Stop bots before
they
reach your
website
Protect your site from scrapers and
automation with a European CAPTCHA
that respects your visitors’ privacy
- GDPR-compliant
- Privacy-first
- User-friendly
- Transparency
- No cookies
Security
How it works
Scrapers and bots will have to waste insane amount of resources before they can access your website. Docs
2. Suspicious visitors solve a challenge
3. Verified visitors get a temporary pass
this rule
How to evaluate Condition
after this one
Security
Customize Protection
Define your own rules for CAPTCHA puzzles on top of smart difficulty scaling. Change difficulty, adapt scaling or block requests completely.
Traffic Source
Detect access from Cloud, VPN, TOR, CDN, and popular blocklists (like Firehol, Spamhouse etc.).
Country
Take action against whole countries if that's what it takes for security.
IP Address
Match any CIDR range, for example excluding your corporate ranges.
User Agent
Detect known bots or write custom logic based on User-Agent HTTP header values.
Easy integration
Works with your web-server and CDN
Caddy
Works as an official forward_auth authorizer for requests.
Nginx
Integrates via auth_request before forwarding requests.
CDN
Use a ready-to-go middleware script in Bunny or other CDN.
Docker/systemd sidecar
Works with any custom setup using our lightweight sidecar service.
Trusted by European Agencies, Government Organizations, and Small to Mid-Sized Enterprises
- š©šŖ
- š«š®
- š³š±
- 13+ European countries served
- šøšŖ
- šØš
- šŖšŖ
- š©š°
- š¬š§
- š®š¹
- š¦š¹
- š«š·
Question zone
Frequently Asked Questions
Instead of asking users to solve complex puzzles or track their behavior, Private Captcha solves an invisible cryptographic task in the background. The system automatically adjusts the task difficulty, ensuring smooth access for real users while making it too costly for bots to attempt. Cryptographic task provides equal security regardless of bot's intelligence level, making it effective even as AI technology improves. Which is hard to say about image/sound recognition tasks of other captchas.
On scale, bots exhibit different usage patterns and fingerprints statistics than real users. Detection of those patterns is part of the Private Captcha solution as we process a lot of request data on behalf of our clients.
No. Scraping protection issues a signed cookie with validity period that you configure in the dashboard. During that period all requests do not incur additional API calls.
Unlike other solutions, that only have client-side code open, Private Captcha's backend code is also publicly available, making it easy to verify how user data is handled. Additionally, you can host Private Captcha on premises inside your own organization.
Private Captcha comes with many pre-built integrations for popular online platforms, such as WordPress, and packages for many popular programming languages (Javascript, Python, etc.). Additionally, our documentation provides detailed setup and migration guides and integration examples.
The Private Captcha widget offers two color themes (light and dark) and also allows to do lower-level customization, using CSS, ensuring seamless integration with your website. Additionally, you can hide the captcha widget altogether and make your custom UI integration, all while keeping security benefits.
Protect Your Forms
And APIs From Abuse
Independent, privacy-first, user-friendly CAPTCHA service made in EU