Everything you need to protect your website

Explore the full range of TrustCaptcha features — from intelligent bot detection and custom security rules to verification insights, audit logs, and full design customization.

Start Free Trial Contact Us

Attack Protection

Dynamically scaled bot attack protection

An adaptive proof-of-work mechanism that makes large-scale bot attacks economically unprofitable.

Scales with the threat — the more suspicious the traffic, the harder the computational challenge becomes. Attackers are slowed down automatically while real users remain unaffected.
Intelligent analysis — goes far beyond simple IP rate limiting. Detects inconsistencies and automation indicators, evaluates overall request volume, and factors in static signals.
Hardened against evasion — effective even when attackers switch IPs, rotate device data, or clear cookies. Multiple independent data points are evaluated simultaneously, so no single signal change can undermine the protection.

Legitimate Users

Fast & unnoticed

Human Verification Time

2 s

Humans pass instantly.

VS.

Under Attack

Hard & expensive

Bot Verification Time

60 s

Bots get stopped.

Fine-tune challenge difficulty with custom rules

Create proof-of-work difficulty rules to adjust challenge intensity for specific traffic patterns — from 20% (faster) up to 500% (more secure).

Adjustable difficulty multiplier — lower the difficulty for trusted traffic or increase it up to 5x for suspicious patterns.
Condition-based targeting — target rules by IP, country, language, time zone, browser, OS, or device type with flexible match logic.

Proof of work difficulty rule editor with difficulty multiplier slider and conditions

What sets TrustCaptcha apart

Bot Detection

Real bot detection, not just slowing them down

Most EU CAPTCHA providers only make bots slower. TrustCaptcha actually identifies them — and gives you a risk score to act on.

Identify and stop bots and spam — TrustCaptcha computes an individual risk score for every single request, telling you how likely it is to come from a bot.
Static & dynamic signal analysis — bot signals, inconsistencies, automation indicators, and request patterns flow into a multi-layered risk assessment — giving you a transparent score for every request.
Transparent risk score — every verification returns a score you can use in your own logic — trigger step-up authentication, flag sessions, or block requests entirely.

TrustCaptcha widget - Start verification

Legitimate Request

Likely human

7 /100

Bot Score

Natural behavior

Normal speed

No automation detected

Suspicious Activity

Likely bot

92 /100

Bot Score

Unnatural behavior

Fast speed

Automation detected

Security Rules

Individual security rules for full control

Go beyond simple blocklists. Define advanced, multi-criteria access rules tailored to your exact security needs.

Multi-condition rules — combine IP addresses, countries, languages, time zones, browsers, OS, and device types in a single rule.
Flexible match logic — choose match any, match all, or match none — then set the action to allow or block.
Named & time-bound — give each rule a name, description, and optional expiration date for temporary policies.

Access rule editor showing name, match mode, action, and configurable conditions

IP allowlist with editable IP address and range entries

IP allowlists, blocklists & geoblocking

Quick controls for common scenarios — each backed by an access rule under the hood.

IP allowlist — trust specific IP addresses or ranges to always pass verification.
IP blocklist — block known bad actors by IP address or range with a single click.
Geoblocking — restrict or allow traffic from specific countries — choose between blocklist or allowlist mode.

Bypass keys for safe testing

Skip verification in tests — generate keys that always pass the CAPTCHA with a bot score of 0. Ideal for automated function tests and CI/CD pipelines.
Optional expiration — set an expiration date or let keys live indefinitely. Remove them anytime with a single click.

Bypass key creation and management table with description, masked key, and expiration

Environments

Multiple CAPTCHA environments, fully separated

Create dedicated environments for staging, production, development, or any setup you need — each completely isolated.

Fully isolated data — each environment has its own settings, rules, analytics, and exports with no data mixing between them.
Independent credentials — rotate API keys and secrets per environment without affecting other setups.
Safe testing — test configuration changes on staging or development before rolling them out to production.

Verification results table showing timestamp, origin, IP, device, duration, bot score, and status

Verifications

Full transparency into every verification

Browse, filter, and export all verification data — always know exactly what's happening.

Detailed results table — timestamp, origin, IP address, device, OS, browser, duration, risk score, and status at a glance.
Data retention — 48 hours by default, configurable up to 7 days. Custom time range selection included.
Export anytime — download your verification data as CSV, Excel, or JSON.

Understand every decision with verification insights

Full verification timeline — see every step from creation to result retrieval, including captured data, access decisions, and computed risk scores.
Decision transparency — understand exactly why a verification passed or failed — whether it was a custom rule, a bypass key, or a risk score threshold.
Rich context — country, region, city, device, browser, framework, proof-of-work difficulty, and who retrieved the result.

Verification insights showing timeline, decision process, and computed risk data

Analytics

Real-time analytics and traffic insights

Understand exactly what's happening on your site — from verification volumes and bot scores to device data and regional patterns.

Flexible time ranges — switch between 24h, 7 days, 30 days, 90 days, or define a custom period.
Multiple chart types — switch between pie charts, bar charts, and table views for every metric.

Verification metrics — track started, finished, and fetched verifications with daily and weekday breakdowns.
Risk score analysis — monitor bot score distributions, history, and verification durations.
Device & browser data — see operating systems, browsers, device families, and screen resolutions at a glance.
Behavioral & regional data — countries, time zones, languages, and user behavior patterns across all your traffic.

Verification analytics showing started, finished, and fetched verifications over 30 days

Device analytics showing operating system, browser, device family, and screen resolution

Bot score distribution, classifier, and duration history charts

Widget Customization

A CAPTCHA widget that looks like your brand

Make TrustCaptcha look and feel like a native part of your product — not a third-party add-on.

Full design control — customize text colors, background colors, border colors, and corner radius from sharp edges to fully rounded.
Light & dark themes — switch between light and dark mode, or let it adapt to the user's system setting automatically.
White labeling — hide TrustCaptcha branding completely for a clean, fully branded experience.
37+ languages — built-in multilingual support so every user understands the verification in their own language.
Custom translations — override existing texts, add your own tone of voice, use emojis, or add entirely new languages.
Privacy link — optionally display a custom link, e.g. to your privacy policy, directly inside the widget.

Accessibility

Over 1 billion people have disabilities. Your CAPTCHA shouldn't be a barrier.

TrustCaptcha is built to be inclusive from the ground up — no puzzles, no barriers, no frustration.

No puzzles, no images — no selecting fire hydrants, no dragging objects, no deciphering distorted text.
Autostart — verification begins automatically when users interact with your form. No clicks required.
No time limit — users can take as long as they need. No pressure, no expiration.
Fully invisible widget — run the CAPTCHA widget completely hidden from the user when needed.
WCAG & EAA aligned — designed to meet WCAG standards and the European Accessibility Act, keeping your site compliant and open to everyone.

Privacy & Compliance

Privacy-first architecture, built for compliance

TrustCaptcha is built with privacy by design at its core, ensuring data protection is embedded into every part of the product.

EU-only hosting — all data is processed and stored exclusively in the EU on ISO 27001-certified infrastructure. No data transfers to third countries.
No cookies — TrustCaptcha works entirely without cookies — making the choice easier for you.
GDPR-ready — purpose-limited processing, short data retention periods, and privacy by design aligned with the CAPTCHA as a security control.
Privacy policy templates — ready-to-use text suggestions for your privacy policy to speed up your go-live.

Illustration representing GDPR compliance and data privacy

Contracts & compliance — managed online

Standard DPA — sign a data processing agreement directly online, no back-and-forth required.
Custom contracts — individual terms are possible — our team prepares custom agreements you can review and accept directly on the platform.
Central contract management — accept, decline, cancel, or replace contracts anytime. Download PDFs, track consent history, and see who agreed to what and when.

Contract management platform showing pending approvals, active contracts, and consent history

Members management showing users with Admin, Member, and Viewer roles and pending invitations

Users & Roles

Team management with granular permissions

Multi-user management — manage your CAPTCHA product with your entire team. Invite users, assign roles and manage pending invitations.
Role-based access — assign Admin, Member, or Viewer roles to control exactly who can change what.
SSO & MFA enforcement — enable Single Sign-On (SAML / OIDC) and enforce multi-factor authentication for all team members.

Audit Logs

Complete audit trail for every action

Meet your audit and compliance requirements with a detailed, exportable log of everything that happens across your product.

Everything tracked — user invitations, API key changes, bypass keys, access rules, IP lists, geoblocking, billing events, contract changes, role updates, and more.
Who did what — every entry shows the actor (team member or system), the affected object, and the action taken. Expandable details reveal exact value changes.
Up to one year retention — filter by preset or custom time ranges. Export as JSON, CSV, or Excel to feed into your existing compliance systems.

Audit log table showing timestamp, actor, subject, and action for all product events

Support

Enterprise support when you need it

From onboarding to ongoing operations — get the level of support your organization requires.

Dedicated account manager — a single point of contact who understands your setup and priorities.
Developer & integration support — hands-on help from software engineers for integration, migration, and technical questions.
Custom SLAs — tailored service level agreements to match your operational requirements.
Health checks & procurement — regular integration health checks and full procurement support to keep everything running smoothly.

Agency Solution

Everything agencies need to manage clients at scale

From a central dashboard across all client projects to seamless handovers and clean billing — TrustCaptcha is built for agencies managing projects on behalf of multiple clients.

Agency dashboard — get a central overview of all client projects, environments, and key metrics in one place.
Simplified project handover — transfer projects to clients with a few clicks — all configurations, rules, and environments included. No manual reconfiguration needed.
Multi-user & client access — invite team members and clients with role-based access per project — Admin, Member, or Viewer — for clean collaboration and clear responsibilities.
Custom invoice recipients — route billing directly for simple, agency-friendly accounting.
Dedicated agency support — prioritized, hands-on support with implementation guidance and dedicated handling of customer requests — tailored to agency workflows.

Illustration of a team managing multiple client projects

Trusted by companies, organisations and governments.

Ready to see what TrustCaptcha can do for you?

EU-hosted & GDPR-ready
No puzzles
Try free for 14 days

Get started Contact sales