Use case guides

Step-by-step playbooks for actual situations.

Migrate from reCAPTCHA to Cloudflare Turnstile in 2026

Drop in Turnstile, keep your server code, ship the privacy win in one afternoon. Step by step with the gotchas.

Block Comment Spam Without Setting a Single Cookie

GDPR-friendly stack: a proof-of-work CAPTCHA plus honeypots plus rate limiting. Real numbers on what each layer catches.

Pick a CAPTCHA for High-Value Account Signups

When a single fake account costs real money (paid signups, credit grants, fintech KYC), the calculus changes. Arkose vs reCAPTCHA Enterprise vs layered.

Self-Host a CAPTCHA for an Internal or Privacy-Critical Tool

When sending visitor data to a third party is unacceptable (regulated industry, internal tools, paranoid security teams), self-hosting is the only acceptable option. Pick between ALTCHA, mCaptcha, and Friendly Captcha Business.