Google reCAPTCHA Enterprise: the default, and what Forrester said about it
reCAPTCHA Enterprise is a Forrester Q2 2026 Contender. Undifferentiated vision, a catch-up roadmap, limited drill-down for intent and explainability, the 2025 free-tier cut, and what to move to.
Updated 6 min read
reCAPTCHA is the product everybody has and almost nobody chose. It arrived with a framework, or a previous developer, or a WordPress plugin. That changes what the evaluation is for: the decision is usually whether to keep something you inherited, rather than a comparison between options you chose.
What reCAPTCHA Enterprise is
Google's paid bot detection service, sold through Google Cloud alongside Google Cloud Fraud Defense. The only public company evaluated in the Q2 2026 Wave.
Where it leads
Accessibility. Google provides dashboards in hundreds of languages, more than any other vendor in the category. And if your organisation already runs on Google Cloud, reCAPTCHA Enterprise is the option that requires no new vendor, no new DPA and no new procurement cycle. That is a real advantage and it is why it keeps winning by default.
Where Forrester identified gaps
These are the harshest findings in the Wave. Forrester's verdict: vision is undifferentiated, the roadmap has catch-up items, AI agent trust management is missing an agent library, and intent analytics break out only the top four AI agents. Separately, Forrester cited lack of detail and limited drill-down for intent and explainability.
The agent library point is the one that will age fastest. If agent traffic on your site is growing and your vendor identifies four of them, the gap widens every quarter.
What it costs
Published, per assessment, with a monthly free allowance. Google cut that free tier sharply in 2025, pushing a large number of teams into an evaluation they had not planned. Our reCAPTCHA pricing calculator will estimate the monthly figure for your assessment volume.
There was also a terms of service change that required migrating classic site keys into Google Cloud, the second common trigger for an evaluation.
Where data is processed
Google Cloud. reCAPTCHA is now a data processor rather than a controller, which changed the GDPR analysis. It does not answer what Google does with verification signals across the rest of its estate. On Prosopo Protect processing can be pinned to the EU, and on the Custom plan a dedicated database keeps one customer's visitors apart from every other site's.
How a block gets explained
A score between 0.0 and 1.0. Forrester's phrasing is lack of detail and limited drill-down. When a real customer cannot complete a signup, a score of 0.3 tells you the model was unhappy and nothing about why.
Who authors the rules
Google, entirely. You set thresholds against a score.
Which buyers reCAPTCHA Enterprise suits
It is the stronger fit if you are already inside Google Cloud and your volume stays within the free allowance, if accessibility in a long tail of languages is a hard requirement, or if the bot pressure you face is unsophisticated spam that the current setup is handling. A control that is working does not need replacing.
How Prosopo compares
Prosopo is the stronger fit where the following matter.
The assessment pricing no longer works at your volume. Procaptcha is free up to 10K requests a month, then Professional from $39 to $139 a month at 1M. Above that, or to cover your API and whole site, Enterprise starts at $1,990 a month.
If you need to explain a specific block to a customer, a CFO or a DPO, and a score will not do it. Every Prosopo block comes with a reason you can read.
EU data processing matters to your DPA and Google Cloud does not fit. Processing can be restricted entirely to the EU on Protect.
If agent traffic is a live problem and a four-agent breakout is not enough.
Side by side
| Prosopo | reCAPTCHA Enterprise | |
|---|---|---|
| Forrester Q2 2026 tier | Not evaluated | Contender |
| Delivery modes | Procaptcha widget on forms; Enterprise adds an edge worker (Cloudflare Workers or AWS Lambda@Edge) | Widget, SDK, WAF integration |
| Block explanation | Plain-language reason | Score 0.0 to 1.0 |
| Drill-down | Every request, looked up by ID in the portal | Limited, per Forrester |
| AI agent library | Agent whitelist rules | Missing, per Forrester |
| Rule authoring | Customer, self-serve | Threshold on a score |
| Client stack | Open source | Proprietary |
| Data processing | EU-only available on Enterprise. Points of presence in US, LATAM, APAC, EU | Google Cloud |
| Data isolation | Dedicated database on the Custom plan | Not published |
| Accessibility languages | Limited | Hundreds |
| Published pricing | All tiers on pricing | Per assessment, published |
See also Prosopo vs reCAPTCHA and the Forrester Wave breakdown.
Leaving reCAPTCHA?
A Bot Exposure Assessment is a 30-minute call with an engineer. We look at your traffic, show where your current setup leaves gaps, and agree how a trial would be judged. Nothing to install first.
Questions
Something else? Ask an engineer.
What is Google reCAPTCHA Enterprise?
reCAPTCHA Enterprise is Google's paid bot detection service, sold through Google Cloud alongside Google Cloud Fraud Defense. Forrester named it a Contender in The Forrester Wave: Bot And Agent Trust Management Software, Q2 2026. It is the only public company in that evaluation and the product most organisations already have deployed somewhere.
What did Forrester criticise reCAPTCHA Enterprise for?
Forrester was blunt. Vision is undifferentiated, the roadmap contains catch-up items, AI agent trust management is missing an agent library, and intent analytics break out only the top four AI agents. Forrester also cited lack of detail and limited drill-down for intent and explainability.
What is reCAPTCHA Enterprise good at?
Accessibility, with dashboards available in hundreds of languages, and being the path of least resistance if your team already runs on Google Cloud. It is the safe default rather than the strong choice.
How much does reCAPTCHA Enterprise cost?
Google publishes reCAPTCHA Enterprise pricing per assessment, with a free monthly allowance that was cut sharply in 2025. Our reCAPTCHA pricing calculator estimates a monthly bill for a given assessment volume.
What is the best reCAPTCHA Enterprise alternative?
For a like-for-like widget swap with EU processing and a reason on every block, Prosopo. For a fully managed enterprise platform, DataDome, HUMAN or Kasada. For a free bundled option if you are already behind Cloudflare, Turnstile with the Cloudflare WAF, accepting that its verdicts are a black box.
Related reading
Technical · How to deploy Procaptcha on your website or app How to switch from Google's reCAPTCHA to Prosopo Procaptcha and protect your website or app from bots for free. 
CAPTCHA · Google reCAPTCHA Price Hike: What Changed in 2024 & What It Broke Google's 2024 reCAPTCHA change cut the free tier from 1M to 10K requests/month. What actually changed, why it stung SMBs, and where teams moved next. 
CAPTCHA · Stop giving your website data away! Find out why reCAPTCHA, hCaptcha, and Cloudflare Turnstile may be secretly monetising your website data, and how Prosopo's Procaptcha is solving this problem. 
CAPTCHA · Why Am I Clicking Traffic Lights? The reCAPTCHA CAPTCHA Explained Traffic lights, cars and crosswalks in reCAPTCHA are not random — you've been labelling training data for Google's computer-vision models for a decade. Here's how the traffic-light CAPTCHA works, why it's still shown, and what a modern alternative looks like. 
Privacy · Google reCAPTCHA is a privacy nightmare - Questions over privacy promises and cookie use Scrutiny by the French data protection authority, CNIL, reveals the problematic infrastructure that allows for reCAPTCHA's operations 
CAPTCHA · Switching From reCAPTCHA to Prosopo: What's Involved What changes when you swap reCAPTCHA for Prosopo — integration surface, verdict shape, GDPR posture, and what your team sees in the dashboard.