We are cat.
We catch bots.

The invisible CAPTCHA alternative for sign-ups, logins and checkouts. Real people walk straight in, suspicious visits get a quick check, and bots get caught.

Card at sign-up. Nothing charged until day 15.

Catch ya?

Every last one, caught.

Bots knock. The cat answers.

  1. 300+ signals on every request

    Each visit is scored in real time from its device, its behavior and its network, with no delay for real people.

  2. Three engines, one verdict

    Fingerprints, behavior and reputation work together: TLS and device fingerprints, mouse, touch and typing rhythm, plus IP, VPN, proxy and datacenter checks.

  3. The right challenge, only when needed

    Low risk passes silently. Higher risk gets a one-click checkbox, a puzzle slider, an image grid or a text question. Certain bots are blocked.

  4. Built to beat AI solvers

    Puzzle images carry noise that trips up vision models, and single-use tokens with two-step verification stop replays.

  5. Your rules, your look

    Set rate limits and IP or country lists, and style the challenge with your own colors and images.

  6. One script tag, any stack

    JavaScript, React, Vue and Angular on the front, Node.js, Python, PHP, Go, Java, .NET, Ruby or Laravel on the back, plus WordPress and Android.

One flow. Every risk tier.

Katcha scores every visit and only steps in when the risk calls for it. Pick a tier and watch the same sign-in adapt.

  1. 1

    Your visitor fills in the form

    Nothing changes for them. Katcha reads quiet signals while they type and click.

  2. 2

    Katcha scores the risk

    Every visit gets a score from 0 to 100 in real time, from its own signals only.

  3. 3

    The right response, every time

    Low risk passes untouched, medium risk gets a quick puzzle, high risk is blocked.

Wherever bots knock.

A few of the places Katcha keeps bots out. Put it on any form or page bots go after, and real people walk right in.

  • Logins

    Bots with stolen passwords never get into an account.

  • Sign-ups

    Fake accounts and spam bots never reach your user list.

  • Checkouts

    Card testers and scalper bots never reach the payment.

  • One-time codes

    Bots cannot ask for code after code and run up your SMS bill.

Not another CAPTCHA.

Where the usual bot checks get in the way, Katcha stays out of it.

Typical CAPTCHAs

Katcha

  • Typical CAPTCHAs: Makes people solve picture grids. Katcha: Invisible for most visitors.
  • Typical CAPTCHAs: Sets cookies and tracks visitors. Katcha: No cookies, nothing for a banner.
  • Typical CAPTCHAs: Sends visitor data outside the EU. Katcha: Processed in the Netherlands.
  • Typical CAPTCHAs: Same hard test for everyone. Katcha: Steps in only when the risk does.
  • Typical CAPTCHAs: Puzzles that AI vision can solve. Katcha: Puzzle images that resist AI solvers.
  • Typical CAPTCHAs: A look you can never change. Katcha: Your colors and your own images.

Pricing as clear as daylight.

Choose by how many requests you protect each month and how many domains you run. Every plan starts with a 14-day free trial.

Starter

Creator

For a business with a few sites, or a studio with its first clients.

€49/ month

50,000requests a month

  • Up to 5 domains
  • Invisible, checkbox and puzzle checks
  • Risk scoring from 300+ signals
  • EU-hosted, no cookies, DPA included
Start 14-day free trial

Business

Company

For agencies with a large portfolio and the traffic to match.

€199/ month

500,000requests a month

  • Up to 50 domains
  • Invisible, checkbox and puzzle checks
  • Risk scoring from 300+ signals
  • EU-hosted, no cookies, DPA included
  • Analytics and attack alerts
  • Your brand colors and challenge images
  • Custom traffic and rate-limit rules
  • Dedicated support with an SLA
Start 14-day free trial

Every feature side by side?

Compare all plans

Before you ask, the cat already knows.

Is Katcha really invisible?

For most visitors, yes. Katcha scores every request in the background and only shows a one-click checkbox or a short puzzle when the risk is high. Bots it is sure about are blocked outright.

Where is visitor data processed?

In the Netherlands, under EU data protection law. Katcha uses no cookies and builds no cross-site profiles.

What happens if Katcha gets it wrong?

Every site has its own sensitivity setting, you can add trusted IPs and countries to an allow list, and analytics show what was flagged and why.

How does the free trial work?

Every plan starts with a 14-day free trial. You add a card when you sign up and nothing is charged until the trial ends.