Invisible • Self-hosted • Private

SharkCaptcha

The invisible, privacy-first CAPTCHA. Stop spam and volume bots with silent proof-of-work — no image puzzles, no tracking, self-hosted on the CDNShark edge.

A drop-in replacement for reCAPTCHA and Turnstile.

No image puzzles~200ms to passPrivacy-firstDrop-in widget

Why SharkCaptcha

Invisible to Users

No street signs, no traffic lights, no "I'm not a robot" grind. Most visitors pass silently in about 200 ms.

Proof-of-Work

The browser solves a small cryptographic puzzle, making bulk abuse expensive while staying instant for real people.

Privacy-First

Self-hosted on our edge — no data sold, no cross-site tracking cookies, no third-party ad network watching your users.

Drop-In Replacement

A familiar widget and a server-side verify endpoint — swap out reCAPTCHA or Turnstile in minutes.

Edge-Issued & Fast

Challenges are issued from the nearest CDNShark edge, so verification is low-latency worldwide.

Simple to Embed

One script tag and one div on the client, one HTTP call to verify on your server. That's it.

How It Works

1
Embed the widget

Drop the SharkCaptcha script and a single element into your form.

2
Edge issues a challenge

The nearest CDNShark edge hands the browser a proof-of-work challenge.

3
Browser solves silently

The visitor's browser solves it in ~200 ms and receives a signed token.

4
Your server verifies

Post the token to /siteverify; a bad or missing token means block the request.

Integrate in Minutes

1. On your page
<script src="https://cdnshark.com/js/sharkcaptcha.js" async></script>

<form method="POST" action="/submit">
  <!-- your fields -->
  <div class="sharkcaptcha" data-sitekey="YOUR_SITE_KEY"></div>
  <button type="submit">Send</button>
</form>
2. On your server
POST https://cdnshark.com/captcha/siteverify
  secret   = YOUR_SECRET_KEY
  response = <token from the form>

→ { "success": true }   // allow
→ { "success": false }  // reject

Get your site key and secret from the customer dashboard.

What proof-of-work does — and doesn't

SharkCaptcha raises the cost of automated abuse and stops volume, spam, and scripted bots without annoying real visitors. Like any proof-of-work challenge, it is not designed to stop a targeted, human-solved attack — for that, pair it with CDNShark rate limiting, WAF, and bot protection for defense in depth.

Ditch the puzzles. Keep the bots out.

Add SharkCaptcha to your forms and logins in minutes.

Request Access Sign In