Verification that stays out of people's way
RSCaptchabot protection for your forms
A CAPTCHA service with three modes: visual challenges, SHA-256 proof-of-work, and a combined mode that picks the least intrusive check. RSCaptcha protects the forms on this very site.
Key features
Flexible protection for sites and APIs
Three challenge modes
Visual CAPTCHA, browser proof-of-work, or a combined mode
Visible and invisible
A checkbox on the form or verification at submit time with no extra steps
Trust cookie
Verified visitors skip repeated challenges
Multi-tenancy
Accounts, applications, domains and API keys with isolated settings
Self-service console
Registration, configuration and monitoring via /manage and a JSON API
Anti-bruteforce
Temporary greylisting after failed attempts plus global blacklists
Protocol-level security
Verification data is encrypted with AES-GCM, integrity-checked and bound to the client IP. Challenges are single-use and stored in PostgreSQL — behavior stays consistent across replicas and rate limits apply service-wide.\n\nCORS restrictions are configured per application. The visual CAPTCHA is deeply tunable: fonts, dimensions, character sets, colors, distortion, noise and waves.\n\nIntegration is a single JavaScript widget or direct serve/verify API calls.
How it works
- 01
Create an application
Register in the console and add your domains
- 02
Choose a mode
Visual, PoW or combined — whatever fits your scenario
- 03
Embed the widget
One script tag on the page, or integrate via the API
- 04
Verify on the backend
A single verify call confirms the challenge solution
Let's protect your forms from bots
We'll connect RSCaptcha or build protection for your load