Cloudflare Turnstile Pricing 2026 — Is Turnstile Really Free?

Cloudflare Turnstile pricing tiers (2026)

Plan	Cost	Included	What's excluded
Free	Free	Unlimited requests, up to 20 widgets with 10 hostnames each, every widget type, 7 days of analytics.	Any-hostname widgets, ephemeral IDs, removing Cloudflare branding.
Enterprise	Quoted by Cloudflare sales.	Unlimited widgets with up to 200 hostnames each, any-hostname widgets, ephemeral IDs, Cloudflare branding removed, 30 days of analytics.	A published price.

From Cloudflare's Turnstile plans page (2026).

If Cloudflare Turnstile is free, why move off it?

Sticker price is not the same as total cost of ownership. When teams move off Turnstile it's usually one of four reasons, none of which shows up on the invoice:

Bots that get through. Turnstile's managed challenge is tuned for minimum friction, and captcha farms sell solved Turnstile tokens at roughly $1 to $2 per 1,000. Spam leads and fake signups are the visible symptom.
One more Cloudflare dependency. Turnstile needs a Cloudflare account, and Cloudflare's stronger bot defence, Bot Management, is a separate Enterprise product. If you're not already on Cloudflare, Turnstile is the entry point to a bigger commitment.
Where data goes. EU-facing teams have to account for Cloudflare as a US processor. Prosopo can keep processing entirely inside the EU on Enterprise and Custom.
No reason for a verdict. Turnstile returns a pass/fail token with no risk score and no rules you can set. When a real customer is blocked, there is nothing to look at.

Cloudflare Turnstile vs Prosopo

Prosopo is a specialist bot and agent trust platform. Where Turnstile returns a pass/fail token from a model the operator cannot inspect, Prosopo returns a verdict with the reason attached — Inconsistent hardware readings for device, Solver service detected, Synthetic interaction timings, HTTP header fingerprint mismatch — on a proprietary detector library with a decision-machine architecture that gets new detectors to production in days rather than SDK release cycles. Prosopo pricing starts free at 10K requests a month, then $39/month at 100K and $139/month at 1M requests. Professional adds risk scores with the reason for each decision, spam email protection, location and IP rules and a 99.9% uptime commitment. Above 1M requests, or to cover your API and whole site rather than one form, Enterprise (Prosopo Protect) starts at $1,990 a month. It adds Access Rules and per-request audit logs, covers your forms too, and doesn't meter traffic — the site-wide protection Turnstile leaves to a Cloudflare Enterprise contract. Open-source client stack. UK-incorporated. GDPR-native, with EU-only processing on Enterprise and Custom.

See the full Cloudflare Turnstile alternatives comparison for the head-to-head against ALTCHA, hCaptcha, and Friendly Captcha.

FAQs about Cloudflare Turnstile pricing

Is Cloudflare Turnstile free forever?

The Free plan has no request cap and Cloudflare has not announced a change to it. Enterprise is quoted by Cloudflare sales.

Is there a Cloudflare Turnstile free tier limit?

There is no request limit. The Free plan is limited to 20 widgets with 10 hostnames per widget, and keeps 7 days of analytics. Prosopo caps its free plan at 10K requests a month. Risk scores, the spam filter and IP rules start on Professional at $39 a month, and Access Rules come with Enterprise (Prosopo Protect, from $1,990 a month).

Cloudflare Turnstile free plan 2026: what's included?

Unlimited requests, every widget type (managed, non-interactive and invisible), up to 20 widgets with 10 hostnames each, pre-clearance support and 7 days of analytics. It does not include any-hostname widgets, ephemeral IDs or removing Cloudflare branding; those are Enterprise only.

What does Cloudflare Turnstile Enterprise add?

Unlimited widgets with up to 200 hostnames each, widgets that work on any hostname, ephemeral IDs, removing Cloudflare branding, and 30 days of analytics instead of 7. Cloudflare quotes the price; it is not published.

Does Cloudflare Turnstile require a Cloudflare account?

Yes. Turnstile sitekeys are provisioned inside a Cloudflare account and the dashboard is the only management surface. Sites not otherwise on Cloudflare take on a new vendor relationship to use it.

Cloudflare Turnstile vs reCAPTCHA, hCaptcha and Prosopo as a captcha vendor

Turnstile is a free widget that returns pass or fail, with no risk score and no reason. reCAPTCHA is free up to 10,000 assessments a month, then paid (see the reCAPTCHA pricing calculator). hCaptcha Pro is $139 a month, or $99 a month billed yearly (see the hCaptcha pricing calculator). Prosopo is free up to 10K requests a month, then from $39, and every block comes with the reason it was stopped. Procaptcha checks each form; the Enterprise plan (Prosopo Protect) covers forms, API and whole site through a script tag, an edge worker or both. UK-incorporated, with EU-only processing on Enterprise and Custom. Open-source client stack.