Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
nodejspythongosecuritycaptchaself-hostedweb-securityfingerprintinganti-botbot-detectionproof-of-workinvisible-captchabehavioral-analysisselenium-detectorscraping-protectiontls-fingerprintingheadless-browser-detectionai-bot-detectionpuppeteer-detectionplaywright-detection
-
Updated
Aug 30, 2026 - JavaScript