data.language,e.platform=a.data.platform,e.memory=a.data.memory,e.cpuCount=a.data.cpuCount}catch{g(e,c)}finally{l(),t(e)}},r.onerror=function(){l(),g(e,c),t(e)}}catch{l(),g(e,c),t(e)}})}function we(){let t={toSourceError:n,hasToSource:!1};try{null.usdfsh}catch(e){t.toSourceError=e.toString()}try{throw"xyz"}catch(e){try{e.toSource(),t.hasToSource=!0}catch{t.hasToSource=!1}}return t}var be=['audio/mp4; codecs="mp4a.40.2"',"audio/mpeg;",'audio/webm; codecs="vorbis"','audio/ogg; codecs="vorbis"','audio/wav; codecs="1"','audio/ogg; codecs="speex"','audio/ogg; codecs="flac"','audio/3gpp; codecs="samr"'],xe=['video/mp4; codecs="avc1.42E01E, mp4a.40.2"','video/mp4; codecs="avc1.42E01E"','video/mp4; codecs="avc1.58A01E"','video/mp4; codecs="avc1.4D401E"','video/mp4; codecs="avc1.64001E"','video/mp4; codecs="mp4v.20.8"','video/mp4; codecs="mp4v.20.240"','video/webm; codecs="vp8"','video/ogg; codecs="theora"','video/ogg; codecs="dirac"','video/3gpp; codecs="mp4v.20.8"','video/x-matroska; codecs="theora"'];function Se(t,e){let r={};try{let i=document.createElement(e);for(let o of t)try{r[o]=i.canPlayType(o)||null}catch{r[o]=null}}catch{for(let i of t)r[i]=null}return r}function Ce(t){let e={},r=window.MediaSource;if(!r||typeof r.isTypeSupported!="function"){for(let i of t)e[i]=null;return e}for(let i of t)try{e[i]=r.isTypeSupported(i)}catch{e[i]=null}return e}function Re(t){try{let e=window.RTCRtpReceiver;if(e&&typeof e.getCapabilities=="function"){let r=e.getCapabilities(t);return h(JSON.stringify(r))}return"NA"}catch{return c}}function Ae(){let t={audioCanPlayTypeHash:"NA",videoCanPlayTypeHash:"NA",audioMediaSourceHash:"NA",videoMediaSourceHash:"NA",rtcAudioCapabilitiesHash:"NA",rtcVideoCapabilitiesHash:"NA",hasMediaSource:!1};try{t.hasMediaSource=!!window.MediaSource;let e=Se(be,"audio"),r=Se(xe,"video");t.audioCanPlayTypeHash=h(JSON.stringify(e)),t.videoCanPlayTypeHash=h(JSON.stringify(r));let i=Ce(be),o=Ce(xe);t.audioMediaSourceHash=h(JSON.stringify(i)),t.videoMediaSourceHash=h(JSON.stringify(o)),t.rtcAudioCapabilitiesHash=Re("audio"),t.rtcVideoCapabilitiesHash=Re("video")}catch{g(t,c)}return t}async function bt(){return new Promise(t=>{try{let e=new Image,r=document.createElement("canvas").getContext("2d");e.onload=()=>{r.drawImage(e,0,0),t(r.getImageData(0,0,1,1).data.filter(i=>i===0).length!=4)},e.onerror=()=>{t(c)},e.src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAC0lEQVQYV2NgAAIAAAUAAarVyFEAAAAASUVORK5CYII="}catch{t(c)}})}function xt(){var t=document.createElement("canvas");t.width=400,t.height=200,t.style.display="inline";var e=t.getContext("2d");try{return e.rect(0,0,10,10),e.rect(2,2,6,6),e.textBaseline="alphabetic",e.fillStyle="#f60",e.fillRect(125,1,62,20),e.fillStyle="#069",e.font="11pt no-real-font-123",e.fillText("Cwm fjordbank glyphs vext quiz, \u{1F603}",2,15),e.fillStyle="rgba(102, 204, 0, 0.2)",e.font="18pt Arial",e.fillText("Cwm fjordbank glyphs vext quiz, \u{1F603}",4,45),e.globalCompositeOperation="multiply",e.fillStyle="rgb(255,0,255)",e.beginPath(),e.arc(50,50,50,0,2*Math.PI,!0),e.closePath(),e.fill(),e.fillStyle="rgb(0,255,255)",e.beginPath(),e.arc(100,50,50,0,2*Math.PI,!0),e.closePath(),e.fill(),e.fillStyle="rgb(255,255,0)",e.beginPath(),e.arc(75,100,50,0,2*Math.PI,!0),e.closePath(),e.fill(),e.fillStyle="rgb(255,0,255)",e.arc(75,75,75,0,2*Math.PI,!0),e.arc(75,75,25,0,2*Math.PI,!0),e.fill("evenodd"),h(t.toDataURL())}catch{return c}}async function Ee(){let t={hasModifiedCanvas:n,canvasFingerprint:n};return t.hasModifiedCanvas=await bt(),t.canvasFingerprint=xt(),t}function Pe(){let t=["deviceMemory","hardwareConcurrency","language","languages","platform"],e=[];for(let r of t){let i=Object.getOwnPropertyDescriptor(Object.getPrototypeOf(navigator),r);i&&i.value?e.push("1"):e.push("0")}return e.join("")}function We(){return Math.random().toString(36).substring(2,15)}function Me(){return new Date().getTime()}function ke(){return window.location.href}function G(t,e){let r=t.signals;return e==="iframe"?r.contexts.iframe.webdriver!==r.automation.webdriver||r.contexts.iframe.userAgent!==r.browser.userAgent||r.contexts.iframe.platform!==r.device.platform||r.contexts.iframe.memory!==r.device.memory||r.contexts.iframe.cpuCount!==r.device.cpuCount:r.contexts.webWorker.webdriver!==r.automation.webdriver||r.contexts.webWorker.userAgent!==r.browser.userAgent||r.contexts.webWorker.platform!==r.device.platform||r.contexts.webWorker.memory!==r.device.memory||r.contexts.webWorker.cpuCount!==r.device.cpuCount}function De(){let t={bitmask:n,extensions:[]},e=document.body.hasAttribute("data-gr-ext-installed"),r=typeof window.ethereum<"u",i=document.getElementById("coupon-birds-drop-div")!==null,o=document.querySelector("deepl-input-controller")!==null,l=document.getElementById("monica-content-root")!==null,u=document.querySelector("chatgpt-sidebar")!==null,p=typeof window.__REQUESTLY__<"u",a=Array.from(document.querySelectorAll("*")).filter(w=>w.tagName.toLowerCase().startsWith("veepn-")).length>0;return t.bitmask=[e?"1":"0",r?"1":"0",i?"1":"0",o?"1":"0",l?"1":"0",u?"1":"0",p?"1":"0",a?"1":"0"].join(""),e&&t.extensions.push("grammarly"),r&&t.extensions.push("metamask"),i&&t.extensions.push("coupon-birds"),o&&t.extensions.push("deepl"),l&&t.extensions.push("monica-ai"),u&&t.extensions.push("sider-ai"),p&&t.extensions.push("requestly"),a&&t.extensions.push("veepn"),t}function d(t){try{return t()}catch{return!1}}function Ie(){let t={bitmask:n,chrome:d(()=>"chrome"in window),brave:d(()=>"brave"in navigator),applePaySupport:d(()=>"ApplePaySetup"in window),opera:d(()=>typeof window.opr<"u"||typeof window.onoperadetachedviewchange=="object"),serial:d(()=>window.navigator.serial!==void 0),attachShadow:d(()=>!!Element.prototype.attachShadow),caches:d(()=>!!window.caches),webAssembly:d(()=>!!window.WebAssembly&&!!window.WebAssembly.instantiate),buffer:d(()=>"Buffer"in window),showModalDialog:d(()=>"showModalDialog"in window),safari:d(()=>"safari"in window),webkitPrefixedFunction:d(()=>"webkitCancelAnimationFrame"in window),mozPrefixedFunction:d(()=>"mozGetUserMedia"in navigator),usb:d(()=>typeof window.USB=="function"),browserCapture:d(()=>typeof window.BrowserCaptureMediaStreamTrack=="function"),paymentRequestUpdateEvent:d(()=>typeof window.PaymentRequestUpdateEvent=="function"),pressureObserver:d(()=>typeof window.PressureObserver=="function"),audioSession:d(()=>"audioSession"in navigator),selectAudioOutput:d(()=>typeof navigator<"u"&&typeof navigator.mediaDevices<"u"&&typeof navigator.mediaDevices.selectAudioOutput=="function"),barcodeDetector:d(()=>"BarcodeDetector"in window),battery:d(()=>"getBattery"in navigator),devicePosture:d(()=>"DevicePosture"in window),documentPictureInPicture:d(()=>"documentPictureInPicture"in window),eyeDropper:d(()=>"EyeDropper"in window),editContext:d(()=>"EditContext"in window),fencedFrame:d(()=>"FencedFrameConfig"in window),sanitizer:d(()=>"Sanitizer"in window),otpCredential:d(()=>"OTPCredential"in window)},e=Object.keys(t).filter(r=>r!=="bitmask").map(r=>t[r]?"1":"0").join("");return t.bitmask=e,t}function _e(){let t={prefersColorScheme:n,prefersReducedMotion:n,prefersReducedTransparency:n,colorGamut:n,pointer:n,anyPointer:n,hover:n,anyHover:n,colorDepth:n};try{window.matchMedia("(prefers-color-scheme: dark)").matches?t.prefersColorScheme="dark":window.matchMedia("(prefers-color-scheme: light)").matches?t.prefersColorScheme="light":t.prefersColorScheme=null,t.prefersReducedMotion=window.matchMedia("(prefers-reduced-motion: reduce)").matches,t.prefersReducedTransparency=window.matchMedia("(prefers-reduced-transparency: reduce)").matches,window.matchMedia("(color-gamut: rec2020)").matches?t.colorGamut="rec2020":window.matchMedia("(color-gamut: p3)").matches?t.colorGamut="p3":window.matchMedia("(color-gamut: srgb)").matches?t.colorGamut="srgb":t.colorGamut=null,window.matchMedia("(pointer: fine)").matches?t.pointer="fine":window.matchMedia("(pointer: coarse)").matches?t.pointer="coarse":window.matchMedia("(pointer: none)").matches?t.pointer="none":t.pointer=null,window.matchMedia("(any-pointer: fine)").matches?t.anyPointer="fine":window.matchMedia("(any-pointer: coarse)").matches?t.anyPointer="coarse":window.matchMedia("(any-pointer: none)").matches?t.anyPointer="none":t.anyPointer=null,t.hover=window.matchMedia("(hover: hover)").matches,t.anyHover=window.matchMedia("(any-hover: hover)").matches;let e=0;for(let r=0;r<=16;r++)window.matchMedia(`(color: ${r})`).matches&&(e=r);t.colorDepth=e}catch{g(t,c)}return t}function Oe(t){let e=t.signals.device.screenResolution;return e.width===800&&e.height===600||e.availableWidth===800&&e.availableHeight===600||e.innerWidth===800&&e.innerHeight===600}function Fe(t){return t.signals.automation.webdriver===!0}function Te(t){return!!t.signals.automation.selenium}function Ne(t){return t.signals.automation.cdp===!0}function He(t){return t.signals.automation.playwright===!0}function Ue(t){return typeof t.signals.device.memory!="number"?!1:t.signals.device.memory>32||t.signals.device.memory<.25}function Le(t){return typeof t.signals.device.cpuCount!="number"?!1:t.signals.device.cpuCount>70}function Ve(t){let e=t.signals.browser.userAgent;return t.signals.browser.features.chrome===!1&&typeof e=="string"&&e.includes("Chrome")}function je(t){return t.signals.contexts.iframe.webdriver===!0}function Be(t){return t.signals.contexts.webWorker.webdriver===!0}function Ge(t){let e=t.signals.contexts.webWorker,r=t.signals.graphics.webGL;return e.vendor===c||e.renderer===c||r.vendor==="NA"||r.renderer==="NA"||e.vendor===S?!1:e.vendor!==r.vendor||e.renderer!==r.renderer}function ze(t){return t.signals.contexts.webWorker.platform==="NA"||t.signals.contexts.webWorker.platform===c||t.signals.contexts.webWorker.platform===S?!1:t.signals.device.platform!==t.signals.contexts.webWorker.platform}function $e(t){return t.signals.contexts.iframe.platform==="NA"||t.signals.contexts.iframe.platform===c?!1:t.signals.device.platform!==t.signals.contexts.iframe.platform}function Qe(t){return t.signals.automation.webdriverWritable===!0}function Ke(t){return t.signals.graphics.webGL.renderer.includes("SwiftShader")}function qe(t){return t.signals.locale.internationalization.timezone==="UTC"}function Je(t){let e=t.signals.locale.languages.languages,r=t.signals.locale.languages.language;return r&&e&&Array.isArray(e)&&e.length>0?e[0]!==r:!1}function Ye(t){return!!(t.signals.browser.features.chrome&&t.signals.browser.etsl!==33||t.signals.browser.features.safari&&t.signals.browser.etsl!==37||t.signals.browser.userAgent.includes("Firefox")&&t.signals.browser.etsl!==37)}function Ze(t){return[t.signals.browser.userAgent,t.signals.contexts.iframe.userAgent,t.signals.contexts.webWorker.userAgent].some(r=>/bot|headless/i.test(r.toLowerCase()))}function Xe(t){let e=t.signals.graphics.webgpu,r=t.signals.graphics.webGL,i=t.signals.browser.userAgent;return!!((r.vendor.includes("Apple")||r.renderer.includes("Apple"))&&!i.includes("Mac")||e.vendor.includes("apple")&&!i.includes("Mac")||e.vendor.includes("apple")&&!r.renderer.includes("Apple"))}function et(t){let e=t.signals.device.platform,r=t.signals.browser.userAgent,i=t.signals.browser.highEntropyValues.platform;return!!(r.includes("Mac")&&(e.includes("Win")||e.includes("Linux"))||r.includes("Windows")&&(e.includes("Mac")||e.includes("Linux"))||r.includes("Linux")&&(e.includes("Mac")||e.includes("Win"))||i!==c&&i!=="NA"&&(i.includes("Mac")&&(e.includes("Win")||e.includes("Linux"))||i.includes("Windows")&&(e.includes("Mac")||e.includes("Linux"))||i.includes("Linux")&&(e.includes("Mac")||e.includes("Win"))))}async function tt(t,e){let r=new TextEncoder().encode(e),i=new TextEncoder().encode(t),o=new Uint8Array(i.length);for(let u=0;u<i.length;u++)o[u]=i[u]^r[u%r.length];let l=String.fromCharCode(...o);return btoa(l)}var z=class{fingerprint;constructor(){this.fingerprint={signals:{automation:{webdriver:n,webdriverWritable:n,selenium:n,cdp:n,playwright:n,navigatorPropertyDescriptors:n},device:{cpuCount:n,memory:n,platform:n,screenResolution:{width:n,height:n,pixelDepth:n,colorDepth:n,availableWidth:n,availableHeight:n,innerWidth:n,innerHeight:n,hasMultipleDisplays:n},multimediaDevices:{speakers:n,microphones:n,webcams:n},mediaQueries:{prefersColorScheme:n,prefersReducedMotion:n,prefersReducedTransparency:n,colorGamut:n,pointer:n,anyPointer:n,hover:n,anyHover:n,colorDepth:n}},browser:{userAgent:n,features:{bitmask:n,chrome:n,brave:n,applePaySupport:n,opera:n,serial:n,attachShadow:n,caches:n,webAssembly:n,buffer:n,showModalDialog:n,safari:n,webkitPrefixedFunction:n,mozPrefixedFunction:n,usb:n,browserCapture:n,paymentRequestUpdateEvent:n,pressureObserver:n,audioSession:n,selectAudioOutput:n,barcodeDetector:n,battery:n,devicePosture:n,documentPictureInPicture:n,eyeDropper:n,editContext:n,fencedFrame:n,sanitizer:n,otpCredential:n},plugins:{isValidPluginArray:n,pluginCount:n,pluginNamesHash:n,pluginConsistency1:n,pluginOverflow:n},extensions:{bitmask:n,extensions:n},highEntropyValues:{architecture:n,bitness:n,brands:n,mobile:n,model:n,platform:n,platformVersion:n,uaFullVersion:n},etsl:n,maths:n,toSourceError:{toSourceError:n,hasToSource:n}},graphics:{webGL:{vendor:n,renderer:n},webgpu:{vendor:n,architecture:n,device:n,description:n},canvas:{hasModifiedCanvas:n,canvasFingerprint:n}},codecs:{audioCanPlayTypeHash:n,videoCanPlayTypeHash:n,audioMediaSourceHash:n,videoMediaSourceHash:n,rtcAudioCapabilitiesHash:n,rtcVideoCapabilitiesHash:n,hasMediaSource:n},locale:{internationalization:{timezone:n,localeLanguage:n},languages:{languages:n,language:n}},contexts:{iframe:{webdriver:n,userAgent:n,platform:n,memory:n,cpuCount:n,language:n},webWorker:{webdriver:n,userAgent:n,platform:n,memory:n,cpuCount:n,language:n,vendor:n,renderer:n}}},fsid:n,nonce:n,time:n,url:n,fastBotDetection:!1,fastBotDetectionDetails:{headlessChromeScreenResolution:{detected:!1,severity:"high"},hasWebdriver:{detected:!1,severity:"high"},hasWebdriverWritable:{detected:!1,severity:"high"},hasSeleniumProperty:{detected:!1,severity:"high"},hasCDP:{detected:!1,severity:"high"},hasPlaywright:{detected:!1,severity:"high"},hasImpossibleDeviceMemory:{detected:!1,severity:"high"},hasHighCPUCount:{detected:!1,severity:"high"},hasMissingChromeObject:{detected:!1,severity:"high"},hasWebdriverIframe:{detected:!1,severity:"high"},hasWebdriverWorker:{detected:!1,severity:"high"},hasMismatchWebGLInWorker:{detected:!1,severity:"high"},hasMismatchPlatformIframe:{detected:!1,severity:"high"},hasMismatchPlatformWorker:{detected:!1,severity:"high"},hasSwiftshaderRenderer:{detected:!1,severity:"low"},hasUTCTimezone:{detected:!1,severity:"medium"},hasMismatchLanguages:{detected:!1,severity:"low"},hasInconsistentEtsl:{detected:!1,severity:"high"},hasBotUserAgent:{detected:!1,severity:"high"},hasGPUMismatch:{detected:!1,severity:"high"},hasPlatformMismatch:{detected:!1,severity:"high"}}}}async collectSignal(e){try{return await e()}catch{return c}}generateFingerprintScannerId(){try{let e=this.fingerprint.signals,r=this.fingerprint.fastBotDetectionDetails,i="FS1",l=[r.headlessChromeScreenResolution.detected,r.hasWebdriver.detected,r.hasWebdriverWritable.detected,r.hasSeleniumProperty.detected,r.hasCDP.detected,r.hasPlaywright.detected,r.hasImpossibleDeviceMemory.detected,r.hasHighCPUCount.detected,r.hasMissingChromeObject.detected,r.hasWebdriverIframe.detected,r.hasWebdriverWorker.detected,r.hasMismatchWebGLInWorker.detected,r.hasMismatchPlatformIframe.detected,r.hasMismatchPlatformWorker.detected,r.hasSwiftshaderRenderer.detected,r.hasUTCTimezone.detected,r.hasMismatchLanguages.detected,r.hasInconsistentEtsl.detected,r.hasBotUserAgent.detected,r.hasGPUMismatch.detected,r.hasPlatformMismatch.detected].map(f=>f?"1":"0").join(""),u=[e.automation.webdriver===!0,e.automation.webdriverWritable===!0,e.automation.selenium===!0,e.automation.cdp===!0,e.automation.playwright===!0].map(f=>f?"1":"0").join(""),p=h(String(e.automation.navigatorPropertyDescriptors)).slice(0,4),a=`${u}h${p}`,w=typeof e.device.screenResolution.width=="number"?e.device.screenResolution.width:0,M=typeof e.device.screenResolution.height=="number"?e.device.screenResolution.height:0,H=typeof e.device.cpuCount=="number"?String(e.device.cpuCount).padStart(2,"0"):"00",k=typeof e.device.memory=="number"?String(Math.round(e.device.memory)).padStart(2,"0"):"00",D=[e.device.screenResolution.hasMultipleDisplays===!0,e.device.mediaQueries.prefersReducedMotion===!0,e.device.mediaQueries.prefersReducedTransparency===!0,e.device.mediaQueries.hover===!0,e.device.mediaQueries.anyHover===!0].map(f=>f?"1":"0").join(""),U=[e.device.platform,e.device.screenResolution.pixelDepth,e.device.screenResolution.colorDepth,e.device.multimediaDevices.speakers,e.device.multimediaDevices.microphones,e.device.multimediaDevices.webcams,e.device.mediaQueries.prefersColorScheme,e.device.mediaQueries.colorGamut,e.device.mediaQueries.pointer,e.device.mediaQueries.anyPointer,e.device.mediaQueries.colorDepth].map(f=>String(f)).join("|"),v=h(U).slice(0,6),L=`${w}x${M}c${H}m${k}b${D}h${v}`,C=typeof e.browser.features.bitmask=="string"?e.browser.features.bitmask:"0000000000",I=typeof e.browser.extensions.bitmask=="string"?e.browser.extensions.bitmask:"00000000",b=[e.browser.plugins.isValidPluginArray===!0,e.browser.plugins.pluginConsistency1===!0,e.browser.plugins.pluginOverflow===!0,e.browser.toSourceError.hasToSource===!0].map(f=>f?"1":"0").join(""),R=[e.browser.userAgent,e.browser.etsl,e.browser.maths,e.browser.plugins.pluginCount,e.browser.plugins.pluginNamesHash,e.browser.toSourceError.toSourceError,e.browser.highEntropyValues.architecture,e.browser.highEntropyValues.bitness,e.browser.highEntropyValues.platform,e.browser.highEntropyValues.platformVersion,e.browser.highEntropyValues.uaFullVersion,e.browser.highEntropyValues.mobile].map(f=>String(f)).join("|"),A=h(R).slice(0,6),_=`f${C}e${I}p${b}h${A}`,x=[e.graphics.canvas.hasModifiedCanvas===!0].map(f=>f?"1":"0").join(""),P=[e.graphics.webGL.vendor,e.graphics.webGL.renderer,e.graphics.webgpu.vendor,e.graphics.webgpu.architecture,e.graphics.webgpu.device,e.graphics.webgpu.description,e.graphics.canvas.canvasFingerprint].map(f=>String(f)).join("|"),W=h(P).slice(0,6),O=`${x}h${W}`,m=[e.codecs.hasMediaSource===!0].map(f=>f?"1":"0").join(""),F=[e.codecs.audioCanPlayTypeHash,e.codecs.videoCanPlayTypeHash,e.codecs.audioMediaSourceHash,e.codecs.videoMediaSourceHash,e.codecs.rtcAudioCapabilitiesHash,e.codecs.rtcVideoCapabilitiesHash].map(f=>String(f)).join("|"),T=h(F).slice(0,6),V=`${m}h${T}`,j=typeof e.locale.languages.language=="string"?e.locale.languages.language.slice(0,2).toLowerCase():"xx",B=Array.isArray(e.locale.languages.languages)?e.locale.languages.languages.length:0,st=(typeof e.locale.internationalization.timezone=="string"?e.locale.internationalization.timezone:"unknown").replace(/[\/\s]/g,"-"),ct=[e.locale.internationalization.timezone,e.locale.internationalization.localeLanguage,Array.isArray(e.locale.languages.languages)?e.locale.languages.languages.join(","):e.locale.languages.languages,e.locale.languages.language].map(f=>String(f)).join("|"),lt=h(ct).slice(0,4),ut=`${j}${B}t${st}_h${lt}`,dt=[G(this.fingerprint,"iframe"),G(this.fingerprint,"worker"),e.contexts.iframe.webdriver===!0,e.contexts.webWorker.webdriver===!0].map(f=>f?"1":"0").join(""),pt=[e.contexts.iframe.userAgent,e.contexts.iframe.platform,e.contexts.iframe.memory,e.contexts.iframe.cpuCount,e.contexts.iframe.language,e.contexts.webWorker.userAgent,e.contexts.webWorker.platform,e.contexts.webWorker.memory,e.contexts.webWorker.cpuCount,e.contexts.webWorker.language,e.contexts.webWorker.vendor,e.contexts.webWorker.renderer].map(f=>String(f)).join("|"),mt=h(pt).slice(0,6),gt=`${dt}h${mt}`;return[i,l,a,L,_,O,V,ut,gt].join("_")}catch(e){return console.error("Error generating fingerprint scanner id",e),c}}async encryptFingerprint(e){let r=__FP_ENCRYPTION_KEY__;return r.length>20&&r.indexOf("DEFAULT")>0&&r.indexOf("FPSCANNER")>0&&console.warn('[fpscanner] WARNING: Using default encryption key! Run "npx fpscanner build --key=your-secret-key" to inject your own key. See: https://github.com/antoinevastel/fpscanner#advanced-custom-builds'),await tt(JSON.stringify(e),r)}getDetectionRules(){return[{name:"headlessChromeScreenResolution",severity:y,test:Oe},{name:"hasWebdriver",severity:y,test:Fe},{name:"hasWebdriverWritable",severity:y,test:Qe},{name:"hasSeleniumProperty",severity:y,test:Te},{name:"hasCDP",severity:y,test:Ne},{name:"hasPlaywright",severity:y,test:He},{name:"hasImpossibleDeviceMemory",severity:y,test:Ue},{name:"hasHighCPUCount",severity:y,test:Le},{name:"hasMissingChromeObject",severity:y,test:Ve},{name:"hasWebdriverIframe",severity:y,test:je},{name:"hasWebdriverWorker",severity:y,test:Be},{name:"hasMismatchWebGLInWorker",severity:y,test:Ge},{name:"hasMismatchPlatformIframe",severity:y,test:$e},{name:"hasMismatchPlatformWorker",severity:y,test:ze},{name:"hasSwiftshaderRenderer",severity:"low",test:Ke},{name:"hasUTCTimezone",severity:X,test:qe},{name:"hasMismatchLanguages",severity:"low",test:Je},{name:"hasInconsistentEtsl",severity:y,test:Ye},{name:"hasBotUserAgent",severity:y,test:Ze},{name:"hasGPUMismatch",severity:y,test:Xe},{name:"hasPlatformMismatch",severity:y,test:et}]}runDetectionRules(){let e=this.getDetectionRules(),r={headlessChromeScreenResolution:{detected:!1,severity:"high"},hasWebdriver:{detected:!1,severity:"high"},hasWebdriverWritable:{detected:!1,severity:"high"},hasSeleniumProperty:{detected:!1,severity:"high"},hasCDP:{detected:!1,severity:"high"},hasPlaywright:{detected:!1,severity:"high"},hasImpossibleDeviceMemory:{detected:!1,severity:"high"},hasHighCPUCount:{detected:!1,severity:"high"},hasMissingChromeObject:{detected:!1,severity:"high"},hasWebdriverIframe:{detected:!1,severity:"high"},hasWebdriverWorker:{detected:!1,severity:"high"},hasMismatchWebGLInWorker:{detected:!1,severity:"high"},hasMismatchPlatformIframe:{detected:!1,severity:"high"},hasMismatchPlatformWorker:{detected:!1,severity:"high"},hasSwiftshaderRenderer:{detected:!1,severity:"low"},hasUTCTimezone:{detected:!1,severity:"medium"},hasMismatchLanguages:{detected:!1,severity:"low"},hasInconsistentEtsl:{detected:!1,severity:"high"},hasBotUserAgent:{detected:!1,severity:"high"},hasGPUMismatch:{detected:!1,severity:"high"},hasPlatformMismatch:{detected:!1,severity:"high"}};for(let i of e)try{let o=i.test(this.fingerprint);r[i.name]={detected:o,severity:i.severity}}catch{r[i.name]={detected:!1,severity:i.severity}}return r}async collectFingerprint(e={encrypt:!0}){let{encrypt:r=!0,skipWorker:i=!1}=e,o=this.fingerprint.signals,l={webdriver:this.collectSignal(J),webdriverWritable:this.collectSignal(me),selenium:this.collectSignal(pe),cdp:this.collectSignal(te),playwright:this.collectSignal(ne),navigatorPropertyDescriptors:this.collectSignal(Pe),cpuCount:this.collectSignal(ie),memory:this.collectSignal(ae),platform:this.collectSignal(Z),screenResolution:this.collectSignal(le),multimediaDevices:this.collectSignal(he),mediaQueries:this.collectSignal(_e),userAgent:this.collectSignal(Y),browserFeatures:this.collectSignal(Ie),plugins:this.collectSignal(fe),browserExtensions:this.collectSignal(De),highEntropyValues:this.collectSignal(ge),etsl:this.collectSignal(se),maths:this.collectSignal(oe),toSourceError:this.collectSignal(we),webGL:this.collectSignal(re),webgpu:this.collectSignal(de),canvas:this.collectSignal(Ee),mediaCodecs:this.collectSignal(Ae),internationalization:this.collectSignal(ce),languages:this.collectSignal(ue),iframe:this.collectSignal(ye),webWorker:i?Promise.resolve({webdriver:S,userAgent:S,platform:S,memory:S,cpuCount:S,language:S,vendor:S,renderer:S}):this.collectSignal(ve),nonce:this.collectSignal(We),time:this.collectSignal(Me),url:this.collectSignal(ke)},u=Object.keys(l),p=await Promise.all(Object.values(l)),a=Object.fromEntries(u.map((w,M)=>[w,p[M]]));return o.automation.webdriver=a.webdriver,o.automation.webdriverWritable=a.webdriverWritable,o.automation.selenium=a.selenium,o.automation.cdp=a.cdp,o.automation.playwright=a.playwright,o.automation.navigatorPropertyDescriptors=a.navigatorPropertyDescriptors,o.device.cpuCount=a.cpuCount,o.device.memory=a.memory,o.device.platform=a.platform,o.device.screenResolution=a.screenResolution,o.device.multimediaDevices=a.multimediaDevices,o.device.mediaQueries=a.mediaQueries,o.browser.userAgent=a.userAgent,o.browser.features=a.browserFeatures,o.browser.plugins=a.plugins,o.browser.extensions=a.browserExtensions,o.browser.highEntropyValues=a.highEntropyValues,o.browser.etsl=a.etsl,o.browser.maths=a.maths,o.browser.toSourceError=a.toSourceError,o.graphics.webGL=a.webGL,o.graphics.webgpu=a.webgpu,o.graphics.canvas=a.canvas,o.codecs=a.mediaCodecs,o.locale.internationalization=a.internationalization,o.locale.languages=a.languages,o.contexts.iframe=a.iframe,o.contexts.webWorker=a.webWorker,this.fingerprint.nonce=a.nonce,this.fingerprint.time=a.time,this.fingerprint.url=a.url,this.fingerprint.fastBotDetectionDetails=this.runDetectionRules(),this.fingerprint.fastBotDetection=Object.values(this.fingerprint.fastBotDetectionDetails).some(w=>w.detected),this.fingerprint.fsid=this.generateFingerprintScannerId(),r?await this.encryptFingerprint(JSON.stringify(this.fingerprint)):this.fingerprint}},nt=z;var St=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298];function N(t){let e=1779033703,r=3144134277,i=1013904242,o=2773480762,l=1359893119,u=2600822924,p=528734635,a=1541459225,w=t.length,M=w*8,H=64-(w+9)%64,k=w+1+(H===64?0:H)+8,D=new Uint8Array(k);D.set(t),D[w]=128;let U=new DataView(D.buffer);U.setUint32(k-4,M,!1);let v=new Int32Array(64);for(let I=0;I<k;I+=64){for(let m=0;m<16;m++)v[m]=U.getInt32(I+m*4,!1);for(let m=16;m<64;m++){let F=(v[m-15]>>>7|v[m-15]<<25)^(v[m-15]>>>18|v[m-15]<<14)^v[m-15]>>>3|0,T=(v[m-2]>>>17|v[m-2]<<15)^(v[m-2]>>>19|v[m-2]<<13)^v[m-2]>>>10|0;v[m]=v[m-16]+F+v[m-7]+T|0}let b=e,R=r,A=i,_=o,x=l,P=u,W=p,O=a;for(let m=0;m<64;m++){let F=(x>>>6|x<<26)^(x>>>11|x<<21)^(x>>>25|x<<7)|0,T=x&P^~x&W|0,V=O+F+T+St[m]+v[m]|0,j=(b>>>2|b<<30)^(b>>>13|b<<19)^(b>>>22|b<<10)|0,B=b&R^b&A^R&A|0,q=j+B|0;O=W,W=P,P=x,x=_+V|0,_=A,A=R,R=b,b=V+q|0}e=e+b|0,r=r+R|0,i=i+A|0,o=o+_|0,l=l+x|0,u=u+P|0,p=p+W|0,a=a+O|0}let L=new Uint8Array(32),C=new DataView(L.buffer);return C.setUint32(0,e,!1),C.setUint32(4,r,!1),C.setUint32(8,i,!1),C.setUint32(12,o,!1),C.setUint32(16,l,!1),C.setUint32(20,u,!1),C.setUint32(24,p,!1),C.setUint32(28,a,!1),L}function K(t){let e="";for(let r=0;r<t.length;r++)e+=(t[r]>>4).toString(16)+(t[r]&15).toString(16);return e}function E(t){return new TextEncoder().encode(t)}function Ct(t){return K(N(E(t)))}function at(t,e){t.length>64&&(t=N(t));let r=new Uint8Array(64);r.set(t);let i=new Uint8Array(64),o=new Uint8Array(64);for(let a=0;a<64;a++)i[a]=r[a]^54,o[a]=r[a]^92;let l=new Uint8Array(64+e.length);l.set(i),l.set(e,64);let u=N(l),p=new Uint8Array(96);return p.set(o),p.set(u,64),N(p)}function Rt(t,e){return K(at(E(t),E(e)))}function At(t){let e=new Uint8Array(t.length/2);for(let r=0;r<e.length;r++)e[r]=parseInt(t.substr(r*2,2),16);return e}function Et(t,e){return K(at(At(t),E(e)))}var Pt="__CROWDSEC_POW_WORKER_PATH__";function Wt(t,e){if(e<=0)return Promise.resolve("0");try{let r=new Worker(Pt);return new Promise(i=>{r.onmessage=o=>{r.terminate(),i(o.data)},r.onerror=()=>{r.terminate(),i(it(t,e))},r.postMessage({p:t,d:e})})}catch{return Promise.resolve(it(t,e))}}function it(t,e){let r=0;for(;;){let i=t+r.toString(36),o=N(E(i)),l=e>>3,u=e&7,p=!0;for(let a=0;a<l;a++)if(o[a]!==0){p=!1;break}if(p&&u>0){let a=255<<8-u&255;(o[l]&a)!==0&&(p=!1)}if(p)return r.toString(36);r++}}function Mt(t,e){let r=E(t),i=E(e),o=new Uint8Array(i.length);for(let u=0;u<i.length;u++)o[u]=i[u]^r[u%r.length];let l=String.fromCharCode(...o);return btoa(l)}var $=typeof _ts<"u"?_ts:"",ot=typeof _powP<"u"?_powP:"",kt=typeof _powM<"u"?_powM:"",Dt=typeof _powD<"u"?_powD:12,It="__CROWDSEC_SUBMIT_PATH__";function Q(t){if(typeof window.crowdsecSetChallengeStatus=="function"){window.crowdsecSetChallengeStatus(t);return}window.dispatchEvent(new CustomEvent("crowdsec-challenge-status",{detail:{status:t}}))}var _t="__CSEC_CHALLENGE_HOOK_v1__";async function Ot(t){let[e,r]=await Promise.all([Wt(ot,Dt),new nt().collectFingerprint({encrypt:!1})]),i=Et(t,$),o=Ct(i+e),l=Mt(o,JSON.stringify(r)),u=Rt(o,l+$+i+e);return fetch(It,{method:"POST",credentials:"same-origin",body:new URLSearchParams({f:l,t:i,ts:$,h:u,n:e,p:ot,m:kt})}).then(p=>p.json()).then(p=>{let a=typeof p?.status=="string"?p.status:"fail";Q(a)}).catch(()=>{Q("fail")})}globalThis[_t]=function(t){if(!t||typeof t.key!="string"||t.key.length===0){Q("fail");return}Ot(t.key)};
diff --git a/pkg/appsec/challenge/js/generate.go b/pkg/appsec/challenge/js/generate.go
index ca068f252bf..db1c455b258 100644
--- a/pkg/appsec/challenge/js/generate.go
+++ b/pkg/appsec/challenge/js/generate.go
@@ -2,3 +2,4 @@ package js
 
 //go:generate go run ./cmd/bundle
 //go:generate go run ./cmd/obfuscate
+//go:generate go run ./cmd/initialbundle
diff --git a/pkg/appsec/challenge/js/obfuscate/index.wasm.gz b/pkg/appsec/challenge/js/obfuscate/index.wasm.gz
index 04bdf12130b..ba8d4fd0e81 100644
Binary files a/pkg/appsec/challenge/js/obfuscate/index.wasm.gz and b/pkg/appsec/challenge/js/obfuscate/index.wasm.gz differ
diff --git a/pkg/appsec/challenge/js/obfuscate/obfuscate.js b/pkg/appsec/challenge/js/obfuscate/obfuscate.js
index 08fadb3b12a..6a9f25626d6 100644
--- a/pkg/appsec/challenge/js/obfuscate/obfuscate.js
+++ b/pkg/appsec/challenge/js/obfuscate/obfuscate.js
@@ -23,11 +23,30 @@ function writeStdout(str) {
 try {
   const sourceCode = readStdin();
 
-  const result = JavaScriptObfuscator.obfuscate(
-    sourceCode,
+  // Spread the high-obfuscation preset, then add reservedStrings so the
+  // sentinel that bridges the static bundle and the per-epoch dynamic key
+  // module (CSEC_CHALLENGE_HOOK_v1) survives the string-array transform
+  // identically in both bundles. Without this, the two independently-
+  // obfuscated artifacts wouldn't agree on the globalThis symbol they
+  // need to meet at.
+  //
+  // disableConsoleOutput is forced off because fpscanner's CDP detection
+  // (signals/cdp.ts) relies on `console.log(err)` triggering DevTools'
+  // eager access of `err.stack`, which in turn fires our overridden
+  // `Error.prepareStackTrace`. The preset's default `true` rewrites the
+  // call into a no-op stub and the detection silently always reports
+  // false. Leave it off so the side-channel works.
+  const opts = Object.assign(
+    {},
     JavaScriptObfuscator.getOptionsByPreset("high-obfuscation"),
+    {
+      reservedStrings: ["__CSEC_CHALLENGE_HOOK_v1__"],
+      disableConsoleOutput: false,
+    },
   );
 
+  const result = JavaScriptObfuscator.obfuscate(sourceCode, opts);
+
   writeStdout(result.getObfuscatedCode());
 } catch (e) {
   writeStdout(`// OBFUSCATION FAILED: ${e.message}`);
diff --git a/pkg/appsec/challenge/keyring.go b/pkg/appsec/challenge/keyring.go
new file mode 100644
index 00000000000..c6ac7ab29d7
--- /dev/null
+++ b/pkg/appsec/challenge/keyring.go
@@ -0,0 +1,239 @@
+package challenge
+
+import (
+	"crypto/sha256"
+	"encoding/binary"
+	"fmt"
+	"sync"
+	"time"
+
+	log "github.com/sirupsen/logrus"
+	"golang.org/x/crypto/hkdf"
+)
+
+// keyringHKDFSalt and the per-context info strings define the HKDF
+// derivations used to turn the long-lived master secret into operational
+// keys. They are part of the wire protocol — changing them silently would
+// invalidate every outstanding ticket and cookie across a fleet upgrade.
+// Bump the version suffix when intentionally rotating.
+//
+// Two independent derivation contexts are used:
+//
+//   - "epoch-sign":   per-epoch HMAC key for ticket / PoW MAC signing.
+//     Rotates with the keyring (tight forgery window).
+//   - "cookie-master": single long-lived AES key for cookie sealing.
+//     Lifetime equals master_secret's lifetime; cookie
+//     expiration is enforced by an explicit not_after
+//     timestamp inside the sealed envelope (see crypto.go).
+//
+// The two contexts produce cryptographically independent keys: leaking
+// one tells the attacker nothing about the other.
+const (
+	keyringHKDFSalt         = "crowdsec-challenge-keyring-v1"
+	keyringInfoSign         = "epoch-sign"
+	keyringInfoMasterCookie = "cookie-master"
+	keyringDerivedKeyBytes  = 32 // 256-bit keys throughout
+	keyringClockSkew        = 1  // accept currentEpoch + 1
+	keyringDefaultMaxLive   = 3  // currentEpoch and 2 prior
+	keyringDefaultRotation  = 5 * time.Minute
+	keyringMinRotation      = 30 * time.Second
+)
+
+// KeyRing produces keys deterministically from a shared master secret. Two
+// instances configured with the same masterSecret derive bit-identical
+// keys — the property that lets distributed (multi-WAF) deployments sign
+// and verify each other's challenges and cookies without coordination.
+//
+// Two key families with different lifetimes:
+//
+//   - Per-epoch signing key (rotates on rotationInterval). Used for ticket
+//     HMAC and PoW MAC. Live window:
+//     [currentEpoch - maxLive + 1 ... currentEpoch + clockSkew]
+//     Epochs outside the window are rejected, bounding ticket forgery
+//     exposure to maxLive * rotationInterval.
+//
+//   - Long-lived master cookie key (no rotation). Used for AES-GCM cookie
+//     sealing. Cookie expiration is enforced by an explicit not_after
+//     timestamp inside the sealed envelope, NOT by key eviction — so
+//     cookie TTL can be much larger than the ticket window without
+//     widening ticket forgery exposure.
+type KeyRing struct {
+	masterSecret     []byte
+	rotationInterval time.Duration
+	maxLive          int
+	clockSkew        int
+
+	// masterCookieKey is the long-lived cookie-sealing key; derived once
+	// at construction. Pointer-receiver methods read it without locking
+	// because it's never mutated after NewKeyRing returns.
+	masterCookieKey []byte
+
+	now func() time.Time // overridable for tests
+
+	mu    sync.RWMutex
+	cache map[int64][]byte // epoch -> per-epoch sign key
+}
+
+// NewKeyRing constructs a KeyRing. masterSecret must be at least minSecretBytes
+// long (callers should already have validated this via WithMasterSecret); the
+// rotation interval must be at least keyringMinRotation. maxLive defaults to
+// keyringDefaultMaxLive when zero.
+func NewKeyRing(masterSecret []byte, rotationInterval time.Duration, maxLive int) (*KeyRing, error) {
+	if len(masterSecret) < minSecretBytes {
+		return nil, fmt.Errorf("keyring master secret is %d bytes; minimum is %d", len(masterSecret), minSecretBytes)
+	}
+	if rotationInterval < keyringMinRotation {
+		return nil, fmt.Errorf("keyring rotation interval %s is below the floor %s", rotationInterval, keyringMinRotation)
+	}
+	if maxLive <= 0 {
+		maxLive = keyringDefaultMaxLive
+	}
+
+	return &KeyRing{
+		masterSecret:     masterSecret,
+		rotationInterval: rotationInterval,
+		maxLive:          maxLive,
+		clockSkew:        keyringClockSkew,
+		masterCookieKey:  deriveMasterCookieKey(masterSecret),
+		now:              time.Now,
+		cache:            make(map[int64][]byte),
+	}, nil
+}
+
+// CurrentEpoch returns the epoch identifier for the current wall-clock time.
+// Equal across all instances with synchronized clocks.
+func (k *KeyRing) CurrentEpoch() int64 {
+	return k.now().Unix() / int64(k.rotationInterval/time.Second)
+}
+
+// Current returns the epoch and signing key that should be used to sign new
+// outbound material right now.
+func (k *KeyRing) Current() (int64, []byte) {
+	epoch := k.CurrentEpoch()
+	return epoch, k.deriveOrCache(epoch)
+}
+
+// SignKey returns the HMAC key for an epoch if it's within the live window;
+// returns (nil, false) otherwise.
+func (k *KeyRing) SignKey(epoch int64) ([]byte, bool) {
+	if !k.isLive(epoch) {
+		return nil, false
+	}
+	return k.deriveOrCache(epoch), true
+}
+
+// MasterCookieKey returns the long-lived AES-key-input for cookie sealing.
+// Does not depend on epoch; same value for the lifetime of the master
+// secret. Cookie expiration is enforced via an explicit not_after timestamp
+// inside the sealed envelope (see crypto.go).
+func (k *KeyRing) MasterCookieKey() []byte {
+	return k.masterCookieKey
+}
+
+// LiveEpochs returns every epoch currently in the live window, oldest first.
+// Used by callers that need to enumerate the acceptable ticket-signing epochs.
+func (k *KeyRing) LiveEpochs() []int64 {
+	current := k.CurrentEpoch()
+	out := make([]int64, 0, k.maxLive+k.clockSkew)
+	for e := current - int64(k.maxLive-1); e <= current+int64(k.clockSkew); e++ {
+		out = append(out, e)
+	}
+	return out
+}
+
+func (k *KeyRing) isLive(epoch int64) bool {
+	current := k.CurrentEpoch()
+	return epoch >= current-int64(k.maxLive-1) && epoch <= current+int64(k.clockSkew)
+}
+
+// deriveOrCache returns the cached per-epoch signing key or derives and
+// stores it. Pure function of (masterSecret, epoch) so two instances
+// always agree.
+func (k *KeyRing) deriveOrCache(epoch int64) []byte {
+	k.mu.RLock()
+	if cached, ok := k.cache[epoch]; ok {
+		k.mu.RUnlock()
+		return cached
+	}
+	k.mu.RUnlock()
+
+	k.mu.Lock()
+	defer k.mu.Unlock()
+
+	// Re-check after acquiring the write lock.
+	if cached, ok := k.cache[epoch]; ok {
+		return cached
+	}
+
+	start := time.Now()
+	derived := deriveEpochKey(k.masterSecret, epoch, keyringInfoSign)
+	derivationDuration := time.Since(start)
+
+	// Bound the cache so it can't grow without limit if the clock jumps.
+	// Anything outside the live window is safe to evict.
+	evicted := 0
+	for cachedEpoch := range k.cache {
+		if !k.isLive(cachedEpoch) {
+			delete(k.cache, cachedEpoch)
+			evicted++
+		}
+	}
+
+	k.cache[epoch] = derived
+
+	// One INFO line per fresh epoch derivation. HKDF itself is microseconds
+	// — we log it for distributed-troubleshooting visibility (every WAF
+	// instance with the same master_secret should log the same epoch
+	// numbers at the same wall-clock times) and to surface unexpected
+	// rotation churn (clock jumps, mis-sized live window, etc.).
+	log.WithFields(log.Fields{
+		"epoch":         epoch,
+		"current_epoch": k.CurrentEpoch(),
+		"derivation_us": derivationDuration.Microseconds(),
+		"cache_evicted": evicted,
+		"cache_size":    len(k.cache),
+	}).Info("WAF challenge: derived per-epoch key")
+
+	return derived
+}
+
+// deriveEpochKey performs HKDF-SHA256 with a stable salt and a context-
+// specific info value: <context bytes> || ':' || <epoch_be8>. Two instances
+// with the same masterSecret always derive the same bytes for the same epoch
+// and context — this is what makes distributed agreement work.
+//
+// The colon separator prevents context-prefix collisions (e.g. avoids "epoch"
+// + "sign" colliding with "epochs" + "ign").
+func deriveEpochKey(masterSecret []byte, epoch int64, context string) []byte {
+	info := make([]byte, 0, len(context)+1+8)
+	info = append(info, context...)
+	info = append(info, ':')
+	var epochBytes [8]byte
+	binary.BigEndian.PutUint64(epochBytes[:], uint64(epoch))
+	info = append(info, epochBytes[:]...)
+
+	return hkdfExtract(masterSecret, info)
+}
+
+// deriveMasterCookieKey performs HKDF-SHA256 with no epoch component, so
+// the output depends only on the master secret. Identical across all
+// instances sharing the master, stable for the lifetime of the master.
+// Cookie expiration is enforced separately by a not_after timestamp
+// inside the sealed envelope (see crypto.go).
+func deriveMasterCookieKey(masterSecret []byte) []byte {
+	return hkdfExtract(masterSecret, []byte(keyringInfoMasterCookie))
+}
+
+// hkdfExtract is the shared HKDF-SHA256 call used by both derivation
+// helpers. Salt is the fixed keyringHKDFSalt; info is caller-supplied
+// (already disambiguated by context).
+func hkdfExtract(masterSecret []byte, info []byte) []byte {
+	r := hkdf.New(sha256.New, masterSecret, []byte(keyringHKDFSalt), info)
+
+	out := make([]byte, keyringDerivedKeyBytes)
+	if _, err := r.Read(out); err != nil {
+		// HKDF cannot fail at this length with SHA-256; treat as unrecoverable.
+		panic(fmt.Sprintf("keyring: hkdf read failed: %v", err))
+	}
+	return out
+}
diff --git a/pkg/appsec/challenge/keyring_integration_test.go b/pkg/appsec/challenge/keyring_integration_test.go
new file mode 100644
index 00000000000..52759eea90f
--- /dev/null
+++ b/pkg/appsec/challenge/keyring_integration_test.go
@@ -0,0 +1,323 @@
+package challenge
+
+import (
+	"bytes"
+	"encoding/base64"
+	"net/http"
+	"strconv"
+	"strings"
+	"testing"
+	"time"
+
+	"github.com/crowdsecurity/crowdsec/pkg/appsec/challenge/pb"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+// TestCookieV0_RoundTrip is the basic positive case: seal under the master
+// cookie key with an explicit not_after one hour in the future, open
+// immediately, fingerprint comes back.
+func TestCookieV0_RoundTrip(t *testing.T) {
+	keys := testKeyRing()
+	envelope := &pb.ChallengeCookie{PowDifficulty: 12}
+	notAfter := time.Now().Add(time.Hour).Unix()
+
+	encoded, err := sealCookieV0(envelope, keys.MasterCookieKey(), notAfter, []byte("ua"))
+	require.NoError(t, err)
+
+	got, err := openCookie(encoded, keys.MasterCookieKey(), []byte("ua"))
+	require.NoError(t, err)
+	assert.Equal(t, int32(12), got.GetPowDifficulty())
+}
+
+// TestCookieV0_ExpiredRejected confirms the not_after timestamp embedded
+// inside the encrypted envelope is enforced on open.
+func TestCookieV0_ExpiredRejected(t *testing.T) {
+	keys := testKeyRing()
+
+	// notAfter is one hour in the past — the cookie was already expired
+	// when issued (this is what a stale cookie sent by a slow client would
+	// look like on the server).
+	pastNotAfter := time.Now().Add(-time.Hour).Unix()
+	encoded, err := sealCookieV0(&pb.ChallengeCookie{}, keys.MasterCookieKey(), pastNotAfter, []byte("ua"))
+	require.NoError(t, err)
+
+	_, err = openCookie(encoded, keys.MasterCookieKey(), []byte("ua"))
+	require.Error(t, err)
+	assert.ErrorIs(t, err, ErrCookieExpired,
+		"expired cookie must produce ErrCookieExpired, got %v", err)
+}
+
+// TestCookieV0_TamperedExpirationRejected is the security-critical test for
+// the design choice of putting not_after INSIDE the encrypted envelope. Any
+// flip of a byte in the ciphertext (including bytes covering the not_after
+// header) must invalidate the AEAD tag, not just shift the apparent
+// expiration time.
+func TestCookieV0_TamperedExpirationRejected(t *testing.T) {
+	keys := testKeyRing()
+	notAfter := time.Now().Add(time.Hour).Unix()
+
+	encoded, err := sealCookieV0(&pb.ChallengeCookie{}, keys.MasterCookieKey(), notAfter, []byte("ua"))
+	require.NoError(t, err)
+
+	raw, err := base64.RawURLEncoding.DecodeString(encoded)
+	require.NoError(t, err)
+
+	// Wire layout: version(1) || nonce(12) || ciphertext(...)
+	// The first byte of ciphertext corresponds to the first byte of
+	// plaintext, which is the high byte of not_after_be8. Flipping it
+	// MUST invalidate the AEAD tag.
+	tampered := append([]byte(nil), raw...)
+	tampered[1+12] ^= 0x80 // flip MSB of not_after's high byte
+	tamperedEncoded := base64.RawURLEncoding.EncodeToString(tampered)
+
+	_, err = openCookie(tamperedEncoded, keys.MasterCookieKey(), []byte("ua"))
+	require.Error(t, err)
+	assert.ErrorIs(t, err, ErrCookieSignature,
+		"tampering with the not_after region must produce ErrCookieSignature (AEAD tag failure)")
+}
+
+// TestCookieV0_UAMismatchRejected confirms the User-Agent AAD binding.
+func TestCookieV0_UAMismatchRejected(t *testing.T) {
+	keys := testKeyRing()
+	notAfter := time.Now().Add(time.Hour).Unix()
+
+	encoded, err := sealCookieV0(&pb.ChallengeCookie{}, keys.MasterCookieKey(), notAfter, []byte("ua-A"))
+	require.NoError(t, err)
+
+	_, err = openCookie(encoded, keys.MasterCookieKey(), []byte("ua-B"))
+	assert.ErrorIs(t, err, ErrCookieSignature)
+}
+
+// TestCookieV0_SurvivesArbitraryRotation is the headline test for the v0
+// design: a cookie sealed under the long-lived master cookie key remains
+// valid across as many ticket-signing-key rotations as the keyring goes
+// through. The previous design tied cookie validity to the same live
+// window as ticket signing; this one decouples them completely.
+//
+// We advance the keyring's clock (forcing it to derive a stream of new
+// epoch signing keys) and confirm that openCookie — which depends only
+// on the master cookie key, not on any epoch — keeps working.
+func TestCookieV0_SurvivesArbitraryRotation(t *testing.T) {
+	t0 := time.Now()
+	keys := newTestKeyRing(t, testSecret, time.Minute, t0)
+
+	// notAfter is well in the future from real wall-clock time, so the
+	// in-envelope expiration check (which uses real time.Now()) won't
+	// reject the cookie.
+	notAfter := t0.Add(24 * time.Hour).Unix()
+	encoded, err := sealCookieV0(&pb.ChallengeCookie{PowDifficulty: 9}, keys.MasterCookieKey(), notAfter, []byte("ua"))
+	require.NoError(t, err)
+
+	// Roll the keyring's clock forward — this triggers per-epoch sign-key
+	// derivations and (with maxLive=3) evictions. None of that affects
+	// the master cookie key, so the cookie keeps validating.
+	for _, advance := range []time.Duration{
+		1 * time.Minute,
+		10 * time.Minute,
+		1 * time.Hour,
+		6 * time.Hour,
+		23 * time.Hour,
+	} {
+		keys.now = func() time.Time { return t0.Add(advance) }
+
+		// Touching keys.Current() forces a derivation under the new
+		// keyring time, simulating real rotation activity.
+		_, _ = keys.Current()
+
+		got, err := openCookie(encoded, keys.MasterCookieKey(), []byte("ua"))
+		require.NoError(t, err,
+			"cookie should still validate after %s of keyring rotation; got %v", advance, err)
+		assert.Equal(t, int32(9), got.GetPowDifficulty())
+	}
+}
+
+// TestCookieV0_ExpiryEnforcedAgainstWallClock is the counterpart to the
+// rotation test: cookie expiration uses real wall-clock time (not the
+// keyring's overridable now), so we seal a cookie with notAfter already
+// in the past and confirm rejection.
+func TestCookieV0_ExpiryEnforcedAgainstWallClock(t *testing.T) {
+	keys := testKeyRing()
+
+	pastNotAfter := time.Now().Add(-time.Minute).Unix()
+	encoded, err := sealCookieV0(&pb.ChallengeCookie{}, keys.MasterCookieKey(), pastNotAfter, []byte("ua"))
+	require.NoError(t, err)
+
+	_, err = openCookie(encoded, keys.MasterCookieKey(), []byte("ua"))
+	require.Error(t, err)
+	assert.ErrorIs(t, err, ErrCookieExpired)
+}
+
+// TestCookieV0_MasterSecretChangeInvalidates is the expected counter-property
+// to SurvivesArbitraryRotation: if the operator rotates the master secret
+// (a manual config change), every outstanding cookie is invalidated.
+func TestCookieV0_MasterSecretChangeInvalidates(t *testing.T) {
+	notAfter := time.Now().Add(time.Hour).Unix()
+
+	keysA, err := NewKeyRing(bytes.Repeat([]byte{0xaa}, 32), time.Minute, 3)
+	require.NoError(t, err)
+	keysB, err := NewKeyRing(bytes.Repeat([]byte{0xbb}, 32), time.Minute, 3)
+	require.NoError(t, err)
+
+	encoded, err := sealCookieV0(&pb.ChallengeCookie{}, keysA.MasterCookieKey(), notAfter, []byte("ua"))
+	require.NoError(t, err)
+
+	_, err = openCookie(encoded, keysB.MasterCookieKey(), []byte("ua"))
+	assert.ErrorIs(t, err, ErrCookieSignature,
+		"cookie sealed under secret A must not decrypt under secret B")
+}
+
+// TestCookieV0_DistributedSetup_TwoInstances confirms cookies issued by
+// instance A validate against instance B as long as both share the same
+// master secret. This is the multi-WAF deployment invariant.
+func TestCookieV0_DistributedSetup_TwoInstances(t *testing.T) {
+	secret := bytes.Repeat([]byte{0xcc}, 32)
+	a, err := NewKeyRing(secret, time.Minute, 3)
+	require.NoError(t, err)
+	b, err := NewKeyRing(secret, time.Minute, 3)
+	require.NoError(t, err)
+
+	assert.True(t, bytes.Equal(a.MasterCookieKey(), b.MasterCookieKey()),
+		"two instances with the same master_secret must derive the same master cookie key")
+
+	notAfter := time.Now().Add(time.Hour).Unix()
+	encoded, err := sealCookieV0(&pb.ChallengeCookie{PowDifficulty: 14}, a.MasterCookieKey(), notAfter, []byte("ua"))
+	require.NoError(t, err)
+
+	got, err := openCookie(encoded, b.MasterCookieKey(), []byte("ua"))
+	require.NoError(t, err, "cookie issued by A must validate against B (same master_secret)")
+	assert.Equal(t, int32(14), got.GetPowDifficulty())
+}
+
+// TestCookie_UnknownVersionRejected makes the version-byte dispatch
+// explicit: a cookie with an unknown leading byte is rejected with the
+// dedicated ErrCookieVersion sentinel. This is the extension point for
+// any future cookie schema bump.
+func TestCookie_UnknownVersionRejected(t *testing.T) {
+	keys := testKeyRing()
+
+	// Forge: version byte 0xFE followed by random-looking junk.
+	raw := append([]byte{0xFE}, []byte("0123456789abcdefghijklmnop")...)
+	encoded := base64.RawURLEncoding.EncodeToString(raw)
+
+	_, err := openCookie(encoded, keys.MasterCookieKey(), []byte("ua"))
+	require.Error(t, err)
+	assert.ErrorIs(t, err, ErrCookieVersion, "unknown version byte must produce ErrCookieVersion")
+}
+
+// TestRotation_TicketSurvives_WithinLiveWindow exercises the most important
+// guarantee for in-flight requests: a ticket signed under epoch N validates
+// after the keyring rolls to epoch N+1, as long as N is still within the
+// live window. Without this, every key rotation would invalidate every
+// challenge currently in flight.
+//
+// matchesChallenge uses time.Since on the wall clock (not the keyring's
+// overridable now), so we anchor t0 at the real current time and only
+// override the keyring's clock — small enough offsets stay inside the
+// challengeJSRefreshInterval freshness check.
+func TestRotation_TicketSurvives_WithinLiveWindow(t *testing.T) {
+	t0 := time.Now()
+	keys := newTestKeyRing(t, testSecret, time.Minute, t0)
+
+	c := &ChallengeRuntime{keys: keys}
+	tsStr := strconvI64(t0.UnixNano())
+	ticket := c.computeTicket(tsStr)
+	salt := generatePowPrefix()
+	mac := c.computePowMAC(salt, ticket, tsStr)
+
+	// Roll the keyring clock forward one rotation interval — the ticket's
+	// epoch is now "previous" but still in the live window.
+	keys.now = func() time.Time { return t0.Add(70 * time.Second) }
+
+	assert.True(t, c.matchesChallenge(ticket, tsStr, salt, mac),
+		"ticket from previous epoch must still validate within the live window")
+}
+
+// TestRotation_TicketRejected_OutOfWindow proves the negative side of the
+// previous test: once the keyring's view of time has advanced enough to
+// evict the ticket's epoch, validation fails. Anchored at real-time t0 so
+// matchesChallenge's own freshness check (time.Since) doesn't conflate with
+// the keyring's eviction logic.
+func TestRotation_TicketRejected_OutOfWindow(t *testing.T) {
+	t0 := time.Now()
+	keys := newTestKeyRing(t, testSecret, time.Minute, t0)
+
+	c := &ChallengeRuntime{keys: keys}
+	tsStr := strconvI64(t0.UnixNano())
+	ticket := c.computeTicket(tsStr)
+	salt := generatePowPrefix()
+	mac := c.computePowMAC(salt, ticket, tsStr)
+
+	// Jump the keyring's clock past the live window (maxLive=3 + skew=1 =
+	// any epoch >4 minutes ahead in the keyring's view evicts the original).
+	keys.now = func() time.Time { return t0.Add(5 * time.Minute) }
+
+	assert.False(t, c.matchesChallenge(ticket, tsStr, salt, mac),
+		"ticket from an evicted epoch must not validate")
+}
+
+// TestEndToEnd_ValidateChallengeResponse walks the full validation path
+// (matches challenge, opens cookie). Regression guard for keyring +
+// cookie-v0 wired together.
+func TestEndToEnd_ValidateChallengeResponse(t *testing.T) {
+	keys := testKeyRing()
+	c := &ChallengeRuntime{keys: keys, powDifficulty: 8, cookieTTL: time.Hour}
+
+	ticket, ts := freshTicket()
+	body := buildValidBody(c.powDifficulty, ticket, ts)
+
+	req, err := http.NewRequest("POST", "http://example.com/submit", strings.NewReader(body))
+	require.NoError(t, err)
+	req.Header.Set("User-Agent", "test-agent")
+
+	ck, _, err := c.ValidateChallengeResponse(req, []byte(body))
+	require.NoError(t, err)
+	require.NotNil(t, ck)
+
+	// Round-trip the cookie through the public ValidCookie API to confirm
+	// the full Seal → parse Set-Cookie → Open path is correct.
+	parsed, err := http.ParseSetCookie(ck.String())
+	require.NoError(t, err)
+
+	got, err := c.ValidCookie(parsed, "test-agent")
+	require.NoError(t, err)
+	assert.Equal(t, 8, got.PowDifficulty)
+}
+
+// TestCookieV0_BrowserTTLMatchesServerTTL guards the gotcha mentioned in
+// the v0 design discussion: if the browser drops the cookie before the
+// server stops accepting it (or vice versa), users get unexpected
+// re-challenges. The Set-Cookie Max-Age MUST match the server-side
+// cookieTTL.
+func TestCookieV0_BrowserTTLMatchesServerTTL(t *testing.T) {
+	keys := testKeyRing()
+	c := &ChallengeRuntime{keys: keys, powDifficulty: 8, cookieTTL: 90 * time.Minute}
+
+	ticket, ts := freshTicket()
+	body := buildValidBody(c.powDifficulty, ticket, ts)
+
+	req, err := http.NewRequest("POST", "http://example.com/submit", strings.NewReader(body))
+	require.NoError(t, err)
+	req.Header.Set("User-Agent", "test-agent")
+
+	ck, _, err := c.ValidateChallengeResponse(req, []byte(body))
+	require.NoError(t, err)
+
+	parsed, err := http.ParseSetCookie(ck.String())
+	require.NoError(t, err)
+
+	// MaxAge is a count of seconds; compare to our cookieTTL.
+	// The cookie helper computes MaxAge as
+	//   int(time.Until(Expires).Seconds())
+	// where Expires was set from time.Now()+TTL on a slightly earlier
+	// time.Now() reading. Sub-second elapsed time between the two reads
+	// can shave a full second off after truncation, so we allow ±2s.
+	expected := int((90 * time.Minute).Seconds())
+	assert.InDelta(t, expected, parsed.MaxAge, 2,
+		"browser-side Max-Age (%d) should be within 2s of server-side cookieTTL (%d)",
+		parsed.MaxAge, expected)
+}
+
+func strconvI64(n int64) string {
+	return strconv.FormatInt(n, 10)
+}
diff --git a/pkg/appsec/challenge/keyring_test.go b/pkg/appsec/challenge/keyring_test.go
new file mode 100644
index 00000000000..7b3c17e6e2c
--- /dev/null
+++ b/pkg/appsec/challenge/keyring_test.go
@@ -0,0 +1,172 @@
+package challenge
+
+import (
+	"bytes"
+	"encoding/hex"
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func newTestKeyRing(t testing.TB, secret []byte, interval time.Duration, fixed time.Time) *KeyRing {
+	t.Helper()
+	if secret == nil {
+		secret = bytes.Repeat([]byte{0xab}, 32)
+	}
+	if interval == 0 {
+		interval = time.Minute
+	}
+	k, err := NewKeyRing(secret, interval, 3)
+	require.NoError(t, err)
+	if !fixed.IsZero() {
+		k.now = func() time.Time { return fixed }
+	}
+	return k
+}
+
+func TestNewKeyRing_RejectsShortSecret(t *testing.T) {
+	_, err := NewKeyRing([]byte("too-short"), time.Minute, 3)
+	require.Error(t, err)
+}
+
+func TestNewKeyRing_RejectsTinyInterval(t *testing.T) {
+	_, err := NewKeyRing(bytes.Repeat([]byte{1}, 32), time.Second, 3)
+	require.Error(t, err)
+}
+
+func TestKeyRing_DeterministicAcrossInstances(t *testing.T) {
+	// Two KeyRings with the same secret + same interval, evaluated at the
+	// same wall-clock moment, MUST produce bit-identical keys for the same
+	// epoch. Regression guard for distributed (multi-WAF) deployments.
+	secret := bytes.Repeat([]byte{0x42}, 32)
+	fixed := time.Date(2026, 5, 7, 12, 0, 0, 0, time.UTC)
+
+	a := newTestKeyRing(t, secret, time.Minute, fixed)
+	b := newTestKeyRing(t, secret, time.Minute, fixed)
+
+	epochA, signA := a.Current()
+	epochB, signB := b.Current()
+	assert.Equal(t, epochA, epochB)
+	assert.True(t, bytes.Equal(signA, signB), "sign keys diverge across instances")
+
+	// The master cookie key is independent of epoch and must also agree
+	// across instances configured with the same master secret.
+	assert.True(t, bytes.Equal(a.MasterCookieKey(), b.MasterCookieKey()),
+		"master cookie keys diverge across instances")
+
+	// Sign and master cookie keys derive from the same secret with
+	// different HKDF info strings, so they MUST differ. If they didn't,
+	// a leaked sign key would also forge cookies (and vice versa).
+	assert.False(t, bytes.Equal(signA, a.MasterCookieKey()),
+		"sign and master cookie keys must differ — domain separation is the whole point")
+}
+
+func TestKeyRing_RotatesAtIntervalBoundary(t *testing.T) {
+	secret := bytes.Repeat([]byte{0x99}, 32)
+	t0 := time.Date(2026, 1, 1, 12, 0, 0, 0, time.UTC)
+
+	k := newTestKeyRing(t, secret, time.Minute, t0)
+	e0, key0 := k.Current()
+
+	// Cross the 60-second boundary — current epoch must increment.
+	k.now = func() time.Time { return t0.Add(61 * time.Second) }
+	e1, key1 := k.Current()
+
+	assert.Equal(t, e0+1, e1)
+	assert.False(t, bytes.Equal(key0, key1), "key did not change across rotation")
+
+	// And the previous epoch's key is still derivable while in the live window.
+	prev, ok := k.SignKey(e0)
+	require.True(t, ok)
+	assert.True(t, bytes.Equal(key0, prev), "previous epoch key changed when re-derived")
+}
+
+func TestKeyRing_LiveWindow(t *testing.T) {
+	t0 := time.Date(2026, 1, 1, 12, 0, 0, 0, time.UTC)
+	k := newTestKeyRing(t, nil, time.Minute, t0)
+
+	// maxLive=3 + clockSkew=1 → live window is current-2 .. current+1.
+	current, _ := k.Current()
+
+	// In window.
+	for _, e := range []int64{current - 2, current - 1, current, current + 1} {
+		_, ok := k.SignKey(e)
+		assert.True(t, ok, "epoch %d should be live", e)
+	}
+
+	// Out of window.
+	for _, e := range []int64{current - 3, current + 2} {
+		_, ok := k.SignKey(e)
+		assert.False(t, ok, "epoch %d should NOT be live", e)
+	}
+}
+
+func TestKeyRing_LiveEpochsOrdered(t *testing.T) {
+	t0 := time.Date(2026, 1, 1, 12, 0, 0, 0, time.UTC)
+	k := newTestKeyRing(t, nil, time.Minute, t0)
+	current, _ := k.Current()
+
+	live := k.LiveEpochs()
+	require.Len(t, live, 4) // 3 past/current + 1 future skew
+
+	// Ordered ascending, contiguous.
+	for i, e := range live {
+		assert.Equal(t, current-2+int64(i), e)
+	}
+}
+
+func TestKeyRing_CacheEvictsStale(t *testing.T) {
+	t0 := time.Date(2026, 1, 1, 12, 0, 0, 0, time.UTC)
+	k := newTestKeyRing(t, nil, time.Minute, t0)
+
+	// Touch the current epoch to seed the cache.
+	startEpoch, _ := k.Current()
+
+	// Jump far into the future so startEpoch falls out of the live window;
+	// the next derivation must evict it.
+	k.now = func() time.Time { return t0.Add(time.Hour) }
+	_, _ = k.Current()
+
+	k.mu.RLock()
+	_, present := k.cache[startEpoch]
+	k.mu.RUnlock()
+	assert.False(t, present, "stale epoch %d should have been evicted from the cache", startEpoch)
+}
+
+// TestKeyRing_KnownVectors locks down the HKDF derivation. Any change to the
+// salt / info strings / serialization that breaks distributed agreement on a
+// fleet upgrade will make these vectors fail. If you intentionally change the
+// scheme, regenerate these vectors AND rotate the keyring version constant.
+func TestKeyRing_KnownVectors(t *testing.T) {
+	secret, err := hex.DecodeString("000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f")
+	require.NoError(t, err)
+
+	k, err := NewKeyRing(secret, time.Minute, 3)
+	require.NoError(t, err)
+
+	// Sign key for epoch 0 must derive deterministically.
+	want := hex.EncodeToString(deriveEpochKey(secret, 0, keyringInfoSign))
+	got := hex.EncodeToString(deriveEpochKey(k.masterSecret, 0, keyringInfoSign))
+	assert.Equal(t, want, got, "epoch 0 sign key derivation must be deterministic")
+
+	// Master cookie key (no epoch component) must also be deterministic.
+	wantCookie := hex.EncodeToString(deriveMasterCookieKey(secret))
+	gotCookie := hex.EncodeToString(k.MasterCookieKey())
+	assert.Equal(t, wantCookie, gotCookie, "master cookie key derivation must be deterministic")
+
+	// Cross-context separation: sign key for any epoch must NOT equal the
+	// master cookie key. Domain separation is the whole point of using
+	// distinct HKDF info strings.
+	signKey := deriveEpochKey(secret, 42, keyringInfoSign)
+	cookieKey := deriveMasterCookieKey(secret)
+	assert.NotEqual(t, hex.EncodeToString(signKey), hex.EncodeToString(cookieKey),
+		"sign and master-cookie contexts must produce different keys")
+
+	// Cross-epoch separation: same context, different epoch → different bytes.
+	e0 := deriveEpochKey(secret, 0, keyringInfoSign)
+	e1 := deriveEpochKey(secret, 1, keyringInfoSign)
+	assert.NotEqual(t, hex.EncodeToString(e0), hex.EncodeToString(e1),
+		"adjacent epochs must produce different sign keys")
+}
diff --git a/pkg/appsec/challenge/obfuscator.go b/pkg/appsec/challenge/obfuscator.go
new file mode 100644
index 00000000000..ad89b077b2a
--- /dev/null
+++ b/pkg/appsec/challenge/obfuscator.go
@@ -0,0 +1,46 @@
+package challenge
+
+import (
+	"bytes"
+	"context"
+	_ "embed"
+	"fmt"
+	"sync"
+
+	"github.com/tetratelabs/wazero"
+)
+
+//go:embed js/obfuscate/index.wasm.gz
+var obfuscatorWasmGz []byte
+
+var (
+	obfuscatorWasm     []byte
+	obfuscatorWasmOnce sync.Once
+)
+
+// ObfuscateJS runs the input source through the embedded `javascript-obfuscator`
+// wasm module and returns the obfuscated output. Thread-safe: wazero allows
+// concurrent module instantiations from the same compiled module, which is
+// what makes the dynamic-module singleflight pattern work.
+func (c *ChallengeRuntime) ObfuscateJS(ctx context.Context, inputJS string) (string, error) {
+	stdin := bytes.NewReader([]byte(inputJS))
+	var stdout bytes.Buffer
+	var stderr bytes.Buffer
+
+	config := wazero.NewModuleConfig().
+		WithStdin(stdin).
+		WithStdout(&stdout).
+		WithStderr(&stderr)
+
+	mod, err := c.r.InstantiateModule(ctx, c.obfuscatorMod, config)
+	if err != nil {
+		if stderr.Len() > 0 {
+			return "", fmt.Errorf("wasm runtime error: %v | stderr: %s", err, stderr.String())
+		}
+		return "", fmt.Errorf("wasm instantiation error: %v", err)
+	}
+
+	mod.Close(ctx)
+
+	return stdout.String(), nil
+}
diff --git a/pkg/appsec/challenge/secret.go b/pkg/appsec/challenge/secret.go
new file mode 100644
index 00000000000..ed7f68bab97
--- /dev/null
+++ b/pkg/appsec/challenge/secret.go
@@ -0,0 +1,70 @@
+package challenge
+
+import (
+	crand "crypto/rand"
+	"encoding/hex"
+	"errors"
+	"fmt"
+)
+
+// minSecretBytes is the smallest accepted master-secret length. 32 bytes is
+// the natural minimum for an HMAC-SHA256 key with full security margin; we
+// reject anything shorter as a configuration error rather than silently
+// padding it.
+const minSecretBytes = 32
+
+// generateRandomSecret returns a fresh 32-byte secret suitable for use when
+// no master_secret is configured. Single-instance deployments are fine with
+// this; distributed deployments MUST configure a shared secret because each
+// instance generates an independent random one here.
+func generateRandomSecret() ([]byte, error) {
+	buf := make([]byte, 32)
+	if _, err := crand.Read(buf); err != nil {
+		return nil, fmt.Errorf("generate random master secret: %w", err)
+	}
+	return buf, nil
+}
+
+// ParseConfiguredSecret accepts a configured master secret as either a hex
+// string (preferred — encodes raw bytes unambiguously) or a raw passphrase
+// (fallback for human-edited configs). The result is at least minSecretBytes.
+func ParseConfiguredSecret(value string) ([]byte, error) {
+	if value == "" {
+		return nil, errors.New("empty master secret")
+	}
+
+	// Hex form: even length, hex digits only.
+	if isHex(value) {
+		raw, err := hex.DecodeString(value)
+		if err == nil {
+			if len(raw) < minSecretBytes {
+				return nil, fmt.Errorf("hex master secret decodes to %d bytes; minimum is %d", len(raw), minSecretBytes)
+			}
+			return raw, nil
+		}
+		// Fall through to passphrase handling on hex parse failure — defensive.
+	}
+
+	if len(value) < minSecretBytes {
+		return nil, fmt.Errorf("passphrase master secret is %d bytes; minimum is %d", len(value), minSecretBytes)
+	}
+
+	return []byte(value), nil
+}
+
+func isHex(s string) bool {
+	if len(s) == 0 || len(s)%2 != 0 {
+		return false
+	}
+	for i := 0; i < len(s); i++ {
+		c := s[i]
+		switch {
+		case c >= '0' && c <= '9':
+		case c >= 'a' && c <= 'f':
+		case c >= 'A' && c <= 'F':
+		default:
+			return false
+		}
+	}
+	return true
+}
diff --git a/pkg/appsec/challenge/secret_test.go b/pkg/appsec/challenge/secret_test.go
new file mode 100644
index 00000000000..896a168d840
--- /dev/null
+++ b/pkg/appsec/challenge/secret_test.go
@@ -0,0 +1,63 @@
+package challenge
+
+import (
+	"strings"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+func TestParseConfiguredSecret_Hex(t *testing.T) {
+	// 32 raw bytes = 64 hex chars
+	hex := strings.Repeat("ab", 32)
+	got, err := ParseConfiguredSecret(hex)
+	require.NoError(t, err)
+	assert.Len(t, got, 32)
+}
+
+func TestParseConfiguredSecret_HexTooShort(t *testing.T) {
+	// 31 raw bytes = 62 hex chars → must be rejected
+	hex := strings.Repeat("ab", 31)
+	_, err := ParseConfiguredSecret(hex)
+	require.Error(t, err)
+	assert.Contains(t, err.Error(), "minimum is 32")
+}
+
+func TestParseConfiguredSecret_Passphrase(t *testing.T) {
+	// "long enough passphrase, definitely > 32 bytes" — 47 bytes
+	pw := "long enough passphrase, definitely > 32 bytes"
+	got, err := ParseConfiguredSecret(pw)
+	require.NoError(t, err)
+	assert.Equal(t, []byte(pw), got)
+}
+
+func TestParseConfiguredSecret_PassphraseTooShort(t *testing.T) {
+	_, err := ParseConfiguredSecret("short")
+	require.Error(t, err)
+}
+
+func TestParseConfiguredSecret_Empty(t *testing.T) {
+	_, err := ParseConfiguredSecret("")
+	require.Error(t, err)
+}
+
+func TestGenerateRandomSecret(t *testing.T) {
+	a, err := generateRandomSecret()
+	require.NoError(t, err)
+	b, err := generateRandomSecret()
+	require.NoError(t, err)
+
+	assert.Len(t, a, 32)
+	assert.Len(t, b, 32)
+	assert.NotEqual(t, a, b, "successive calls must yield different secrets")
+}
+
+func TestNewChallengeRuntime_RejectsShortSecret(t *testing.T) {
+	// Bypassing ParseConfiguredSecret to feed the runtime a too-short secret
+	// directly via the option — the runtime itself must defend against this.
+	short := []byte("too-short")
+	_, err := NewChallengeRuntime(t.Context(), WithMasterSecret(short))
+	require.Error(t, err)
+	assert.Contains(t, err.Error(), "minimum")
+}
diff --git a/pkg/appsec/challenge/split_bundle_test.go b/pkg/appsec/challenge/split_bundle_test.go
new file mode 100644
index 00000000000..eae72799baa
--- /dev/null
+++ b/pkg/appsec/challenge/split_bundle_test.go
@@ -0,0 +1,217 @@
+package challenge
+
+import (
+	"context"
+	"encoding/hex"
+	"strings"
+	"sync"
+	"testing"
+	"time"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+// TestSplitBundle_HookSentinelInBakedBundle is the smallest possible
+// regression guard for the split-bundle protocol: the static obfuscated
+// bundle that we ship in initial_bundle.js.gz MUST contain a literal
+// occurrence of the hook sentinel. Without it, the dynamic key module
+// would never find globalThis[hookName] and the challenge would silently
+// fail in every browser.
+//
+// The sentinel survives the high-obfuscation preset only because
+// obfuscate.js explicitly registers it via reservedStrings. If someone
+// removes that registration this test fires before any user notices.
+func TestSplitBundle_HookSentinelInBakedBundle(t *testing.T) {
+	rt := &ChallengeRuntime{
+		obfuscatedJSCache: make([]obfuscatedScript, 0, challengeJSCacheSize),
+	}
+	require.NoError(t, rt.seedCacheFromInitialBundle())
+
+	bundle := rt.obfuscatedJSCache[0].Code
+	require.NotEmpty(t, bundle)
+
+	count := strings.Count(bundle, hookSentinel)
+	assert.GreaterOrEqual(t, count, 1,
+		"hook sentinel %q must survive obfuscation in the static bundle (was reservedStrings dropped from obfuscate.js?)",
+		hookSentinel)
+}
+
+// TestSplitBundle_DynamicModuleEmbedsCurrentEpochKey verifies the dynamic
+// module that GetChallengePage will serve actually contains the per-epoch
+// key. The output is heavily obfuscated, but the key bytes (hex-encoded)
+// MUST be present — if they aren't, the client can't HMAC the ticket.
+//
+// We do not assert the literal hex string survives intact (the obfuscator
+// transforms most string literals); instead we run the obfuscated module
+// through a JS engine and check it tries to call our hook with the right
+// key. That requires running JS — out of scope here, so we settle for: the
+// dynamic module is non-empty, references the hook sentinel, and doesn't
+// accidentally leak the hex key as a plain literal.
+func TestSplitBundle_DynamicModuleObfuscatesKey(t *testing.T) {
+	keys := testKeyRing()
+	rt := newChallengeRuntimeForSplitTest(t, keys)
+
+	got, err := rt.currentDynamicModule(context.Background())
+	require.NoError(t, err)
+	require.NotEmpty(t, got)
+
+	epoch, signKey := keys.Current()
+	keyHex := hex.EncodeToString(signKey)
+
+	// The hook sentinel must appear (reservedStrings keeps it intact).
+	assert.Contains(t, got, hookSentinel,
+		"dynamic module is missing the hook sentinel %q", hookSentinel)
+
+	// The key MUST NOT appear in plain hex form. The obfuscator's
+	// string-array transform should have encoded it. If the literal hex
+	// shows up the obfuscation strength has dropped, defeating the whole
+	// point of the split-bundle design.
+	assert.NotContains(t, got, keyHex,
+		"per-epoch key leaked into the dynamic module in plain hex (obfuscator regression?)")
+
+	// Sanity: epoch number can leak as a literal — it's not a secret.
+	t.Logf("dynamic module size for epoch %d: %d bytes", epoch, len(got))
+}
+
+// TestSplitBundle_DynamicModuleCachedPerEpoch confirms repeated calls in
+// the same epoch share the obfuscation cost (single-flight via cache).
+//
+// We pin the keyring's clock so the two calls are guaranteed to see the
+// same epoch — without this, the ~12s obfuscation cost can straddle a
+// rotation boundary on testKeyRing's 1-minute interval and the second
+// call ends up generating a different module under a different key.
+func TestSplitBundle_DynamicModuleCachedPerEpoch(t *testing.T) {
+	keys := testKeyRing()
+	pinned := time.Now()
+	keys.now = func() time.Time { return pinned }
+
+	rt := newChallengeRuntimeForSplitTest(t, keys)
+
+	first, err := rt.currentDynamicModule(context.Background())
+	require.NoError(t, err)
+
+	second, err := rt.currentDynamicModule(context.Background())
+	require.NoError(t, err)
+
+	assert.Equal(t, first, second, "second call must return the cached module byte-for-byte")
+}
+
+// TestSplitBundle_DynamicModuleRebuildsOnEpochAdvance asserts that when the
+// keyring rolls to a new epoch, currentDynamicModule produces a
+// fresh module embedding the new key.
+func TestSplitBundle_DynamicModuleRebuildsOnEpochAdvance(t *testing.T) {
+	keys := testKeyRing()
+	rt := newChallengeRuntimeForSplitTest(t, keys)
+
+	first, err := rt.currentDynamicModule(context.Background())
+	require.NoError(t, err)
+	firstEpoch, _ := keys.Current()
+
+	// Advance the keyring's clock past the rotation interval.
+	keys.now = func() time.Time { return time.Now().Add(2 * time.Minute) }
+
+	second, err := rt.currentDynamicModule(context.Background())
+	require.NoError(t, err)
+	secondEpoch, _ := keys.Current()
+
+	assert.NotEqual(t, firstEpoch, secondEpoch, "epoch did not advance")
+	assert.NotEqual(t, first, second, "dynamic module did not change after epoch advance")
+}
+
+// TestSplitBundle_DynamicModuleConcurrentSingleflight asserts that concurrent
+// callers for the same epoch share a single obfuscation pass via singleflight.
+// N concurrent goroutines call currentDynamicModule for the same epoch; only
+// ONE must actually run the obfuscator (the others share its result via
+// singleflight). If we ever hold the cache mutex across the obfuscation
+// pass, this test will time out OR show every caller doing its own
+// obfuscation.
+func TestSplitBundle_DynamicModuleConcurrentSingleflight(t *testing.T) {
+	keys := testKeyRing()
+	pinned := time.Now()
+	keys.now = func() time.Time { return pinned }
+	rt := newChallengeRuntimeForSplitTest(t, keys)
+
+	const N = 8
+	results := make([]string, N)
+	errs := make([]error, N)
+	var wg sync.WaitGroup
+	wg.Add(N)
+
+	start := time.Now()
+	for i := 0; i < N; i++ {
+		go func(idx int) {
+			defer wg.Done()
+			out, err := rt.currentDynamicModule(context.Background())
+			results[idx] = out
+			errs[idx] = err
+		}(i)
+	}
+	wg.Wait()
+	elapsed := time.Since(start)
+
+	for i, err := range errs {
+		require.NoError(t, err, "goroutine %d failed", i)
+	}
+
+	// All callers must have observed the same obfuscation output. If any
+	// caller diverged, singleflight wasn't doing its job.
+	for i := 1; i < N; i++ {
+		require.Equal(t, results[0], results[i],
+			"goroutines %d and 0 saw different module bytes; singleflight is broken", i)
+	}
+
+	// Tighter bound: with N=8 goroutines and a single ~5s obfuscation,
+	// the wall-clock should be roughly one obfuscation, not N. We use
+	// 2x as the threshold to absorb scheduler noise; a regression where
+	// every caller runs its own obfuscation would push elapsed past
+	// N * 5s = 40s, way above the threshold.
+	t.Logf("8 concurrent currentDynamicModule calls completed in %s", elapsed)
+	require.Less(t, elapsed, 15*time.Second,
+		"concurrent calls took %s; singleflight likely not coalescing (would expect 1 obfuscation, got serial)",
+		elapsed)
+}
+
+// TestSplitBundle_HTMLDoesNotContainSecret is the core security invariant
+// of the split-bundle design: the HTML challenge page MUST NOT contain the
+// per-epoch sign key in plain (hex) form. If it does, an attacker can
+// scrape it and forge tickets without running the obfuscated bundle —
+// exactly the failure mode the split-bundle protocol was designed to fix.
+func TestSplitBundle_HTMLDoesNotContainSecret(t *testing.T) {
+	keys := testKeyRing()
+	rt := newChallengeRuntimeForSplitTest(t, keys)
+
+	html, err := rt.GetChallengePage("test-agent", 8)
+	require.NoError(t, err)
+	require.NotEmpty(t, html)
+
+	_, signKey := keys.Current()
+	keyHex := hex.EncodeToString(signKey)
+
+	assert.NotContains(t, html, keyHex,
+		"the per-epoch sign key leaked into plain HTML \u2014 split-bundle invariant violated")
+}
+
+// hookSentinel must match the constant used by both challenge.js (as
+// CSEC_HOOK_NAME) and obfuscate.js (in reservedStrings). Hardcoded here on
+// purpose so the test breaks if the JS-side constant is renamed without a
+// matching update.
+const hookSentinel = "__CSEC_CHALLENGE_HOOK_v1__"
+
+// newChallengeRuntimeForSplitTest builds a runtime with WASM + the baked-in
+// initial bundle but a deterministic keyring, so split-bundle assertions
+// can be made against a known key.
+func newChallengeRuntimeForSplitTest(t *testing.T, keys *KeyRing) *ChallengeRuntime {
+	t.Helper()
+	rt, err := NewChallengeRuntime(context.Background(),
+		WithMasterSecret(testSecret),
+	)
+	require.NoError(t, err)
+	rt.keys = keys
+	// Reset the dynamic module cache because the constructor pre-warmed it
+	// with rt.keys (which we just swapped). The next call regenerates.
+	rt.dynamicModuleCacheMu.Lock()
+	rt.dynamicModuleCache = make(map[int64]string)
+	rt.dynamicModuleCacheMu.Unlock()
+	return rt
+}
diff --git a/pkg/appsec/challenge/static_bundle.go b/pkg/appsec/challenge/static_bundle.go
new file mode 100644
index 00000000000..4a715c9adcd
--- /dev/null
+++ b/pkg/appsec/challenge/static_bundle.go
@@ -0,0 +1,211 @@
+package challenge
+
+import (
+	"bytes"
+	"compress/gzip"
+	"context"
+	_ "embed"
+	"fmt"
+	"io"
+	"math/rand/v2"
+	"strings"
+	"sync"
+	"time"
+
+	challengejs "github.com/crowdsecurity/crowdsec/pkg/appsec/challenge/js"
+	"github.com/google/uuid"
+	log "github.com/sirupsen/logrus"
+)
+
+// initialBundleGz is a pre-obfuscated challenge bundle produced at build time
+// by `go generate ./pkg/appsec/challenge/js/...`. It is used to seed the
+// challenge JS cache at startup so the service is ready to serve challenges
+// immediately, instead of waiting ~1 minute for the first variant to be
+// generated synchronously. Background generation continues to add fresh
+// variants and rotate them on the normal refresh interval.
+//
+//go:embed initial_bundle.js.gz
+var initialBundleGz []byte
+
+var (
+	initialBundle     string
+	initialBundleOnce sync.Once
+	initialBundleErr  error
+)
+
+type obfuscatedScript struct {
+	Code string    // the obfuscated JS code
+	uuid uuid.UUID // unique ID to track the script
+}
+
+// seedCacheFromInitialBundle decompresses the build-time obfuscated bundle
+// (initial_bundle.js.gz) and inserts it into the cache as the first variant.
+// Cheap (~ms) — eliminates the ~1 minute synchronous obfuscation that startup
+// would otherwise pay.
+func (c *ChallengeRuntime) seedCacheFromInitialBundle() error {
+	initialBundleOnce.Do(func() {
+		decompressStart := time.Now()
+
+		if len(initialBundleGz) == 0 {
+			initialBundleErr = fmt.Errorf("baked-in initial_bundle.js.gz is empty (was `go generate` run?)")
+			return
+		}
+
+		gz, err := gzip.NewReader(bytes.NewReader(initialBundleGz))
+		if err != nil {
+			initialBundleErr = fmt.Errorf("gzip reader for initial bundle: %w", err)
+			return
+		}
+		defer gz.Close()
+
+		decoded, err := io.ReadAll(gz)
+		if err != nil {
+			initialBundleErr = fmt.Errorf("decompress initial bundle: %w", err)
+			return
+		}
+		initialBundle = string(decoded)
+
+		log.WithFields(log.Fields{
+			"compressed_bytes":   len(initialBundleGz),
+			"decompressed_bytes": len(initialBundle),
+			"duration_ms":        time.Since(decompressStart).Milliseconds(),
+		}).Info("WAF challenge: decompressed baked-in obfuscated initial bundle")
+	})
+
+	if initialBundleErr != nil {
+		return initialBundleErr
+	}
+	if initialBundle == "" {
+		return fmt.Errorf("initial bundle is empty after decompression")
+	}
+
+	c.appendCachedChallengeJS([]obfuscatedScript{{
+		Code: initialBundle,
+		uuid: uuid.New(),
+	}})
+
+	return nil
+}
+
+// challengeGenerator is the background goroutine that keeps the static-
+// bundle cache fresh. It fills the cache to capacity on startup, then
+// regenerates the full set on each refresh tick.
+func (c *ChallengeRuntime) challengeGenerator(ctx context.Context) {
+	// Startup warm-up: grow the cache in background until full.
+	if err := c.fillCacheToCapacity(ctx); err != nil {
+		log.Errorf("failed to prefill challenge JS cache: %v", err)
+	}
+
+	ticker := time.NewTicker(challengeJSRefreshInterval)
+	defer ticker.Stop()
+
+	for {
+		select {
+		case <-ticker.C:
+			variants, err := c.generateChallengeVariants(ctx, challengeJSCacheSize)
+			if err != nil {
+				log.Errorf("failed to regenerate full challenge JS cache: %v", err)
+				continue
+			}
+
+			c.replaceCachedChallengeJS(variants)
+		case <-ctx.Done():
+			return
+		}
+	}
+}
+
+func (c *ChallengeRuntime) buildChallengeBundle() string {
+	return strings.NewReplacer(
+		"__CROWDSEC_SUBMIT_PATH__", ChallengeSubmitPath,
+		"__CROWDSEC_POW_WORKER_PATH__", ChallengePowWorkerPath,
+	).Replace(challengejs.FPScannerBundle)
+}
+
+func (c *ChallengeRuntime) generateAndCacheChallengeJS(ctx context.Context) error {
+	variants, err := c.generateChallengeVariants(ctx, 1)
+	if err != nil {
+		return err
+	}
+
+	c.appendCachedChallengeJS(variants)
+
+	return nil
+}
+
+func (c *ChallengeRuntime) generateChallengeVariants(ctx context.Context, count int) ([]obfuscatedScript, error) {
+	if count <= 0 {
+		return []obfuscatedScript{}, nil
+	}
+
+	variants := make([]obfuscatedScript, 0, count)
+
+	bundle := c.buildChallengeBundle()
+
+	for range count {
+		o := obfuscatedScript{}
+		o.uuid = uuid.New()
+		obfuscatedJS, err := c.ObfuscateJS(ctx, bundle)
+		if err != nil {
+			return nil, err
+		}
+		o.Code = obfuscatedJS
+		variants = append(variants, o)
+	}
+
+	return variants, nil
+}
+
+func (c *ChallengeRuntime) fillCacheToCapacity(ctx context.Context) error {
+	c.cacheMutex.RLock()
+	missing := challengeJSCacheSize - len(c.obfuscatedJSCache)
+	c.cacheMutex.RUnlock()
+
+	if missing <= 0 {
+		return nil
+	}
+
+	variants, err := c.generateChallengeVariants(ctx, missing)
+	if err != nil {
+		return err
+	}
+
+	c.appendCachedChallengeJS(variants)
+	return nil
+}
+
+func (c *ChallengeRuntime) appendCachedChallengeJS(variants []obfuscatedScript) {
+	if len(variants) == 0 {
+		return
+	}
+
+	c.cacheMutex.Lock()
+	c.obfuscatedJSCache = append(c.obfuscatedJSCache, variants...)
+	if len(c.obfuscatedJSCache) > challengeJSCacheSize {
+		c.obfuscatedJSCache = c.obfuscatedJSCache[len(c.obfuscatedJSCache)-challengeJSCacheSize:]
+	}
+	c.cacheMutex.Unlock()
+}
+
+func (c *ChallengeRuntime) replaceCachedChallengeJS(variants []obfuscatedScript) {
+	if len(variants) == 0 {
+		return
+	}
+
+	c.cacheMutex.Lock()
+	c.obfuscatedJSCache = append([]obfuscatedScript(nil), variants...)
+	c.cacheMutex.Unlock()
+}
+
+func (c *ChallengeRuntime) getCachedChallengeJS() obfuscatedScript {
+	c.cacheMutex.RLock()
+	defer c.cacheMutex.RUnlock()
+
+	cacheSize := len(c.obfuscatedJSCache)
+	if cacheSize == 0 {
+		return obfuscatedScript{}
+	}
+
+	idx := rand.IntN(cacheSize)
+	return c.obfuscatedJSCache[idx]
+}
diff --git a/pkg/appsec/challenge/ticket.go b/pkg/appsec/challenge/ticket.go
new file mode 100644
index 00000000000..223ebb38c98
--- /dev/null
+++ b/pkg/appsec/challenge/ticket.go
@@ -0,0 +1,176 @@
+package challenge
+
+import (
+	"crypto/hmac"
+	crand "crypto/rand"
+	"crypto/sha256"
+	"encoding/base64"
+	"encoding/hex"
+	"fmt"
+	"strconv"
+	"time"
+)
+
+// PoW difficulty levels in leading zero bits. Pure JS SHA-256 through the
+// obfuscator runs ~500-5000 ops/sec, so keep these conservative.
+const (
+	PowDifficultyDisabled   = 0   // no PoW required, nonce "0" always valid
+	PowDifficultyLow        = 10  // ~1024 avg iterations ≈ 0.2-2s
+	PowDifficultyMedium     = 12  // ~4096 avg iterations ≈ 1-8s
+	PowDifficultyHigh       = 15  // ~32768 avg iterations ≈ 7-60s
+	PowDifficultyImpossible = 256 // full SHA-256 width: clients cannot solve, server always rejects
+
+	defaultPowDifficulty = PowDifficultyMedium
+)
+
+// computeTicket signs the timestamp with the per-epoch signing key derived
+// from the master secret. The epoch is computed from the timestamp itself
+// (`ts_nanos / 1e9 / rotation_seconds`), so verification is fully stateless:
+// any instance with the same master secret can derive the same epoch from the
+// same ts and validate the HMAC.
+func (c *ChallengeRuntime) computeTicket(ts string) string {
+	epoch := c.epochForTimestamp(ts)
+	signKey, ok := c.keys.SignKey(epoch)
+	if !ok {
+		// Falling back to the current key on out-of-window timestamps avoids
+		// accidentally producing a structurally valid signature for a stale
+		// timestamp; verification will reject the resulting ticket on the same
+		// liveness check.
+		_, signKey = c.keys.Current()
+	}
+
+	h := hmac.New(sha256.New, signKey)
+	h.Write([]byte(ts))
+
+	return fmt.Sprintf("%x", h.Sum(nil))
+}
+
+// epochForTimestamp converts a nanosecond UnixNano string (the format used in
+// challenge.go's ts) into the keyring's epoch identifier. Uses the same
+// rotation interval as the keyring so two instances always agree.
+func (c *ChallengeRuntime) epochForTimestamp(ts string) int64 {
+	tsVal, err := strconv.ParseInt(ts, 10, 64)
+	if err != nil || tsVal <= 0 {
+		// Caller will reject the ticket via the liveness check anyway; return
+		// an out-of-window sentinel epoch.
+		return -1
+	}
+	return tsVal / int64(time.Second) / int64(c.keys.rotationInterval/time.Second)
+}
+
+func generatePowPrefix() string {
+	buf := make([]byte, 16)
+	if _, err := crand.Read(buf); err != nil {
+		panic(fmt.Sprintf("failed to generate PoW prefix: %v", err))
+	}
+
+	return hex.EncodeToString(buf)
+}
+
+// computePowMAC produces an HMAC that authenticates a PoW salt as server-
+// generated and bound to a specific ticket window. Signed with the same
+// per-epoch key as the ticket so a single keyring lookup verifies both.
+func (c *ChallengeRuntime) computePowMAC(salt, ticket, ts string) string {
+	epoch := c.epochForTimestamp(ts)
+	signKey, ok := c.keys.SignKey(epoch)
+	if !ok {
+		_, signKey = c.keys.Current()
+	}
+
+	h := hmac.New(sha256.New, signKey)
+	h.Write([]byte(salt))
+	h.Write([]byte(ticket))
+	h.Write([]byte(ts))
+
+	return fmt.Sprintf("%x", h.Sum(nil))
+}
+
+func hasLeadingZeroBits(hash []byte, bits int) bool {
+	fullBytes := bits / 8
+	remainBits := bits % 8
+
+	for i := range fullBytes {
+		if hash[i] != 0 {
+			return false
+		}
+	}
+
+	if remainBits > 0 {
+		mask := byte(0xFF << (8 - remainBits))
+		if hash[fullBytes]&mask != 0 {
+			return false
+		}
+	}
+
+	return true
+}
+
+func (c *ChallengeRuntime) getSessionKey(ticket string, nonce string) string {
+	hash := sha256.Sum256([]byte(ticket + nonce))
+	return fmt.Sprintf("%x", hash)
+}
+
+func (c *ChallengeRuntime) decryptFingerprint(sessionKey string, encrypted string) (string, error) {
+	encryptedBytes, err := base64.StdEncoding.DecodeString(encrypted)
+	if err != nil {
+		return "", fmt.Errorf("failed to decode encrypted fingerprint: %w", err)
+	}
+
+	decryptedBytes := make([]byte, len(encryptedBytes))
+
+	for i := range encryptedBytes {
+		decryptedBytes[i] = encryptedBytes[i] ^ sessionKey[i%len(sessionKey)]
+	}
+
+	return string(decryptedBytes), nil
+}
+
+// matchesChallenge verifies that the ticket/timestamp/PoW salt are authentically
+// server-generated and the timestamp is recent. Fully stateless — any instance
+// sharing the master secret can verify.
+//
+// Both the ticket and the PoW MAC are signed with the per-epoch key derived
+// from `ts`. Liveness is enforced twice: first via the keyring (the epoch
+// derived from `ts` must be in the live window) and second via the
+// challenge-JS refresh window. The keyring window is the actual freshness
+// guarantee; the JS-refresh check is a (looser) backstop.
+func (c *ChallengeRuntime) matchesChallenge(clientTicket, clientTS, clientPowSalt, clientPowMAC string) bool {
+	tsVal, err := strconv.ParseInt(clientTS, 10, 64)
+	if err != nil || tsVal <= 0 {
+		return false
+	}
+
+	age := time.Since(time.Unix(0, tsVal))
+	if age < 0 || age > 2*challengeJSRefreshInterval {
+		return false
+	}
+
+	epoch := c.epochForTimestamp(clientTS)
+	signKey, ok := c.keys.SignKey(epoch)
+	if !ok {
+		// Epoch fell out of the live window — reject without leaking a usable
+		// "signature mismatch" vs "stale epoch" distinction via timing.
+		return false
+	}
+
+	// Verify the ticket is an authentic HMAC of the timestamp under K_epoch.
+	expectedTicket := hmacSHA256Hex(signKey, []byte(clientTS))
+	if !hmac.Equal([]byte(clientTicket), []byte(expectedTicket)) {
+		return false
+	}
+
+	// Verify the PoW salt MAC is authentic and bound to this ticket+timestamp.
+	macIn := make([]byte, 0, len(clientPowSalt)+len(clientTicket)+len(clientTS))
+	macIn = append(macIn, clientPowSalt...)
+	macIn = append(macIn, clientTicket...)
+	macIn = append(macIn, clientTS...)
+	expectedMAC := hmacSHA256Hex(signKey, macIn)
+
+	return hmac.Equal([]byte(clientPowMAC), []byte(expectedMAC))
+}
+
+func hmacSHA256Hex(key, msg []byte) string {
+	h := hmac.New(sha256.New, key)
+	h.Write(msg)
+	return fmt.Sprintf("%x", h.Sum(nil))
+}