We are cat.
We catch bots.
The invisible CAPTCHA alternative for sign-ups, logins and checkouts. Real people walk straight in, suspicious visits get a quick check, and bots get caught.
Card at sign-up. Nothing charged until day 15.
Catch ya?
Every last one, caught.
Bots knock. The cat answers.
300+ signals on every request
Each visit is scored in real time from its device, its behavior and its network, with no delay for real people.
Three engines, one verdict
Fingerprints, behavior and reputation work together: TLS and device fingerprints, mouse, touch and typing rhythm, plus IP, VPN, proxy and datacenter checks.
The right challenge, only when needed
Low risk passes silently. Higher risk gets a one-click checkbox, a puzzle slider, an image grid or a text question. Certain bots are blocked.
Built to beat AI solvers
Puzzle images carry noise that trips up vision models, and single-use tokens with two-step verification stop replays.
Your rules, your look
Set rate limits and IP or country lists, and style the challenge with your own colors and images.
One script tag, any stack
JavaScript, React, Vue and Angular on the front, Node.js, Python, PHP, Go, Java, .NET, Ruby or Laravel on the back, plus WordPress and Android.
One flow. Every risk tier.
Katcha scores every visit and only steps in when the risk calls for it. Pick a tier and watch the same sign-in adapt.
- 1
Your visitor fills in the form
Nothing changes for them. Katcha reads quiet signals while they type and click.
- 2
Katcha scores the risk
Every visit gets a score from 0 to 100 in real time, from its own signals only.
- 3
The right response, every time
Low risk passes untouched, medium risk gets a quick puzzle, high risk is blocked.
Wherever bots knock.
A few of the places Katcha keeps bots out. Put it on any form or page bots go after, and real people walk right in.
Logins
Bots with stolen passwords never get into an account.
Sign-ups
Fake accounts and spam bots never reach your user list.
Checkouts
Card testers and scalper bots never reach the payment.
One-time codes
Bots cannot ask for code after code and run up your SMS bill.
Not another CAPTCHA.
Where the usual bot checks get in the way, Katcha stays out of it.
Typical CAPTCHAs
Katcha
- Typical CAPTCHAs: Makes people solve picture grids. Katcha: Invisible for most visitors.
- Typical CAPTCHAs: Sets cookies and tracks visitors. Katcha: No cookies, nothing for a banner.
- Typical CAPTCHAs: Sends visitor data outside the EU. Katcha: Processed in the Netherlands.
- Typical CAPTCHAs: Same hard test for everyone. Katcha: Steps in only when the risk does.
- Typical CAPTCHAs: Puzzles that AI vision can solve. Katcha: Puzzle images that resist AI solvers.
- Typical CAPTCHAs: A look you can never change. Katcha: Your colors and your own images.
Pricing as clear as daylight.
Choose by how many requests you protect each month and how many domains you run. Every plan starts with a 14-day free trial.
Starter
Creator
For a business with a few sites, or a studio with its first clients.
€49/ month
50,000requests a month
Pro
Crew
For agencies that protect every client site from one account.
€99/ month
150,000requests a month
Business
Company
For agencies with a large portfolio and the traffic to match.
€199/ month
500,000requests a month
Every feature side by side?
Compare all plansBefore you ask, the cat already knows.
Is Katcha really invisible?
For most visitors, yes. Katcha scores every request in the background and only shows a one-click checkbox or a short puzzle when the risk is high. Bots it is sure about are blocked outright.
Where is visitor data processed?
In the Netherlands, under EU data protection law. Katcha uses no cookies and builds no cross-site profiles.
What happens if Katcha gets it wrong?
Every site has its own sensitivity setting, you can add trusted IPs and countries to an allow list, and analytics show what was flagged and why.
How does the free trial work?
Every plan starts with a 14-day free trial. You add a card when you sign up and nothing is charged until the trial ends.