Forge Captcha

Proof-of-Work bot protection service. Protect your forms and APIs with invisible cryptographic challenges.

Live Demo

How It Works

Three simple steps to protect your site.

1. Embed

Add two lines of HTML to your form. Include the script and place the widget div.

2. Solve

The browser silently computes a SHA-256 proof-of-work challenge in the background.

3. Verify

Your server validates the token with a single API call. Done.

Privacy Focused

Operates without cookies or invasive tracking. Uses privacy-friendly passive analysis and mathematical operations.

Fast Validation

Challenges are solved quickly in the background using Web Workers.

Simple Setup

Works via standard HTML snippets and basic REST API calls.

Flexible Page Rules

Set custom difficulty levels and modes for different URL patterns and pages.

Drop-In Replacement

Already using Turnstile, reCAPTCHA or hCaptcha? Switch seamlessly by just changing the JS URL without modifying code.

Integration

First, get your API keys from the dashboard, then add these lines to your form.

Before adding this code to your site, you must create your own API keys from the dashboard.

1. Client-Side (HTML)
<!-- Add the Forge script -->
<script src="https://forge.benegedeniz.com/widget/forge.js" async defer></script>

<!-- Place the widget in your form -->
<div class="forge-captcha" data-sitekey="YOUR_OWN_SITEKEY"></div>
2. Server-Side Verification (Backend)
curl -X POST https://forge.benegedeniz.com/api/siteverify \
  -H "Content-Type: application/json" \
  -d '{"secret":"YOUR_OWN_SECRET_KEY","response":"<TOKEN>"}'
  • Get Your API Keys
    First, log in to the Forge dashboard and create a new site to obtain your own Public Key (Sitekey) and Secret Key.
  • Replace Script URL
    - <script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script>
    + <script src="https://forge.benegedeniz.com/widget/forge.js"></script>
  • Replace Sitekey
    Replace your existing sitekey with the sitekey you got from the Forge dashboard.
  • Replace Verification Endpoint (Backend)
    - https://challenges.cloudflare.com/turnstile/v0/siteverify
    + https://forge.benegedeniz.com/api/siteverify
  • Replace Secret Key (Backend)
    Replace your existing secret key with the secret key you got from the Forge dashboard.
  • Get Your API Keys
    First, log in to the Forge dashboard and create a new site to obtain your own Public Key (Sitekey) and Secret Key.
  • Replace Script URL
    - <script src="https://www.google.com/recaptcha/api.js"></script>
    + <script src="https://forge.benegedeniz.com/widget/forge.js"></script>
  • Replace Sitekey
    Replace your existing sitekey with the sitekey you got from the Forge dashboard.
  • Replace Verification Endpoint (Backend)
    - https://www.google.com/recaptcha/api/siteverify
    + https://forge.benegedeniz.com/api/siteverify
  • Replace Secret Key (Backend)
    Replace your existing secret key with the secret key you got from the Forge dashboard.
  • Get Your API Keys
    First, log in to the Forge dashboard and create a new site to obtain your own Public Key (Sitekey) and Secret Key.
  • Replace Script URL
    - <script src="https://js.hcaptcha.com/1/api.js"></script>
    + <script src="https://forge.benegedeniz.com/widget/forge.js"></script>
  • Replace Sitekey
    Replace your existing sitekey with the sitekey you got from the Forge dashboard.
  • Replace Verification Endpoint (Backend)
    - https://hcaptcha.com/siteverify
    + https://forge.benegedeniz.com/api/siteverify
  • Replace Secret Key (Backend)
    Replace your existing secret key with the secret key you got from the Forge dashboard.