BotDetect CAPTCHA Generator

BotDetect™ CAPTCHA generator is a form security solution using Captcha challenges, that are easy for humans but hard for bots, to prevent automated page posting. Bots are kept from accessing protected website functionality using generated Captcha images specifically designed to be out of reach of computer vision and OCR technologies. BotDetect also provides an audio Captcha alternative to keep websites accessible to people with impaired vision, enabling you to make WCAG and Section 508 compliant websites.

CAPTCHA Generator Features

BotDetect CAPTCHA Box
  • 60 secure & readable Captcha image styles
  • 12 secure & accessible audio Captcha sound styles
  • Localized Captcha generation, using various Unicode character sets and multi-language sound pronunciations
  • Custom Captcha image size, format, color scheme...
  • Custom Captcha code length, style, character set, timeouts, generated code filtering...
  • Many other randomization & customization options
  • Compatible with various MVC frameworks
  • Supports extra Ajax Captcha validation for improved form usability, through built-in JavaScript functionality and jQuery validation
  • Works in China
  • And it does not stalk your users and visitors

Why BotDetect?

BotDetect Captcha vs. ReCaptcha

The years of Google’s relentless abuses of their organic and paid search monopolies, and the years of their equally relentless campaign of disinformation and FUD about captchas, took a toll among our former competitors -- there are only two viable players left. Ladies and gentleman, this is 'BotDetect Captcha' vs. 'Recaptcha the Stalker' fight. Please take your seats.

Said that, we heard that Nocaptcha Recaptcha stalker is gone, too; that Google euthanized it.
BotDetect Team: OK Google, the Stalker was neither a captcha, nor it was thwarting bots well.

Supposedly, it will be replaced with an even creepier stalker that will not pretend it is a captcha any more -- aside from keeping the variant of the same name -- the Invisible Recaptcha.
BotDetect Team: OK Google, the Invisible Stalker, we got it. Good luck with that :).

Let's see how we stack up against each other:


Recaptcha the Stalker cracked again :)!
We are not surprised. How about you?

This time around with the help of Google's own Speech Recognition API :). Ouch!


Recaptcha broken by Columbia Uni trio!

Automatically solved 70.78% of times through what looks like multiple inherent design flows. This is the biggie that is going to haunt recaptcha for years to come.


BotDetect CAPTCHA v4 released

See our roadmap and release notes.

1) BotDetect Is Secure

BotDetect is unique among Captcha generators in offering many Captcha image and sound styles. While each of them is easily comprehensible to human users, randomly using multiple Captcha generation algorithms makes the generated Captcha challenge practically impossible to pass automatically.

This approach to Captcha security is validated by the BotDetect track record: we have over 3000 paying customers and not one confirmed case of automated Captcha breaking by spammers.

2) BotDetect Works in China

BotDetect Captcha works in China -- while Recaptcha does not!

With its 1.3B people China has approximately 20% of the world population and outputs like 16% of the world GDP. The size of China's economy is second only to the size of US one.

Even if you do not actively target the Chinese market, the chances are that some of your visitors, users, and customers sometimes venture or even reside there. It helps not having Recaptcha breaking your website for them.

However, if you, or your users, do target the Chinese market, making your website fully functional for the visitors from China should be one of the top placed items on the 'minimum requirements' check-list. Make sure to check it!

3) BotDetect Is Multinationals Friendly

With more than hundred world languages already supported in the code, and 34 different audio localizations being just a download away, BotDetect Captcha will ensure that your interaction with every local market is done in to that particular local market familiar script and language.

4) BotDetect Lets You Meet Regulatory Requirements

Recaptcha is a 3rd-party stalking service delivered from the cloud that you have no control over and due to its obfuscation and encryption you can only guess what payload your users get.

BotDetect runs on your own servers, and its source code is available; thus enabling you to easily meet whatever regulatory or security requirements that are, or might be, imposed on your application or website.

5) BotDetect Is Accessible and Legal on the US Government Websites

BotDetect Captcha is both Section 508 and WCAG compliant, and as such legal on the US federal agencies' websites -- unlike Recaptcha, that is just lame-ducking there while awaiting for its Section 508 lawsuit by a disgruntled employee or a user to throw it away.

Why is it like that? It is simple. When you block cookies in your browser, or go into incognito mode, Recaptcha reverts back to the old 'two-words Recaptcha', or to various 'pig and dog' pictures. And a few things aside from a miracle will make your application using the 'two-words Recaptcha', or those 'pig and dog' pictures, to be able to satisfy this particular Section 508 requirement.

6) BotDetect Is Both Privacy and National Security Friendly -- It Does Not Spy

Unlike Recaptcha, BotDetect does not operate under 'if it can stalk you then you are human' principles; and will not make your application being rejected by the most of world governments on the grounds of national security; be it on their own websites, or on the websites of their sensitive institutions and industries.

If you have a privacy or national security sensitive website or application and are considering the Stalker, think again:

  • Recaptcha the Stalker refuses to work 'as advertised' if you switch into incognito mode, or block cookies in your browser. It gets annoyed when prevented from stalking. Why?
  • It is owned by Google who already knows who you are; think Gmail, Search, YouTube, Docs, etc. And now, Google can cross-match that data with your activities on all Stalker armed websites. Kiss goodbye to both your users' privacy and national security.
  • Its client-side is a .js payload; obfuscated, encrypted, and delivered from the cloud by the party who knows your identity (Google); straight into your browser; completely bypassing servers of the Stalker armed website you are visiting. Hm, what could possibly go wrong?

In short, Recaptcha is not a captcha, but a stalker disguised as a captcha. By default, it does not check your humanity at all, but fingerprints your browser and cookies and match it with your past activities across the web. It is a sort of 'Login by Google' -- just a way more dangerous one.

7) Captcha, Inc. Eats Its Own Dog Food

While Google, since 2009, mostly avoided using Recaptcha on its own properties. Why?

A cynic would argue that on its own properties Google already knows who you are so Recaptcha the Stalker was not needed there -- and it does not thwart bots that well anyway.

8) Captcha, Inc. Does Not Break Antitrust Laws

While Google exposed itself to huge legal risks, by breaking every rule in the antitrust book, in order to force-feed you Recaptcha the Stalker through the nose; a product with no known revenues; losing them a fortune each quarter; years in a row; and broken so often and so thoroughly; that over the last seven years even Google itself mostly refused to use it.

That is weird, isn't it?

9) Captcha, Inc. Lives of BotDetect License Sales

But where the Recaptcha money is coming from, in amounts large enough to justify taking the risk of breaking the antitrust laws, is a sort of mystery.

A cynic might ask you to pick your preferred answer:

  • It does not; and at some point Google will pull the plug on Recaptcha completely, as they did with Google Reader and other such products resting in the Google Graveyard.
    BotDetect Team: OK Google, that is called 100% enterprise-ready; a CIO's wet dream :).
  • Some undisclosed parties license the Stalker's data-feed and pay Google a fortune, and then some more, so Recaptcha is actually profitable -- and the Stalker is watching you!
    BotDetect Team: OK Google, who are they? And what they use the data-feed for :)?

Think for yourself!

BotDetect CAPTCHA Customer References and Testimonials

Over the years, our products became a household name for high-quality Captcha components. Today we are proud to count as our clients, among over 3000 customers: Morgan Stanley, NASDAQ, Intuit, Con Edison, Accenture, Christie's Auctions, EMI Music, McNeil Consumer Healthcare, Swiss Telecom, and many more. And our customers say:

"BotDetect Captcha solution works great, is fast and easy to implement and their customer care is outstanding. After lots of research, I am convinced that you cannot get a better value!"

- Chuck Van Court, CEO & Founder, Fuze Digital Solutions, USA

"Great little dll at a great price."

- Tony Van Vugt

"Fantastic product! Your BotDetect Captcha control saved hours of development time. Within a couple of minutes of purchase, we had a fully enabled Captcha verification system integrated into our registration form!"

- Tomas Salas, PoshPoints LLC, Usa

"Your product is great. It stopped the spambot garbage I was getting on my forms IMMEDIATELY."

- Kevin Owens, Drexel University Chemistry Dept, USA

"There is lots of recommendation about you. I didn't really want to buy a component, but there were no free scripts that were good enough and you were easily the best once I decided to buy something."

- Steve Belton

"You are one of the (few) companies with excellent support!"

- Helge Thomas Hellerud, Oslo, Norway