CAPTCHA Settings

Configure challenge settings for blocked users. Choose between custom block page or CAPTCHA verification.

Current Configuration

Not configured - Using default block page
How it works: When a user is blocked by the bot protection system, you can choose to show them either a custom block page or challenge them with a CAPTCHA. If they solve the CAPTCHA successfully, they gain access to your site.

Block Response Type

Choose how to handle blocked users:

💡 Recommended Strategy: Risk-Based Protection

Our bot detection system assigns a risk score (0-100) to every visitor based on multiple detection methods. Use different actions for different risk levels to maximize protection while minimizing false positives.

Risk Level Score Range Recommended Action Why?
High Risk
70 - 100 🚫 Block Confirmed bots (scrapers, DDoS, automated tools). Block immediately to save resources.
Medium Risk
40 - 69 🔐 CAPTCHA Suspicious but uncertain (VPNs, unusual patterns). CAPTCHA lets legitimate users prove they're human instead of blocking them outright.
Low Risk
0 - 39 ✅ Allow Normal users with typical browsing behavior. Allow access for smooth user experience.

Real-World Example Scenarios

🤖 Bot Scraper (Score: 95/100)
Detected: Headless browser + Known bot user-agent + 50 requests/second + No mouse movement
BLOCK → Shows custom block page immediately. No CAPTCHA needed (waste of resources).
🔍 VPN User (Score: 55/100)
Detected: VPN IP (AbuseIPDB flagged) + Unusual geolocation + Normal browser fingerprint + Human-like mouse patterns
CAPTCHA → Suspicious IP but likely human. CAPTCHA lets them prove legitimacy instead of blocking.
👤 Regular User (Score: 18/100)
Detected: Clean IP + Chrome browser + Normal behavior + Mouse & keyboard interaction + Referrer from Google
ALLOW → No red flags. Allow immediate access for best user experience.
🎯
Reduce False Positives
Don't block uncertain visitors. Let them verify with CAPTCHA.
⚡
Save Resources
Block obvious bots without paying for CAPTCHA solves.
💰
Cost-Effective
Only pay for CAPTCHA on medium-risk traffic (20-30% of requests).
📝 How to Implement:
  1. Choose "CAPTCHA Challenge" above to enable this strategy
  2. Configure your preferred CAPTCHA provider below (we recommend Google reCAPTCHA for best results)
  3. Set risk thresholds in Custom Rules: High (70+) = Block, Medium (40-69) = CAPTCHA, Low (0-39) = Allow
  4. Monitor analytics to fine-tune score thresholds based on your traffic patterns

CAPTCHA Provider

Select your preferred CAPTCHA service. You'll need to add your own API key. You pay the CAPTCHA provider directly for each solve.

Google reCAPTCHA
FREE (1M requests/month)
Then $1 per 1,000 assessments
  • Most popular and trusted
  • Invisible reCAPTCHA v3
  • Score-based detection
  • High accuracy
RuCaptcha
$2.99 per 1,000 solves
No free tier
  • Popular in Russia/CIS
  • Supports reCAPTCHA solving
  • Multiple CAPTCHA types
  • Fast response time
CapMonster.cloud
$0.80 per 1,000 solves
Cheapest option
  • Most affordable
  • Browser extension available
  • reCAPTCHA v2/v3 support
  • Good for high volume

Provider Comparison

Provider Free Tier Cost per 1K Best For
Google reCAPTCHA 1M/month $1.00 Most sites (recommended)
RuCaptcha None $2.99 Russia/CIS markets
CapMonster None $0.80 High volume, budget-conscious

API Key Configuration

Enter your API key from the selected CAPTCHA provider.

Cost Estimator

Estimate your monthly CAPTCHA costs based on your traffic.

Monthly Cost Breakdown

Provider Estimated Cost With Free Tier
Google reCAPTCHA $0.00 $0.00 (Free tier)
RuCaptcha $0.00 No free tier
CapMonster $0.00 No free tier