Stop bots without friction.
Six CAPTCHA types covering web, mobile and desktop. Adaptive difficulty based on real-time risk scoring keeps real users friction-free while blocking automated threats.
IntegrationsSix CAPTCHA types, one platform
Pick the challenge that fits your flow. All types share one API, one dashboard and one billing plan.
Invisible
Zero-interaction verification. Low-risk users pass without a challenge.
Slide Puzzle
Drag a piece into the matching slot. Fast, intuitive and mobile-friendly.
Click to Select
Tap the requested characters in order. Great against OCR-based bots.
Image Rotation
Rotate a photo to the correct upright angle. Easy for people, difficult for bots.
3D Click
Click matching objects in a rendered 3D scene. Resistant to vision models.
Shape Click
Click specified shapes or glyphs in a layered image.
Built for production
Everything you need to run secure verification at scale.
Adaptive risk control
Difficulty auto-adjusts based on a real-time risk score, so suspicious sessions work harder.
Global CDN < 100ms
Edge delivery across multiple regions for consistent, low-latency challenges worldwide.
Multi-platform SDKs
Web, Android, iOS, Flutter and Electron, with ready-to-use components for each platform.
Frictionless for real users
Low-risk visitors pass silently. Only suspicious traffic sees an interactive challenge.
Automation-resistant
Behavioural signals, device fingerprinting and ever-evolving challenge pools.
Analytics & audit log
A detailed dashboard with pass rates, attack patterns and per-site metrics.
Works with Private Access Tokens
The web is moving toward cryptographic attestation tokens that vouch for a real device without identifying the user. CaptchaLa reads these tokens as a trust signal: a verified visitor can pass without a challenge, and everyone else still gets risk-based verification. It is additive — you do not have to choose.
How attestation works at CaptchaLaPrivacy by design
Verification that protects your site without surveilling your users. Here is exactly what CaptchaLa does, and does not, do with the signals it collects.
First-party only
All requests go to CaptchaLa's own servers. Signals are never shared with Google or ad networks.
No tracking cookies
The web SDK sets zero cookies, so there is nothing to follow you around.
No cross-site tracking
The device signal is origin-sandboxed to your site and cannot follow users across other sites.
GDPR-friendly
Cookieless and strictly security-purpose, so no consent banner is required, unlike reCAPTCHA which feeds Google's ad graph.
Proportionate by design
We collect only the minimal device and behaviour signals needed to stop bots, used first-party for security only.
How we compare
A quick look at how CaptchaLa stacks up against popular alternatives.
| Feature | CaptchaLa | reCAPTCHA | hCaptcha |
|---|---|---|---|
| Challenge types | 6 types | 2 types | 2 types |
| Invisible / no-friction mode | Yes | Yes | Yes |
| Native mobile SDKs | Android / iOS / Flutter | Android / iOS | Android / iOS |
| Desktop SDK (Electron) | Yes | No | No |
| Self-host / private cloud | Enterprise | No | Limited |
| Transparent pricing | From $0 | Quota + billing | Freemium |
Integrate in minutes
Add the loader to your page and call init() to enable protection.
<!-- Include the CaptchaLa loader -->
<script src="https://cdn.captcha-cdn.net/captchala-loader.js"></script>
// Initialize the CAPTCHA widget
Captchala.init({
appKey: 'YOUR_APP_KEY',
product: 'popup'
})
.appendTo('#captcha')
.onSuccess((result) => {
// Token verified on your server
console.log('Token:', result.token);
});Works with the platforms you use
Production-ready plugins you can install today.