aiCaptcha analyzes behavioral biometrics and fingerprints every request server-side — your users never solve a puzzle again.
Free plan · 1,000 verifications/month · No credit card required
This form is protected right now — just interact naturally.
Features
A complete scoring pipeline — from the browser to your server — with every verdict explained.
The widget quietly measures mouse entropy and keystroke rhythm. Humans are beautifully irregular — scripts aren't.
The engine learns what normal traffic looks like for each of your sites and flags deviations.
Headless browsers, HTTP libraries and known crawlers are identified and hard-capped instantly.
Every verification stores a 0–1 score plus the exact reasons behind it. No black boxes — see why a request passed or failed.
One script tag, one div. Works with any backend — PHP, Node, Python, plain HTML.
Volume, success rates, score distribution and a full verification log with reasons.
Integration
Create an account and add your domain. You instantly get a site key for the widget and a secret key for server-side verification.
Add the script tag and a div with your site key. The widget verifies silently while users interact with the page.
<script src="https://your-domain.com/api/api.js" async></script>
<div data-sitekey="YOUR_SITE_KEY"
class="ai-captcha"></div>When the form submits, verify the token with your secret key before processing.
const res = await fetch(
"https://your-domain.com/api/verify-token" +
"?secret=" + SECRET_KEY +
"&response=" + token
);
const { success } = await res.json();Pricing
Start free. Upgrade when your traffic grows.
$0/month
Perfect for personal sites and small projects.
$29/month
For businesses with real traffic.
FAQ
No. aiCaptcha verifies automatically while the user interacts with your page — no puzzles, no checkboxes. The widget starts working as soon as it scrolls into view.
Requests are scored 0–1. Anything below 0.7 is not verified, and you decide server-side how to handle it (retry, fallback CAPTCHA, or block). Every verdict comes with the reasons behind it.
Two minutes, and it's tied to your site key. Verify it server-side with your secret key before accepting the form submission.
Anything that can render HTML: WordPress, Laravel, plain PHP, Next.js, Vue, you name it. Server-side verification is a single HTTP call from any language.