Products
Two products. Procaptcha protects the forms you choose. Prosopo Protect covers your forms, API and whole site, and learns what normal traffic looks like on it. Every block comes with a reason you can read.
For your forms · Free and Professional
Procaptcha
Free up to 10,000 requests a month, then from $39 / month
A check on the forms you choose: login, signup, checkout, contact. Add a script tag and verify the token from any backend. Real people pass without a puzzle.
- Invisible for most people, a challenge only when something looks wrong
- Disposable-email, VPN, proxy and residential proxy filtering on Professional
- Drop-in replacement for reCAPTCHA and hCaptcha
For your forms, API and whole site · Enterprise and Custom
Prosopo Protect
From $1,990 / month
Sees every request to your site and API, learns what normal and abusive traffic look like there, and stops bots before they reach your servers. Your forms are covered too.
- Integrate by script tag on your forms, an edge worker (Cloudflare Workers or AWS Lambda@Edge), or both
- See what we'd block for 14 days before blocking anything
- Priced by number of sites, traffic not metered, no setup fees
Features
- Every plan Invisible CAPTCHA Most people never see a challenge; the check runs in the background.
- Every plan Accessible CAPTCHA Challenges that work with screen readers and keyboards.
- Professional and up Spam Filter Blocks disposable emails and traffic from VPNs, proxies and datacenters.
- Professional and up Residential proxy detection Spots bots hiding behind home broadband and phone networks.
- Enterprise and Custom Mobile app attestation Android and iOS SDKs that sign app requests with an attested key, and refuse rooted devices and emulators.
- Enterprise and Custom Access Rules Your own rules on IP, ASN, country, user agent and JA4.
- Open source Self-hosting Run the open-source Procaptcha challenge provider yourself and bring your own detector.
Why Prosopo
A reason on every block
Each block names the detector that fired, so your team can explain it without opening a ticket.
Rules you can read
Named detectors do the heavy lifting; your own Access Rules sit on top. No black-box score.
New detectors without a release
When a new bot pattern appears, a new named detector can reach production in days.
The same view our engineers use
Every request, fingerprint and timing signal, drillable in the portal.
Privacy built in
No cross-site tracking, a DPA on every plan, and EU-only processing on Enterprise and Custom.
Open source at the base
The client and challenge stack are on GitHub, and you can self-host them.
See what's reaching your site
A Bot Exposure Assessment is a 30-minute call with an engineer. We look at your traffic, show where your current setup leaves gaps, and agree how a trial would be judged. Nothing to install first.