Browser signals are settings or data points a browser exposes that can influence privacy and access decisions. They can include user-agent details, language, time zone, cookie behavior, Do Not Track preferences, permissions state, and other features that websites or security controls can read.
In cybersecurity, browser signals matter because they help sites detect automation, enforce session rules, and apply risk-based controls. They also shape privacy enforcement: a browser may signal that tracking should be limited, or that consent choices should be respected. Attackers sometimes spoof or fingerprint these signals to bypass detection, while defenders use them to spot unusual logins, bot activity, or incompatible clients. The challenge is that browser signals are useful, but they can also leak identity or be manipulated, so security teams should treat them as advisory data, not as proof of trust.