New release TrustCaptcha V3 with Bot Score

Privacy-first CAPTCHA for European businesses

Four layers of defense in one CAPTCHA: a real-time Bot Score that identifies risk, adaptive Proof-of-Work that stops attacks before they reach you, a built-in honeypot that catches spam bots, and Security Rules you control. The result is bot protection without puzzles or cookies that your users barely notice.

Start Free Trial Explore TrustCaptcha

Verifies automatically — no clicks, no puzzles.

GDPR compliant Enterprise ready DPA included

Trusted by companies, organisations and governments.

What makes TrustCaptcha different?

Proof-of-Work plus real bot detection.

Most European CAPTCHA alternatives rely solely on Proof-of-Work. They slow bots down, but can't tell them apart from humans. TrustCaptcha adds bot detection, a honeypot and security rules on top, so it can.

A real visitor's browser does one small task, a bot under attack has to do many

Attack Prevention

Dynamic Proof-of-Work makes mass attacks expensive to run, while real users barely notice it.

Learn more →

Request, behavior, device and reputation signals combine into one score that rates a visitor low and a bot high

Bot Detection

Risk scoring rates every request in real time, much like the reCAPTCHA score, and flags bots, spam and attackers.

Learn more →

A form with a hidden trap field that only a spam bot fills in

Built-in Honeypot

Invisible trap fields catch form-spam bots. They need no setup, and visitors never see them.

Learn more →

Security Rules

Custom access rules, geoblocking, bypass keys and Proof-of-Work tuning, so you decide who gets through.

Learn more →

Few European CAPTCHAs combine proof-of-work with real-time risk analysis, a honeypot and custom security rules. TrustCaptcha brings them together in one anti-bot service, and it is a GDPR-compliant CAPTCHA that sets no cookies.

How it works

Stop bots without users noticing.

User interaction

A user interacts with a protected part of your website by opening a form, signing in, or clicking the CAPTCHA.

Invisible verification

Bot detection and proof-of-work run silently in the background with no clicks and no puzzles, finishing before the user submits the form.

Users pass, threats don't

Real users continue uninterrupted, while bots and attackers are slowed down by proof-of-work and flagged by their bot score.

Optimized widget

A widget your users will love

On-brand and built to feel like a native part of your product.

Full design control — from the Team plan, fine-tune colors, borders, corner radius, border width and the checkbox.
Light & dark mode — switch between light and dark themes, or auto-detect the user's system preference.
Remove logo — with the Captcha Branding add-on, hide the TrustCaptcha logo so the widget carries only your brand.
Unlimited languages — 37+ languages built in, with automatic language detection, and any other language can be added.
Customizable text — every visible label, ARIA label, and screen-reader text can be tailored to your wording.
Native on every screen — adapts to phones, tablets and desktops and fits into your layout.
Fully invisible mode — with the same add-on, verification runs with no visible widget at all.
WCAG & EAA aligned — designed to meet WCAG 2.2 and the European Accessibility Act, so the estimated 1.3 billion people with a significant disability can get through your forms.

Explore all widget features →

Verification

Verification users won't even notice

Humans get no task to solve. Bots, including AI-driven ones, are scored and slowed down.

Invisible to visitors — no puzzles, no image grids, no challenges. Verification runs in the background while visitors get on with what they came for.
Autostart — verification starts in the background as soon as the form loads and is usually finished before visitors hit submit.
Fast for real users — for legitimate visitors, verification usually completes within a few seconds.
Four security mechanisms in one — attack prevention, bot detection, a built-in honeypot and customizable security rules combined into a single CAPTCHA.
Resistant to AI-driven bots — signal analysis and bot scoring catch AI agents that get through puzzle CAPTCHAs with ease.
Built-in honeypot — invisible to visitors, it adds one more layer that catches form-spam bots.
Cookie-free — TrustCaptcha sets no cookies, so nothing is stored in your visitors' browsers for the CAPTCHA.
EU-only hosting — all data is processed and stored exclusively in the EU on ISO 27001-certified infrastructure, with no transfers to third countries.

Explore all verification features →

Platform

A platform built around how you work

Settings, analytics, audit logs and team access for the people who run bot protection day to day, from one website to many.

Ready out of the box — every option comes preconfigured for typical use cases and devices. Most teams launch with the defaults and fine-tune later.
Multiple environments — fully isolated staging, production, and development setups with their own settings, rules, and credentials.
Real-time analytics — verification volumes, bot score distributions, device data, and regional traffic patterns at a glance.
Verification insights — see every step of a verification, including captured data, access decisions, and the reasoning behind every risk score.
Audit logs — a complete trail of every action on your account: who did what, when and on which object, kept 30 days on Team and 90 days on Enterprise, longer on a custom plan.
Data exports — pull verification data, analytics, and audit logs as CSV, Excel, or JSON whenever you need them.
Users & roles — roles such as Admin, Member, Billing or Auditor, view-only access without a role, plus SSO with OIDC or SAML and enforced two-factor authentication for the whole team.
Bypass keys — skip verification entirely in trusted contexts, such as CI/CD end-to-end tests or internal tools.
Engineer-led support — real engineers help with integration, migration, agency workflows, procurement, and health checks.

Explore all platform features →

Find the right protection

Which protection do I need?

Start with the problem you want to solve. Each answer leads to the feature that solves it.

Which TrustCaptcha feature answers which question
Your question	Feature	What it does
Stop bots without giving people a puzzle?	Proof-of-work	The visitor's browser solves a small task in the background. It gets harder for risky requests, so mass attacks get expensive.
Spot bots that act like real visitors?	Bot score	Rates every request from 0 (human) to 1 (bot), so you decide whether to allow, check or block it.
Catch simple form bots?	Built-in honeypot	A hidden field that people never see and bots fill in.
Block countries, IP ranges or devices?	Security rules	Rules on IP, country, language, time zone, browser and device that allow or block a request.
Keep visitor data in the EU?	EU hosting without cookies	Processing in EU data centers, no cookies and a DPA for every customer.
Let everyone through, screen reader users too?	Accessibility	No puzzle and no time limit, with ARIA labels and screen-reader text, designed to meet WCAG and the European Accessibility Act.
Match the widget to my brand?	Widget design	Colors, borders, light and dark themes, and your own texts in 37+ languages.
Test safely before going live?	Environments	Separate environments for development, staging and production.
Show auditors who changed what?	Audit logs	Every change to your settings with who, what and when, ready to export.

Integration

Built to run in minutes.

55+ pre-built integrations for CMS platforms, frameworks and APIs, plus step-by-step documentation, get most teams running in minutes. If you are switching from another CAPTCHA, our engineers help with the move.

Pre-built integrations

Drop-in plugins and SDKs for the platforms and frameworks your team already uses.

+ many more

Explore all integrations

Documentation

Step-by-step setup guides, API reference and code samples for every integration, plus troubleshooting tips.

Read the docs

Install the widget

<!-- Install the TrustCaptcha script -->
<script type="module" src="https://cdn.trustcomponent.com/trustcaptcha/3.0.x/trustcaptcha.esm.min.js"></script>

<!-- Add the widget inside your form -->
<trustcaptcha-component sitekey="<your_site_key>"></trustcaptcha-component>

Verification result

{
  "verificationPassed": true,
  "score": 0.3,
  "decisionType": "STANDARD",
  "decisionAction": "ALLOW",
  "gatewayFailoverActive": false,
  "riskScoringEnabled": true,
  "origin": "https://www.your-website.com/sub-page",
  // + 20 more verification intelligence fields
  "browser": "Chrome 119.0.0",
  "verificationStartedAt": "2026-05-03T13:30:05.941Z",
  "verificationFinishedAt": "2026-05-03T13:30:08.214Z"
}

FAQ

Questions about TrustCaptcha

What is TrustCaptcha?

TrustCaptcha is a CAPTCHA service for bot protection, made by Trustcaptcha GmbH in Munich, Germany. It protects sign-up, login, checkout and contact forms against bots and spam. It shows no puzzles, sets no cookies and processes data in EU data centers.

How does TrustCaptcha tell bots from humans?

Two checks run at the same time. The visitor's browser solves a proof-of-work task in the background, and TrustCaptcha calculates a bot score for the request: the lower the score, the more likely it is a human. The riskier a request looks, the harder the proof-of-work gets. Mass attacks become expensive, while real users usually pass before they submit the form.

Do visitors have to solve a puzzle?

No. There are no image grids, no distorted text and no audio tasks. With autostart, verification begins in the background and usually finishes before the visitor submits the form. If you want no visible widget at all, the paid Captcha Branding add-on makes it fully invisible.

Where does TrustCaptcha process data?

In EU data centers, on ISO 27001-certified infrastructure, with no transfers to third countries. TrustCaptcha sets no cookies, and every customer gets a Data Processing Agreement (DPA).

How much does TrustCaptcha cost?

Plans start at €8 a month for Hobby with 1,000 verifications and go up to Enterprise with 150,000 verifications, with custom plans beyond that. Bot detection, risk scoring and custom rules start with the Solo plan at €36 a month. You can test every plan free for 14 days, and non-commercial sites can use a free plan with 500 verifications a month. Prices exclude VAT.

How do I add TrustCaptcha to my website?

Load the script, place the widget in your form and check the verification result on your server with one API call. There are pre-built integrations for WordPress, Shopware, TYPO3, React, Vue.js and 55+ platforms in total, and the documentation has a setup guide for each.

Can I switch from reCAPTCHA or another CAPTCHA solution?

Yes, TrustCaptcha works as a drop-in reCAPTCHA alternative. Most CAPTCHAs follow the same pattern, a widget in the form and a check on the server, so a switch touches those two places. The documentation has migration guides for Google reCAPTCHA, hCaptcha and Cloudflare Turnstile, and our engineers help with the move if you need them.

Is TrustCaptcha accessible?

Visitors have no puzzle, image or audio task to complete, which removes the usual CAPTCHA barriers for screen reader and keyboard users. The widget is designed to meet WCAG 2.2 and the European Accessibility Act, and you can change every visible label, ARIA label and screen reader text.

Everything you need to protect your website is a few clicks away.

EU-hosted & GDPR-compliant
No puzzles
Try free for 14 days

Get started Contact sales

Privacy-first CAPTCHA for European businesses

Proof-of-Work plus real bot detection.

Attack Prevention

Bot Detection

Built-in Honeypot

Security Rules

Stop bots without users noticing.

User interaction

Invisible verification

Users pass, threats don't

Try the Demo!

A widget your users will love

Verification users won't even notice

Autostart in action

A platform built around how you work

Which protection do I need?

Built to run in minutes.

Pre-built integrations

Documentation

Questions about TrustCaptcha

Everything you need to protect your website is a few clicks away.