← all providers
Proof-of-Work · Invisible

mCaptcha

mCaptcha community · Self-hosted (any) · since 2021-08

AGPL proof-of-work CAPTCHA designed to defend against DDoS at the application layer, not just spam. Difficulty auto-adjusts to current load. Rust + Postgres stack, used by Codeberg and several Fediverse instances.

Open sourceSelf-hostableFree
Free quota
Unlimited (self-host only)
Pricing
Free, self-host required

// pros

  • + Built for actual DDoS scenarios, not just forms
  • + Fully self-hosted
  • + Adapts to attacks live

// cons

  • Requires running Postgres + your own infra
  • AGPL is not enterprise-friendly
  • Limited library ecosystem outside the core

// highlights

  • AGPL-3.0 license
  • Auto difficulty adjustment under load
  • Rust core
  • Designed for DDoS mitigation
  • Used by Codeberg

// specs

Pricing
free
Open source
Yes
Self-host
Yes
Audited
Not yet
HQ
Self-hosted (any)
Since
2021-08
License
AGPL-3.0
Frameworks
7 supported