What is hCaptcha?

hCaptcha is a bot detection and abuse prevention platform that delivers risk scores and challenge controls across web, mobile, and server‑side integrations. It protects user accounts by detecting takeover attempts, credential stuffing, and multi‑account abuse while preserving privacy with zero PII data sharing.

The platform includes fraud protection for transactions, payment processing, and subscription services, and it supports pull‑based SMS MFA for stronger verification without toll fraud. Private Learning uses machine‑learning models that adapt to emerging threats in real time, offering custom risk models without exposing sensitive user data.

It integrates with common identity providers and SAML/SSO, provides multi‑user dashboards, and offers native SDKs for iOS and Android. The solution is compliant with GDPR, CCPA, LGPD, and HIPAA, and it supports legacy browsers and non‑JavaScript clients.

hCaptcha details

Company: Intuition Machines, Inc.
Built for: Individuals
Data residency: United States
Stated compliance: SOC 2, GDPR, HIPAA, ISO 27001, CCPA, PCI DSS

Compliance as stated in hCaptcha's own published documentation.

hCaptcha tech specs

Cloud: Azure
Integrations: Shopify

hCaptcha pricing

Freemium

hCaptcha offers a free plan with paid upgrades available.

Verify on the official pricing page.

View plans

hCaptcha's key features

Zero-friction bot detection
Pull-based SMS MFA
Private learning zero PII
Advanced threat signatures
24/7 SOC coverage
Instant 0ms verification
First-party hosting solution

hCaptcha use cases

Create a secure checkout process for your online store using hCaptcha’s risk scoring and challenge controls to block credential stuffing and preserve user privacy
Develop a multi-factor authentication flow for your mobile banking app that integrates hCaptcha’s SMS MFA and bot detection to stop account takeover without revealing PII
Implement SAML SSO protection for your enterprise portal using hCaptcha’s privacy-preserving guard to prevent multi‑account abuse and bot attacks