The Prosopo Platform — Bot and Agent Trust Management
Prosopo is the bot and agent trust platform where every block names the detector that fired. One detection engine, delivered as a widget (Procaptcha) or at the edge (Prosopo Protect), with Spam Filter available as an add-on.
Prosopo is the specialist entry into the category Forrester renamed Bot and Agent Trust Management in Q2 2026. One detection engine, delivered where your traffic lands: Procaptcha as a drop-in widget on any form, or Prosopo Protect at the edge or in front of your origin for whole-site and JSON API enforcement. Spam Filter runs inside the same verification path.
What makes this platform different
Named detectors on every block
The bulk of what stops bots is a library of named detectors that fire against pattern-matches in the traffic. When a block fires, the response names the specific detector — Apple hardware spoofing, known CAPTCHA-solver service detected, synthetic mouse-event timings, HTTP header fingerprint mismatch. No numerical risk-score buckets, no vendor-branded policy labels. Your team knows what caught the request without opening a support ticket.
Three inspectable layers, in order
The named-detector library does the heavy lifting. Customer-authored Access Rules layer on top for policy the defaults don't yet cover. And in Protect, an ML model scores request intent across the human / agent / bot boundary. Every layer surfaces a readable trigger.
Open source at the base, self-host optional
The widget stack is open source on GitHub — your security team can read the client code before adoption. The detector library on the server side is proprietary; teams that need everything running on their own infrastructure receive a periodic obfuscated bundle. DataDome, Kasada, HUMAN and Arkose keep their entire stack proprietary and vendor-hosted.
New detectors ship without a release
Our decision-machine architecture lets a new detector reach production in days, not months. When a new bot pattern lands, a new named detector fires with a name the operator can read the same day — no monthly SDK bump, no waiting for the vendor's next release cycle.
Drillable, exportable event substrate
Every request, every fingerprint, every timing signal, every detector firing is captured. The drill-down view your team uses is the same view our engineers use to build the next detector, filterable by every dimension we score on and exportable to Datadog, Splunk, Elastic or Sentinel.
GDPR-native, unbundleable
Cookieless widget, no cross-site profile of humans, EU-only verification endpoints on request. UK-incorporated, engineered in the UK. And Prosopo is unbundleable — there's no seven-figure identity or SASE seat contract that a customer has to unwind to buy us, and no vendor SOC sitting between the operator and the platform.
The three delivery surfaces
- Procaptcha — the drop-in widget. Add a
<script>tag on any form (login, signup, checkout, contact) as a reCAPTCHA or hCaptcha replacement. Real humans pass invisibly; suspected bots see an image, puzzle or proof-of-work challenge; every block names the detector. - Prosopo Protect — edge-deployed enforcement in front of the origin. Cloudflare Workers, AWS Lambda@Edge or server-side integration (nginx, Caddy, custom reverse proxies). Different verdict shapes for HTML pages (branded interstitial) and JSON APIs (HTTP status +
X-Prosopo-Decisionheader). Includes the ML intent-scoring layer for humans, agents and bots. - Spam Filter — add-on that runs inside every Procaptcha or Protect verification. Email Filter (throwaway addresses, disposable-domain detection) and Traffic Filter (eight independent network-class toggles). No new endpoint, no separate integration.
Explore the features
Access Control — the Customer-Authored Layer
Access Control is the customer-authored rules layer of the Prosopo platform — layered on top of the named-detector library that catches the bulk of bots by default.
Enterprise Bot Protection — the Prosopo Platform
Enterprise bot protection from Prosopo. One detection engine, delivered as a widget (Procaptcha) or at the edge (Prosopo Protect), same dashboard for both. Every block names the specific detector that caught it — not a black-box score.
Invisible CAPTCHA
Prosopo's Invisible CAPTCHA is the invisible-first mode of Procaptcha — real users see nothing, and every block on a suspected bot names the detector that caught it.
Procaptcha: the GDPR-compliant CAPTCHA widget
Procaptcha is Prosopo's CAPTCHA widget — a drop-in reCAPTCHA and hCaptcha replacement, cookieless by default, GDPR-compliant, free for the first 10,000 verifications per month.
Prosopo Protect — Site-Wide and API Bot Protection
Site-wide and API bot protection from Prosopo — deploy at the edge (Cloudflare Workers, AWS Lambda@Edge) or as a server-side integration (nginx, Caddy, custom reverse proxies). Access Rules on every request, allow/block/challenge verdicts, branded interstitials on HTML pages, clean HTTP status + header on JSON APIs.
Residential proxy detection
How Prosopo detects residential proxies — TCP fingerprint interrogation, IP intelligence, and a self-maintained proxy-vendor catalogue. Available on the Enterprise plan.
Spam Filter: Add-on for Procaptcha and Prosopo Protect
Spam Filter is a Procaptcha add-on that blocks fake signups, throwaway emails and abusive-network traffic during each verification — without you writing any extra integration code.
Trusted by companies of all sizes.
Our customers love us.
Hundreds of businesses have made the switch from reCAPTCHA and hCaptcha to Prosopo. Here's what they have to say.
Welcome legitimate users and agents. Stop the bots.
AI agents now act on behalf of real people — shopping, researching, booking. Block them all and you lose customers; allow them all and you invite abuse. Prosopo establishes trust on every request, so the legitimate humans and agents get through and the bad bots don't.
Smarter detection, transparent pricing, and complete privacy — no cookies, no tracking, no data sold on. Sign up for free and protect your site in minutes.