Hey everyone! I'm on the hunt for a self-hosted, open-source CAPTCHA solution that features a Smart "invisible" mode. I'm looking for something that only prompts a spam verification checkbox in cases where it's actually suspicious, similar to how Cloudflare's Turnstile works. It's unfortunate that Turnstile isn't open source because its performance and user experience are top-notch! So far, the best I've stumbled upon is Altcha, but their Smart mode requires a paid Sentinel add-on, which feels a bit mixed to me. Any recommendations or best practices for setting up an effective and user-friendly spam protection for a contact form?
1 Answer
Honestly, I doubt you can find a self-hosted CAPTCHAs solution that can truly match the adaptability of paid services. They have an edge because they learn from real-world interactions. Altcha might offer some protection, but it's more of a proof of work method and isn't necessarily good against spam or fraud. You might still run into issues like bots finding ways around it.
Yeah, but CAPTCHAs are designed to block bots using checks that go beyond just algorithms. Altcha does use a demanding computational check that helps fight off large-scale bot attacks. Plus, other CAPTCHAs often try image solutions, which can vary in effectiveness. It’s pretty clear that even big names like recaptcha can be bypassed, so exploring open-source options isn't a bad idea.