# MTCaptcha

> The smart, privacy-compliant CAPTCHA that stops bots without punishing real users. SOC 2 Type 2 attested, GDPR and CCPA ready.

MTCaptcha blocks bots, fraud, and abuse while real users pass in a single click. It integrates in minutes with a single script tag, supports eleven preset visual themes plus fully custom CSS, a compact "Modern Mini" form factor, and a fully invisible mode with a 99.5% human first-pass rate. It is WCAG 2.1 AAA, EAA, Section 508, and EN 301 549 accessible, including keyboard shortcuts and audio challenges for screen reader users. A detailed feature-by-feature comparison against reCAPTCHA v2 is published on the pricing page, and the product is backed by 16 published customer testimonials.

## Product

- [Homepage](https://www.mtcaptcha.com/): Product overview and a live, interactive demo widget.
- [Pricing](https://www.mtcaptcha.com/pricing): Plans, quotas, and a full feature comparison against reCAPTCHA v2.
- [Use cases](https://www.mtcaptcha.com/use-cases): Every way MTCaptcha stops bots, fraud, and abuse, mapped to the product features that ship today.
- [Live demo and code builder](https://service.mtcaptcha.com/mtcv1/demo/): Try every theme and mode yourself, and generate a ready-to-paste embed snippet.
- [Developer guide](https://docs.mtcaptcha.com/dev-guide-quickstart): Integration quickstart.

## Features

- **Adaptive invisible NoCAPTCHA**: Frictionless verification for real humans, robust against bots. Most visitors pass without lifting a finger.
- **Adaptive risk engine**: Continuously reads the threat environment and adjusts difficulty. Easy on humans, hard on bots.
- **Built for the enterprise**: Multi-user console, automated regression tests, server-side token decryption, and Threat SPECT.
- **Enterprise dashboards**: Multiple user accounts with rich analytics and metrics to monitor traffic and risk.
- **GDPR-compliant captcha**: Privacy-first protection against spam and abuse, without invasive tracking.
- **24/7 global availability**: Decentralized architecture and worldwide data centers keep you protected, even under DDoS.
- **Accessibility & WCAG/EAA**: WCAG 2.1 AAA, EAA, Section 508 and EN 301 549 compliant. Colorblind-safe and screen-reader friendly.
- **Customizable themes**: Eleven preset themes plus fully customizable CSS to match your brand exactly.
- **SOC 2 Type 2 attested**: Independently audited proof of our security controls, ready for enterprise procurement.

## Use Cases

Nine scenario-specific pages, each mapping a real problem to the MTCaptcha capability that solves it, with deployment evidence from real customers (named by industry and mechanism, not by account, per our disclosure policy).

- [Agent & session trust](https://www.mtcaptcha.com/use-cases/agent-session-trust): Distinguish real users, trusted AI agents, and scripted automation with session-age and auth-strength signals, not a blanket block.
- [Corporate & branded storefronts](https://www.mtcaptcha.com/use-cases/corporate-storefronts): Stop checkout bots, promo-code cracking, and inventory hoarding on company merch and B2B procurement stores, without slowing down real buyers.
- [Account takeover & credential stuffing](https://www.mtcaptcha.com/use-cases/account-takeover): Let real sign-ins and password managers through invisibly, and stop scripted logins replaying breached credentials.
- [Form & signup spam](https://www.mtcaptcha.com/use-cases/form-spam): Keep contact, signup, and quote-request forms open to real people and closed to scripted submissions, without adding a puzzle.
- [Enterprise logins & APIs](https://www.mtcaptcha.com/use-cases/enterprise-logins-apis): Multi-user console, automated regression tests, and server-side token decryption, bot protection built for teams running this at scale.
- [Privacy & compliance](https://www.mtcaptcha.com/use-cases/privacy-compliance): GDPR/CCPA-ready bot verification with no invasive tracking, for privacy and legal teams evaluating a switch away from reCAPTCHA.
- [Uptime & availability](https://www.mtcaptcha.com/use-cases/uptime-availability): Decentralized, globally distributed infrastructure that keeps verifying real users even during a DDoS event or a traffic spike.
- [Accessibility](https://www.mtcaptcha.com/use-cases/accessibility): WCAG 2.1 AAA-conformant challenges, the accessibility bar competitors advertise but don't clear.
- [Votes, rankings & leaderboards](https://www.mtcaptcha.com/use-cases/votes-rankings): Stop scripted votes from gaming a ranking, leaderboard, or awards page, without adding friction for real voters.

## Pricing

Five tiers, monthly or yearly (yearly saves 15%). Every paid plan starts with a 30-day free trial, no credit card required.

- **Free** (Free): For personal sites and testing
- **Core** ($29/mo): For small production sites
- **Pro** ($95/mo): For growing products
- **Business** ($170/mo): For high-traffic businesses
- **Enterprise** (Custom pricing): For custom scale and compliance

## Documentation

Full technical documentation lives at docs.mtcaptcha.com, organized into two sections:

### Developer Guide

- [Quick Start](https://docs.mtcaptcha.com/dev-guide-quickstart)
- [Invisible Captcha](https://docs.mtcaptcha.com/dev-guide-invisible-captcha)
- [Mini Form Factors](https://docs.mtcaptcha.com/dev-guide-form-factors)
- [Explicit Render](https://docs.mtcaptcha.com/dev-guide-explicit-render)
- [Validate Token (With Private Key)](https://docs.mtcaptcha.com/dev-guide-validate-token)
- [Automated HTML Form Validation](https://docs.mtcaptcha.com/dev-guide-autoformvalidate)
- [Captcha Action](https://docs.mtcaptcha.com/dev-guide-captcha-action)
- [JavaScript Callbacks](https://docs.mtcaptcha.com/dev-guide-jscallbacks)
- [JavaScript APIs](https://docs.mtcaptcha.com/dev-guide-js-apis)
- [Automated Testing (Test Key)](https://docs.mtcaptcha.com/dev-guide-automated-testing)
- [Threat SPECT](https://docs.mtcaptcha.com/dev-guide-mtcaptcha-threat-spect)

### FAQ

- [Does MTCaptcha Support Invisible Captcha?](https://docs.mtcaptcha.com/faq-low-friction-invisible-captcha)
- [Accessibility Compliance](https://docs.mtcaptcha.com/faq-accessibility-compliance)
- [Privacy / GDPR Compliance](https://docs.mtcaptcha.com/faq-privacy-gdpr-compliance)
- [Adaptive Proof of Work](https://docs.mtcaptcha.com/adaptive-proof-of-work)
- [Does MTCaptcha Work in China?](https://docs.mtcaptcha.com/faq-works-in-china)
- [Run Automated Tests](https://docs.mtcaptcha.com/faq-run-automated-tests)
- [Production vs. Development Domains](https://docs.mtcaptcha.com/faq-production-dev-domains)
- [Customize Style (CSS)](https://docs.mtcaptcha.com/faq-custom-style)
- [Widget Dimensions](https://docs.mtcaptcha.com/faq-widget-dimensions)
- [Customize Text and Language](https://docs.mtcaptcha.com/faq-custom-text-language)
- [Firewall / IP Whitelisting](https://docs.mtcaptcha.com/faq-firewall-ip-whitelist)
- [Decrypt the Token Directly (API-less)](https://docs.mtcaptcha.com/faq-decrypt-token-directly)

## Blog

Long-form articles on bot protection, accessibility, and how MTCaptcha compares to alternatives.

- [No CAPTCHA solutions](https://docs.mtcaptcha.com/blog-no-captcha-solutions)
- [MTCaptcha as a privacy-focused reCAPTCHA alternative](https://docs.mtcaptcha.com/blog-privacy-gdpr-alternative-recaptcha)
- [MTCaptcha accessibility (WCAG 2.1 AAA)](https://docs.mtcaptcha.com/blog-accessibility-eaa-wcag-compliant)
- [MTCaptcha vs reCAPTCHA vs hCaptcha vs Friendly Captcha](https://docs.mtcaptcha.com/blog-captcha-comparison-at-a-glance)

## Company

- [About us](https://www.mtcaptcha.com/about-us): Team and mission.
- [Contact](https://www.mtcaptcha.com/contact): Sales, support, and general enquiries.

## Legal

- [All legal documents](https://www.mtcaptcha.com/legals)
- [Terms and conditions](https://www.mtcaptcha.com/legal-terms)

## Compliance

MTCaptcha is SOC 2 Type 2 attested (an independent auditor's report, not a self-issued certification), certified under the EU-U.S., UK, and Swiss-U.S. Data Privacy Framework, GDPR and CCPA ready, and WCAG 2.1 AAA, EAA, Section 508, and EN 301 549 accessible. It processes over 2 billion verifications a month and is proven in China, where most CAPTCHA vendors are hard-blocked. A full feature comparison against reCAPTCHA v2, hCaptcha, Cloudflare Turnstile, and Friendly Captcha is published on the homepage.

- [Trust Center](https://app.vanta.com/mtcaptcha.com/trust/ur1lz4cvywd5soj742wbm): SOC 2 Type 2 attestation report and live security posture, independently hosted.
- [Data Privacy Framework registry](https://www.dataprivacyframework.gov/list): Official U.S. government verification of MTCaptcha's DPF certification.