Invisible verification with proof-of-work and behavioral scoring. No puzzles, no tracking, data exclusively in the EU.
Everything you need to block bots without annoying users. Drop-in widget, API, dashboard — ready in 5 minutes.
Most users pass without interaction. The widget analyzes behavior in the background — mouse movement, timing, fingerprint — and generates a token with a score. No puzzles, no images to click.
Invisible by defaultBots pay with CPU cost. The browser solves a cryptographic challenge — fast for humans, expensive for bots sending mass requests.
SHA-256 challengeMouse movement, keyboard timing, browser fingerprint — without cross-site tracking. Score from 0.0 to 1.0 for each session.
0.0 – 1.0 scoreIsolated keys per domain. Public sitekey in the widget, secret key on your backend. One-click key rotation.
Per-domain isolationReal-time stats: verifications, blocks, average score, latency. Team management, multi-domain account, full audit log. React dashboard with Supabase auth.
Real-time analyticsData never leaves the EU. All infrastructure in Poland and Europe. Full GDPR compliance — no compromises.
GDPR compliantThe widget works in the background. Fill in the sample form — verification is invisible.
Script < 15 KB loads asynchronously. Does not block page rendering.
Widget analyzes behavior and solves a cryptographic challenge. Takes ~142ms.
Widget adds a token to the form. Your backend sends it to /v1/verify and gets a score.
Add the widget, copy your keys, verify on your backend. Done.
| Feature | reCAPTCHA v3 | hCaptcha | IQShield |
|---|---|---|---|
| Data in EU | ✗ Google US | ✗ US | ✓ Yes |
| No tracking | ✗ | Partial | ✓ Yes |
| Widget size | > 200 KB | > 100 KB | < 15 KB |
| Invisible mode | ✓ | ✓ | ✓ |
| Proof-of-work | ✗ | ✓ | ✓ |
| GDPR compliant | Difficult | Difficult | ✓ Yes |
| WAF included | ✗ | ✗ | ✓ Yes |
| Free plan | 10k/mo | 1M/mo | 10k/mo |
* Comparative data current as of March 2026. reCAPTCHA is a trademark of Google LLC. hCaptcha is a trademark of Intuition Machines, Inc.
No hidden fees. Free plan requires no card. Pay only for what you need.
Net prices, billed monthly. Card payment via Stripe. VAT invoice automatically.
Yes. The widget generates a token, your backend sends the secret + token to the /v1/verify endpoint and gets a result with success and score fields. Same flow as reCAPTCHA, but simpler.
No. By default, most users pass verification invisibly. A challenge only appears for suspicious traffic — e.g., when the behavioral score is low or the fingerprint looks automated.
Because you don't punish people for existing. reCAPTCHA requires solving puzzles, tracks users across sites, and stores data in the US. IQShield: EU hosting, no tracking, widget < 15 KB, full GDPR compliance.
All infrastructure in the EU. Servers in Poland, database in Poland. Data never leaves the European Union. Full GDPR compliance — Polish company, Polish tax ID.
Remove the old reCAPTCHA script, add our widget (1 HTML line + 1 script), change the verification endpoint to /v1/verify. The whole process takes about 15 minutes.
Yes. A WP plugin is in development, but the widget + verify endpoint already works with any form — Contact Form 7, WPForms, Gravity Forms, or custom forms.
Free plan: 10k verifications for free, no card required, forever. Pro from 29 PLN net/mo (100k verifications). Business from 99 PLN net/mo (1M verifications + SLA). Card payment via Stripe, VAT invoice automatically.
Create an account in 30 seconds — Free plan requires no card.
Start for free →