Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.
nodejs python go security captcha self-hosted web-security fingerprinting anti-bot bot-detection proof-of-work invisible-captcha behavioral-analysis selenium-detector scraping-protection tls-fingerprinting headless-browser-detection ai-bot-detection puppeteer-detection playwright-detection
-
Updated
Aug 30, 2026 - JavaScript