
hCaptcha
Free plan · From $99/moActively maintained
- Is it safe? Run by Intuition Machines, Inc.See ↓
- Is it free? Free plan · From $99/mo · pricing page, read Oct 30, 2026See ↓
- What else does this?
Cloudflarefree
Firefox
SentinelOne Purple AISee ↓
not read yet
Use
- For
- security teams protecting websites and apps from bots, fraud and account abuse
- Price
- Free plan · From $99/mopricing page, read Oct 30, 2026
- Activity
- Actively maintainedsite updated 13 days ago · 73 open roles
- Company
- Intuition Machines, Inc. · Domain since 2018terms of service · domain registered
- How it runs
- API
- Used for
- block account takeover attempts on login
- stop abuse across multiple accounts
- prevent fraudulent payment transactions
- On the web since 2018, older than 88% of its shelfINITE Atlas
- Hiring: 73 open rolescareers page
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantshcaptcha.com ↗
- Run byIntuition Machines, Inc.terms of service ↗
- Certifications they stateSOC 2 Type II · ISO 27001 · GDPR · ISO 27701 · PCI DSS · CCPAsecurity page ↗
- Privacy policy updated2025-10-07privacy policy ↗
These are hCaptcha's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP serverhttps://mcp.hcaptcha.com/mcpnot in the official registry: answered when asked
- Stateanswers, requires sign-inchecked 2026-10-30
- Address to connectmcp.hcaptcha.com/mcp
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1

CloudflareMCP · open
Proxies website traffic through a global network for CDN caching, DNS, DDoS protection and a web firewall, plus Workers serverless code and zero-trust access.
4.9MActiveFrom $7/user/mo2009 - #2

Firefox
Blocks trackers by default in a web browser and moves bookmarks, passwords and history between devices.
1.2MActive2002 - #3

SentinelOne Purple AI
Detects and responds to endpoint threats using behavioral AI and autonomous remediation across devices and identities.
453kActiveFrom $179.99/yr2013 - #4

Varonis
Discovers, classifies, and monitors sensitive data; detects and prevents data exfiltration and identity-based attacks.
137kActive2005 - #5

Kentik AI
Collects network traffic data and detects anomalies like DDoS attacks and cost inefficiencies across cloud and on-premises infrastructure.
114kActiveFrom $2,000/mo
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use hCaptcha for?
Sign in to leave a noteWhat is hCaptcha?
Detects bots and fraud in web, app and server traffic, and serves challenges that block automated abuse and account takeovers. It is listed in the Atlas under Security and made by Intuition Machines, Inc.
Who is hCaptcha for?
security teams protecting websites and apps from bots, fraud and account abuse
How much does hCaptcha cost?
hCaptcha has a free plan; paid plans start at $99/mo, per its pricing page on 2026-10-30.
Is hCaptcha free?
Yes, hCaptcha has a free plan, per its pricing page on 2026-10-30.
Is hCaptcha still maintained?
Actively maintained: site updated 13 days ago · 73 open roles.
Who owns hCaptcha?
hCaptcha is run by Intuition Machines, Inc., per its terms of service (2026-10-30).
Is hCaptcha safe?
We do not audit vendors. What hCaptcha publishes, read 2026-10-30: SOC 2 Type II, ISO 27001, GDPR, ISO 27701, PCI DSS, CCPA stated on its security page.
What are alternatives to hCaptcha?
In Security, by use: Cloudflare, Firefox, SentinelOne Purple AI, Varonis, Kentik AI.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk
Cookies
Before we count this visit
Analytics and ad measurement tell us which pages and which of our ads do their job: Google Analytics and Google Ads, the Meta pixel, Yandex Metrica, and one first-party id of our own. Nothing is stored until you answer, and declining changes nothing about the site.