European bot protection

We protect forms,
not punish users.

Invisible verification with proof-of-work and behavioral scoring. No puzzles, no tracking, data exclusively in the EU.

Create free account → See demo

< 15 KB

Widget

142 ms

Verify

EU only

Data

5 min

Integration

Traffic quality

99.2%

Blocked today

1,847

Avg score

0.94

Widget latency

142ms

POST /v1/verify

✓ { "success": true, "score": 0.94 }

REQUESTS TODAY

24,891

All clean

Features

Complete protection, zero frustration

Everything you need to block bots without annoying users. Drop-in widget, API, dashboard — ready in 5 minutes.

🛡️

Invisible verification

Most users pass without interaction. The widget analyzes behavior in the background — mouse movement, timing, fingerprint — and generates a token with a score. No puzzles, no images to click.

Invisible by default

⚡

Proof-of-work

Bots pay with CPU cost. The browser solves a cryptographic challenge — fast for humans, expensive for bots sending mass requests.

SHA-256 challenge

🧠

Behavioral scoring

Mouse movement, keyboard timing, browser fingerprint — without cross-site tracking. Score from 0.0 to 1.0 for each session.

0.0 – 1.0 score

🔑

Site keys + Secret keys

Isolated keys per domain. Public sitekey in the widget, secret key on your backend. One-click key rotation.

Per-domain isolation

📊

Dashboard + Analytics

Real-time stats: verifications, blocks, average score, latency. Team management, multi-domain account, full audit log. React dashboard with Supabase auth.

Real-time analytics

🇪🇺

EU hosting

Data never leaves the EU. All infrastructure in Poland and Europe. Full GDPR compliance — no compromises.

GDPR compliant

Live Demo

Try it live

The widget works in the background. Fill in the sample form — verification is invisible.

See how each verification scenario works

✓

Automatic pass

High trust score — user passes instantly, no interaction needed.

⚠

Interactive challenge

Borderline score — emoji challenge confirms the user is human.

✗

Bot blocked

Automated traffic detected — verification denied, no token issued.

Try it yourself

Sample contact form

Widget loads in the background

Script < 15 KB loads asynchronously. Does not block page rendering.

Analysis + proof-of-work

Widget analyzes behavior and solves a cryptographic challenge. Takes ~142ms.

Token ready for verification

Widget adds a token to the form. Your backend sends it to /v1/verify and gets a score.

Integration

3 steps, 5 minutes

Add the widget, copy your keys, verify on your backend. Done.

iqshield — integration

# 1. Add widget to your form

< script src="https://api.iqshield.io/v1/widget.js"></script>

< div class="iq-shield" data-sitekey="pk_live_xxx"></div>

# 2. Widget verifies in the background

✓ Proof-of-work: 142ms

✓ Behavioral score: 0.94

✓ Token: iqt_abc...

# 3. Verify on your backend

$ curl -X POST https://api.iqshield.io/v1/verify \

-d '{"secret":"sk_live_xxx","token":"iqt_abc..."}'

✓ { "success": true, "score": 0.94 }

Works with your stack

Official plugins, SDKs, and vanilla HTML — integrate in minutes

WordPress

One-click plugin for CF7, WPForms, Gravity Forms & WooCommerce

wp-admin → Plugins

PHP

Verify tokens with our SDK or a simple cURL call

composer require iqshield/sdk

Node.js

NPM package for Express, Next.js, or any Node backend

npm i @iqshield/sdk

Any website

Just 2 HTML lines. Works with any form on any platform

Comparison

IQShield vs competition

Feature	reCAPTCHA v3	hCaptcha	IQShield
Data in EU	✗ Google US	✗ US	✓ Yes
No tracking	✗	Partial	✓ Yes
Widget size	> 200 KB	> 100 KB	< 15 KB
Invisible mode	✓	✓	✓
Proof-of-work	✗	✓	✓
GDPR compliant	Difficult	Difficult	✓ Yes
WAF included	✗	✗	✓ Yes
Free plan	10k/mo	1M/mo	10k/mo

* Comparative data current as of March 2026. reCAPTCHA is a trademark of Google LLC. hCaptcha is a trademark of Intuition Machines, Inc.

Pricing

Simple, transparent pricing

No hidden fees. Free plan requires no card. Pay only for what you need.

Excl. VAT

Incl. VAT

Free

0 PLN

forever

10,000 verifications / mo
3 domains
Dashboard + stats
EU hosting
Community support

Create account

Frequently asked questions

Is it compatible with the classic verify flow?

Yes. The widget generates a token, your backend sends the secret + token to the /v1/verify endpoint and gets a result with success and score fields. Same flow as reCAPTCHA, but simpler.

Does the user always see a challenge?

No. By default, most users pass verification invisibly. A challenge only appears for suspicious traffic — e.g., when the behavioral score is low or the fingerprint looks automated.

Why is this better than reCAPTCHA?

Because you don't punish people for existing. reCAPTCHA requires solving puzzles, tracks users across sites, and stores data in the US. IQShield: EU hosting, no tracking, widget < 15 KB, full GDPR compliance.

Where is data hosted?

All infrastructure in the EU. Servers in Poland, database in Poland. Data never leaves the European Union. Full GDPR compliance — Polish company, Polish tax ID.

What does migration from reCAPTCHA look like?

Remove the old reCAPTCHA script, add our widget (1 HTML line + 1 script), change the verification endpoint to /v1/verify. The whole process takes about 15 minutes.

Can I use it with WordPress?

Yes! Install our WordPress plugin — one-click setup for Contact Form 7, WPForms, Gravity Forms, WooCommerce, and login/registration forms. Or use the widget + verify endpoint with any custom form.

How much does it cost?

Free plan: 10k verifications for free, no card required, forever. Pro from 29 PLN net/mo (100k verifications). Business from 99 PLN net/mo (1M verifications + SLA). Card payment via Stripe, VAT invoice automatically.

We protect forms,not punish users.