Features

Trustcaptcha offers many unique advantages and features. Below we showcase the most important functions.

For maximum security, Trustcaptcha utilizes a hybrid security procedure with two independently functioning security mechanisms.

Immediately before and while a user solves the CAPTCHA, Trustcaptcha collects various types of data. This includes, but is not limited to, IP address, browser and device information, session details, and user behavior data. Using intelligent algorithms and the collected dataset, Trustcaptcha calculates the probability that the interaction comes from a real human or a machine, known as bots. This value is called Bot Score and ranges between 0.0 (no bot) and 1.0 (bot).

By capturing a wide spectrum of diverse information sources and based on comprehensive analysis, the Bot Score and its associated reliability is assured. It is not sufficient for potential bots or attackers to merely delete their cookies or change their IP address via VPNs or disguise them through proxies. These pieces of information constitute only a small part of the overall picture considered for the Bot Score, thus offering higher reliability than conventional CAPTCHA alternatives.

In addition to its high reliability, the Bot Score allows you to take individual measures depending on the probability. You receive more than just a simple passed or failed as a result. You also have the option to accept or reject, with the possibility to implement further measures such as additional 2-factor authentication or email confirmation.

Trustcaptcha uses Proof-of-Work as a second, independent security procedure. To ensure accessibility and user experience are not compromised, the client’s processor solves individual cryptographic puzzles fully automated and without active user involvement. Successfully solving all tasks is a prerequisite for passing the CAPTCHA.

The difficulty of these puzzles and the associated resolution time are dynamically adjusted according to the request volume and the performance capabilities of the respective client. Real users experience no disruption, while automated accesses are significantly reduced.

The actual difficulty and duration can be customized in the settings of the respective CAPTCHA. See the section on Adjustable Difficulty / Duration for more details.

Should business requirements compel you to consider the most data-sparing variant of our CAPTCHA, you can activate the Minimal Data Mode. In this mode, only the data necessary for the Proof-of-Work are transmitted, thus reducing the total amount of data transmitted to the bare minimum. Simultaneously, due to technical reasons, no Bot Score can be calculated.

The security level with the activated Minimal Data Mode is comparable to other CAPTCHAs that rely solely on the Proof-of-Work procedure. We do not recommend this mode, as the omission of the Bot Score significantly reduces the security of our CAPTCHA.

Regardless of the chosen mode, all data are processed in compliance with GDPR and within data centers in the European Union. See the section GDPR Compliance for more information.

Trustcaptcha offers you the following exclusive advantages.

All CAPTCHA data are processed in accordance with the General Data Protection Regulation and the Federal Data Protection Act, with all CAPTCHA servers located exclusively in data centers of the cloud provider Hetzner Online GmbH within the European Union. The cloud provider is certified with the ISO 27001 certification.

Please note that you are legally required to inform your customers about the use of a CAPTCHA solution in your own privacy policy. A possible clause for your privacy policy can be found here.

For further details on data protection, please refer to our Privacy Policy or the End User Data Protection.

Trustcaptcha completely avoids any form of image puzzles or other challenges for the user. Therefore, the CAPTCHA is faster than conventional alternatives, requires no active participation from the user, and thus offers the best possible user experience.

By foregoing any form of puzzles or tasks, autonomous start, and self-solving of the CAPTCHA, Trustcaptcha is optimally optimized for accessibility. Trustcaptcha meets the requirements of the European Accessibility Act.

Trustcaptcha offers a cost-effective and scalable Pay-per-Use model. Choose the pricing plan that fits your needs, with the option to switch monthly. Each pricing plan includes a base price, which is fixed per month, and a price per request.

Unlike other CAPTCHA alternatives, you do not need to book a fixed quota. Instead, with Trustcaptcha, you are only billed for what you have actually used that month. This is particularly advantageous if your website is continuously growing or if your services are subject to seasonal fluctuations.

Currently, the following pricing plans are offered:

Learn more about the pricing plans and a price calculator here.

Trustcaptcha is fundamentally compatible with any website that uses JavaScript or a JavaScript-compatible technology in the frontend and any programming language in the backend. Comprehensive documentation of the backend process and the API interface is available, allowing Trustcaptcha to be used with any backend programming language.

To make integration as easy as possible, Trustcaptcha offers custom libraries for the most popular programming languages and frameworks. These currently include the following for the frontend:

For the backend, libraries are currently available for the following programming languages:

Should there be no library available for your preferred programming language at the current time, please feel free to contact our support. Learn more about the frontend in the Frontend Documentation, and about the backend in the Backend Documentation.

Below is a selection of important configuration options.

Trustcaptcha servers only accept CAPTCHA requests from websites that you have explicitly allowed in the settings. This ensures that no one can misuse your CAPTCHA.

The CAPTCHA duration is primarily determined by the difficulty of the Proof-of-Work, which in turn depends on the request volume of a device. You have the option to influence the duration in the settings by moving the slider to faster or safer. This can reduce the duration by up to -50% (faster) or increase it by up to +50% (safer).

Faster is particularly suitable if the CAPTCHA typically takes a long time or if your users primarily visit your website using older computers and mobile devices. Safer is suitable for increasing the overall CAPTCHA security, especially if the majority of your users have modern and powerful devices.

Individual IPv4 addresses and IPv4 ranges, as well as IPv6 addresses and IPv6 ranges, can be added to the so-called Allow-List or Block-List.

Requests from an IP address on the Allow-List are always rated with a Bot Score of 0.0 and do not need to solve the Proof-of-Work. Clients pass the CAPTCHA directly and can continue with their activity immediately. The Allow-List is particularly suitable for administrators or developers, but also for automated testing purposes where the IP address or range remains constant.

For requests from an IP address on the Block-List, the Proof-of-Work must be solved. Furthermore, the Bot Score is always rated at 1.0. The Block-List is particularly suitable for IP addresses or ranges that you can be sure are being used maliciously.

If you want to reject requests from certain countries or world regions, you can set up geoblocking for these areas. Similar to the IP Block List, requesters must first complete the Proof-of-Work and subsequently receive a Bot Score of 1.0.

Geoblocking offers two modes. In the Block List mode, all countries explicitly listed on the Country List are rejected. In the Allow List mode, all requests are fundamentally rejected unless a specific country has been explicitly allowed.

By default, the CAPTCHA starts automatically as soon as input fields that are in the same form-element as the CAPTCHA itself are filled out. However, if necessary, starting by filling out certain input fields or the complete autostart of the entire CAPTCHA can be disabled.

Learn more about the autostart of the Captcha-Box in the Frontend Documentation.

The Captcha-Box supports both a Light-Mode (light design) and a Dark-Mode (dark design). These can be manually set or automatically adopted based on system or browser settings.

Learn more about the themes of the Captcha-Box in the Frontend Documentation.

Trustcaptcha currently supports the most important European languages. These include:

The language can be manually set in the frontend. Additionally, Trustcaptcha features automatic language recognition. If the language is not automatically recognized or does not exist, English is automatically selected as the standard language.

Learn more about the language of the Captcha-Box in the Frontend Documentation. If your desired language is not yet supported, please contact our support.

Trustcaptcha offers you further benefits.

Each CAPTCHA is cancelable monthly regardless of the chosen pricing plan. You will receive a consolidated invoice for all costs incurred in a month at the beginning of the following month.

We are always available to assist with any questions, issues, or suggestions you may have. Feel free to contact us via the contact form, send us an email at mail@trustcaptcha.com, or open a personal support ticket within your user profile.