Lab Report

WeHateCaptchas (Friendly Captcha)

Modern, invisible CAPTCHA. Replace squiggly text and image grids with a single click while a proof-of-work puzzle runs in the background.

Try It

The Verdict

Friendly Captcha is the right pick if you want spam protection that does not treat legitimate visitors like suspects. It is fully accessible, GDPR compliant, and requires no cookies or trackers, which makes it a genuinely better experience than reCAPTCHA or hCaptcha for most European-facing sites. The catch is cost: the free tier caps at 1,000 requests per month for non-commercial use only, and real bot intelligence lives in the €200 Advanced plan. Small sites with low volume will love it. High-traffic operations should price the tiers carefully before committing.

Pricing

All prices in euros. Request limits are per month.

Free (non-commercial)

€0

1 protected domain
Up to 1,000 requests
Privacy-friendly protection
No image labeling tasks
Fully accessible

Starter

€9/mo

1 protected domain
Up to 1,000 requests
Privacy-friendly protection
No image labeling tasks
Fully accessible

Growth

€39/mo

Up to 5 protected domains
Up to 5,000 requests
Usage statistics

Advanced

€200/mo

Up to 50 domains, 50,000 requests
Automatic risk detection and smart difficulty scaling
Real-time risk intelligence
Dedicated EU data centers
99.9% guaranteed uptime
User management and online support

Enterprise

Custom

Unlimited domains and requests
Professional analytics and reporting
App-specific difficulty controls
Single sign-on, access control, audit logs
Self-hosted endpoint option
Software engineer support and procurement assistance

Key Features

touch_app

One click, no puzzles

A proof-of-work calculation runs in the background so users never label crosswalks or decode warped text.

accessibility_new

WCAG 2.2 AA certified

Fully accessible for users relying on screen readers or keyboard navigation, an area where image CAPTCHAs consistently fail.

gpp_good

GDPR compliant

Built as a privacy-first solution, with dedicated EU-only data centers available on higher tiers.

cookie

No cookies or trackers

Nothing follows your visitors around, which sidesteps the consent-banner problems that come with Google's reCAPTCHA.

security

Enterprise-grade security

Smart difficulty scaling and real-time risk intelligence step up the challenge for suspicious traffic on Advanced and above.

extension

Broad integrations

Official support for WordPress, Magento, React, Vue, and Angular covers most common stacks out of the box.

Who Should Use It

Sites that need bot protection without friction. Contact forms, signups, and comment sections all benefit from a click-only challenge that does not stall conversions.

Organizations that answer to privacy regulators. If you serve EU users and want to avoid Google's data collection, the no-cookie, GDPR-compliant model is a clean answer.

Developers who care about accessibility. The WCAG 2.2 AA certification means you can drop it in without excluding users who rely on assistive tech.

Limitations

The free tier is capped at 1,000 requests per month and is non-commercial only. Any real business needs a paid plan.
The Starter plan at €9 is thin. You get the core CAPTCHA but no usage statistics and only a single domain.
The genuinely smart features, automatic risk detection and real-time intelligence, only appear on the €200 Advanced tier, which is a steep jump for small businesses.
Request-based pricing means a spike in legitimate traffic can push you into a higher bracket, so budget with headroom.
Proof-of-work challenges use client CPU cycles, which can be slightly slower on old or low-power devices compared with an instant checkbox.