Self-hosting
Your server. Your domain. Your control.
By default, CaptchaCore runs on our servers in Germany. For companies with special requirements, we offer self-hosting on your own server.
Managed (default)
We run CaptchaCore for you. You sign up, receive API keys and embed the widget. We take care of servers, updates and security.
- Servers in Germany
- Automatic updates & monitoring
- Ready to use instantly
- From €0 / month
Self-hosting (on request)
CaptchaCore is installed on your own server, under your domain. Full control over data, configuration and infrastructure.
- Your own server, your own domain
- Data never leaves your server
- Custom configuration
- On request — Get in touch
Requirements for self-hosting
Server
- Linux (Debian/Ubuntu recommended)
- PHP 8.3+ with Redis extension
- MySQL 8+ or MariaDB 11+
- Redis 7+
- NGINX or Apache
We take care of
- Installation & configuration
- SSL certificate (Let's Encrypt)
- Initial setup of sites & keys
- Documentation for your team
- Optional maintenance contract
Architecture
Browser (user)
│
├─ 1. Page loads → widget fetches challenge GET /api/v2/challenge
├─ 2. WebWorker solves PoW in the background (~200ms, no UI blocking)
├─ 3. Behavioral signals are being collected (mouse, keyboard, touch)
└─ 4. Form submit → token is verified POST /api/v2/verify
│
└─ Risk Engine: PoW + Behavior + IP + UA
├─ Score < 30 → allow
├─ Score 30-59 → challenge
└─ Score 60+ → block
16 KB
Widget
gzip, no framework
< 50ms
Verify
Server-side check
5 layers
Protection
PoW + Behavior + Risk + Threat Intel + UAM