Modern CAPTCHA platform
built for privacy
Zero cookies. Zero tracking. KVKK and GDPR compliant. Invisible-first verification that protects your users without slowing them down.
Zero cookies. Zero tracking. KVKK and GDPR compliant. Invisible-first verification that protects your users without slowing them down.
Six challenge types, behavioral analysis, and adaptive risk scoring. All without compromising user privacy.
80-90% of legitimate users pass without seeing any challenge. Passive risk scoring handles the rest.
No cookies, no fingerprinting, no cross-site tracking. KVKK and GDPR compliant. Data sovereignty per region.
PoW, checkbox, slider, grid, interactive puzzles, and text challenges. The adaptive engine picks the right one.
Behavioral signals (mouse, keyboard, scroll) feed a gradient-boosted model. Adaptive PoW difficulty scales with risk.
HMAC-signed tokens work offline. Verify locally without network calls. Your site stays protected even if our servers go down.
Team management, custom domains, audit logs, webhooks, API key rotation, and Helm chart for Kubernetes.
Three steps to protect any form. Under five minutes to integrate.
Drop a single script tag and the custom element into your HTML form.
<script src="https://cdn.kepca.io/v1/widget.js" defer></script>
<maptcha-widget data-sitekey="YOUR_KEY"></maptcha-widget>
The widget collects passive signals, runs risk scoring, and issues a challenge only if needed. Most users pass invisibly.
Send the signed token to our API (or verify offline with HMAC). One POST request from your backend.
POST /v1/siteverify
{ "secret": "KEY", "token": "TOKEN" }
{ "success": true, "score": 0.12 }
Start free. Scale as you grow. No hidden fees.
For personal projects and small sites.
For growing businesses and SaaS products.
For large-scale deployments and compliance needs.
Official backend SDKs and plugins. Verify tokens in one line of code.