Current Configuration

Not configured - Using default block page
How it works: When a user is blocked by the bot protection system, you can choose to show them either a custom block page or challenge them with a CAPTCHA. If they solve the CAPTCHA successfully, they gain access to your site.

Block Response Type

Choose how to handle blocked users:

Risk-Based Protection System

The bot detection engine assigns a risk score (0-100) to every visitor based on multiple detection signals. Each risk level automatically triggers the appropriate protective action — no manual tuning required.

Risk Level Score Range Recommended Action Why?
High Risk
70 - 100 🚫 Block Confirmed bots (scrapers, DDoS, automated tools). Block immediately to save resources.
Medium Risk
40 - 69 🔐 CAPTCHA Suspicious but uncertain (VPNs, unusual patterns). CAPTCHA lets legitimate users prove they're human instead of blocking them outright.
Low Risk
0 - 39 ✅ Allow Normal users with typical browsing behavior. Allow access for smooth user experience.

Real-World Example Scenarios

🤖 Bot Scraper (Score: 95/100)
Detected: Headless browser + Known bot user-agent + 50 requests/second + No mouse movement
BLOCK → Shows custom block page immediately. No CAPTCHA needed (waste of resources).
🔍 VPN User (Score: 55/100)
Detected: VPN IP (AbuseIPDB flagged) + Unusual geolocation + Normal browser fingerprint + Human-like mouse patterns
CAPTCHA → Suspicious IP but likely human. CAPTCHA lets them prove legitimacy instead of blocking.
👤 Regular User (Score: 18/100)
Detected: Clean IP + Chrome browser + Normal behavior + Mouse & keyboard interaction + Referrer from Google
ALLOW → No red flags. Allow immediate access for best user experience.
🎯
Reduce False Positives
Uncertain visitors receive a CAPTCHA challenge instead of an immediate block.
⚡
Save Resources
Obvious bots are blocked directly — no CAPTCHA costs wasted on them.
💰
Cost-Effective
CAPTCHA is only applied to medium-risk traffic — roughly 20–30% of all requests.
How It Works:
  1. CAPTCHA Challenge mode activates the risk-based protection strategy
  2. The selected CAPTCHA provider handles verification for medium-risk visitors
  3. Save Settings — risk thresholds are enforced automatically by the system
  4. Analytics display the ratio of challenged vs blocked visitors over time

CAPTCHA Provider

Select your preferred CAPTCHA service. You'll need to add your own API key. You pay the CAPTCHA provider directly for each solve.

Google reCAPTCHA
FREE (1M requests/month)
Then $1 per 1,000 assessments
  • Most popular and trusted
  • Invisible reCAPTCHA v3
  • Score-based detection
  • High accuracy
RuCaptcha
$2.99 per 1,000 solves
No free tier
  • Popular in Russia/CIS
  • Supports reCAPTCHA solving
  • Multiple CAPTCHA types
  • Fast response time
CapMonster.cloud
$0.80 per 1,000 solves
Cheapest option
  • Most affordable
  • Browser extension available
  • reCAPTCHA v2/v3 support
  • Good for high volume

Provider Comparison

Provider Free Tier Cost per 1K Best For
Google reCAPTCHA 1M/month $1.00 Most sites (recommended)
RuCaptcha None $2.99 Russia/CIS markets
CapMonster None $0.80 High volume, budget-conscious

API Key Configuration

Enter your API key from the selected CAPTCHA provider.

Cost Estimator

Estimate your monthly CAPTCHA costs based on your traffic.

Monthly Cost Breakdown

Provider Estimated Cost With Free Tier
Google reCAPTCHA $0.00 $0.00 (Free tier)
RuCaptcha $0.00 No free tier
CapMonster $0.00 No free tier