hCaptcha
hCaptcha stops bots and fraud with AI-driven detection and privacy-preserving learning. Free Basic plan in 2026, Pro from $99/month, Enterprise custom.
About hCaptcha
What is hCaptcha (2026 update)
hCaptcha is a bot detection and fraud prevention platform that website owners embed instead of, or alongside, a traditional CAPTCHA to tell human visitors apart from automated traffic while keeping user privacy in mind. It positions itself as a broader web security layer that covers login abuse, fake account creation, and payment fraud, not only the classic image-based challenge box.
What is new in 2026
hCaptcha’s 2026 focus has shifted toward giving Enterprise customers direct control over how automated agents, including AI agents, are allowed to behave on their sites and apps, reflecting the rise of agentic browsing traffic. The company also promotes “Private Learning,” a machine learning approach that improves detection accuracy over time by learning from aggregate behavioral patterns rather than building individual user profiles, which it frames as privacy-preserving. hCaptcha reports that sites deploying its Enterprise tier see 70 to 90 percent reductions in total attack volume in 2026 compared to their pre-deployment attack levels, even for sites that already run a web application firewall or other security tools.
Key features
- Multi-layered bot detection combined with a low-friction passive mode that avoids showing a challenge to most legitimate users
- User Journeys tracking to protect accounts across sessions, devices, and apps
- Fraud protection aimed at securing transactions from abuse and payment fraud
- Account Defense with privacy-preserving detection of account takeover attempts
- Risk scoring and APT mitigation features on the Enterprise tier
- SOC 2 and GDPR-aligned compliance, plus SAML single sign-on and multi-user dashboards on Enterprise
Pricing in 2026
hCaptcha publishes three tiers on its official pricing page. A free 14-day Pro trial is available with no payment required.
| Plan | Price | What you get |
|---|---|---|
| Basic | Free | Core bot protection with unlimited evaluations, works in every country, compliant with GDPR, CCPA, LGPD, and similar regulations |
| Pro | $139/month billed monthly, or $99/month billed annually | Everything in Basic plus low-friction passive mode, custom themes, and analytics, with 100,000 evaluations/month included and $0.99 per 1,000 evaluations after that |
| Enterprise | Custom, contact sales | Everything in Pro plus risk scores, no-CAPTCHA passive mode, APT mitigation, enterprise SLAs, multi-user dashboard, SAML SSO, and advanced reporting APIs |
Who should use it
hCaptcha fits site owners and platforms that need bot and fraud protection beyond a basic checkbox CAPTCHA, especially those handling logins, account creation, or payments at meaningful volume. The free Basic plan works for smaller sites that mainly need standard bot protection, while Pro and Enterprise suit businesses that want passive, low-friction verification plus analytics and stronger fraud and account-takeover defenses. It is less necessary for a small personal site with minimal traffic, where a simpler free tool may be enough.
Limitations and alternatives
Pro pricing is based on evaluation volume, so sites with high traffic can see costs grow with usage, and full Enterprise features require a custom quote rather than a published price. If cost is the main concern and you are already on Cloudflare, Cloudflare Turnstile is a free alternative that runs background checks and rarely shows a challenge to legitimate users. Google reCAPTCHA remains a widely used alternative with deep Google ecosystem integration. For high-risk enterprise use cases such as banking or gaming, where stricter enforcement is worth some added user friction, Arkose Labs is a commonly cited alternative.
Frequently asked questions
Is hCaptcha free to use?
Yes, the Basic plan is free and permanent, offering core bot protection with unlimited evaluations. Pro and Enterprise tiers add passive low-friction mode, analytics, and advanced fraud and risk features.
How much does hCaptcha Pro cost?
hCaptcha Pro costs $139/month billed monthly, or $99/month billed annually, and includes 100,000 evaluations per month with $0.99 per additional 1,000 evaluations.
What is hCaptcha's Private Learning?
Private Learning is hCaptcha's approach to improving bot and fraud detection by learning from aggregate behavioral patterns rather than building profiles of individual users, which the company positions as privacy-preserving.
What are good alternatives to hCaptcha?
Cloudflare Turnstile is a free, low-friction alternative especially if you already use Cloudflare, Google reCAPTCHA is a widely used option with deep Google integration, and Arkose Labs is often chosen for high-risk enterprise use cases needing stricter enforcement.
Information last verified: September 2026.
Related Tools
