The CAPTCHA module offers a privacy-first, self-hosted alternative to tools like Google reCAPTCHA. Designed for full control and flexibility, it protects your forms, login pages, and APIs from automated abuse — without compromising user experience or sharing data with third parties.

This module performs multiple advanced checks behind the scenes, including IP reputation lookup, behavioral analysis, rate limiting, and challenge-response validation. It works silently where possible, showing visible CAPTCHA prompts only when needed.

You can fully customize its appearance and behavior to match your brand and threat model — including themes, difficulty settings, and trigger conditions. Unlike iframe-based captchas, this one is fully styleable and extensible.

Typical use cases include:

• Protecting login, registration, and password reset forms from bots
• Blocking high-risk or blacklisted IPs from accessing public endpoints
• Preventing spam submissions on contact, support, or feedback forms
• Customizing bot detection logic for high-risk workflows (e.g., trading)
• Avoiding reliance on external CAPTCHA providers and third-party APIs

Whether you're prioritizing privacy, performance, or branding, the CAPTCHA module gives you complete control over how — and when — you defend against bots.