Observed arrival · 2026-09-07
Reject — Bot Protection Without the CAPTCHA
Credibility concern recorded. The source reference remains available for verification and correction.
A server-side bot-verification service that combines browser, network, and email-domain signals into an allow, review, or deny verdict.
Field notes
Reject separates collection from judgment: an optional browser SDK creates a short-lived token, while the customer’s server performs the verification call and retains the API key. The documented inputs span browser rendering and automation markers, live proxy-network data, and DNS records for the submitted email domain. The page states that verdicts arrive in roughly 30 milliseconds at EU-region p50 latency, with a 4 KB gzipped SDK payload and reasons attached to each score.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue