Just the bot protection. Not a whole security suite to adopt.
Myra is a broad managed WAF, CDN and DDoS suite. If all you need is invisible bot and abuse protection, TrustSig does exactly that — two npm packages, no infrastructure to re-platform. EU-hosted, free tier.
50,000 requests/month free. Complete threat engine. No sales call.
Already in production
Publishing platforms, fintech and national charities across Europe already run TrustSig on their forms.
TrustSig vs Myra Security
Myra is a managed security suite. TrustSig is a focused bot-protection layer you add without re-platforming your edge.
| Capability | TrustSig | Myra Security |
|---|---|---|
| Scope | Focused: invisible bot & abuse defense | Broad WAF / CDN / DDoS suite |
| How you start | Self-serve, free, in minutes | Managed onboarding / sales process |
| Integration weight | Two npm packages, no infra change | Route traffic through managed edge |
| User friction | None — fully invisible | Challenge pages on risk |
| Detection method | Hardware-level deterministic signals | Network / WAF rule based |
| Data residency | EU only (Germany) | EU (Germany) |
| Pricing | Public, transparent, free tier | Quote-based managed contracts |
| Server verification | Local — sub-millisecond, no network call | Managed edge decisioning |
Why teams pick TrustSig over Myra
Myra is a strong German security suite. The mismatch is scope and adoption — re-platforming your edge is a lot when you only need bot protection.
You only need bot protection
Adopting a managed WAF/CDN suite to stop form spam and abuse is heavy. TrustSig is the focused piece: invisible bot and abuse defense, nothing else to operate.
No re-platforming
Myra works by routing traffic through its managed edge. TrustSig is two npm packages and a local verify — your infrastructure does not change.
Self-serve and free to start
No managed onboarding or sales motion. Create an account, integrate, ship — the free tier needs no card.
Truly invisible
No challenge or interstitial pages on risk. Real users never see anything; bots are stopped silently.
Single-jurisdiction residency
Both Myra and TrustSig are hosted in Germany; TrustSig is additionally built in Estonia. Both EU, both single-jurisdiction — TrustSig is the independent, focused option.
Transparent pricing
Public pricing with a free tier that includes the complete deterministic engine, instead of a quote-based managed contract.
Add TrustSig in minutes
Nothing to route through a managed edge. Add the invisible scan on the frontend and a local verify on the server. Two npm packages, no infrastructure changes.
- Frontend — invisible scan
import { useTrustSig } from "@trustsig/react" function ActionForm() { const { scan } = useTrustSig() const handleSubmit = async () => { const response = await scan() await fetch("/api/action", { headers: { "X-TrustSig-Response": response?.token || "" }, }) } } - Backend — local verify
import { TrustSig } from "@trustsig/server" const ts = new TrustSig({ secretKey: process.env.TRUSTSIG_SECRET_KEY }) app.post("/api/action", async (req, res) => { const token = req.headers["x-trustsig-response"] // decided locally — no managed edge in the path const result = ts.verifyLocal(token) if (result.action === "BLOCK") return res.status(403).json({ error: "Blocked" }) })
Start free. Stay free until you grow.
No card. EU-hosted on every tier.
Starter
For personal projects and sites getting started with bot protection.
- 50,000 requests / month2 domains
- Full threat protection suite
- Bot farm blocking
- No CAPTCHAs for visitors
- Community support
Growth
For growing businesses with moderate traffic and multiple properties.
- 300,000 requests / month20 domains • €5 per 100k extra reqs
- Full threat protection suite
- Bot farm blocking
- No CAPTCHAs for visitors
- Email support
Business
For established companies needing high-volume protection and priority SLA.
- 750,000 requests / month25 domains • €5 per 100k extra reqs
- Full threat protection suite
- Bot farm blocking
- No CAPTCHAs for visitors
- Priority support
Enterprise: unlimited volume · SLAs · on-prem · dedicated support.
One check is a single verification request: a page view, form submit, or login attempt that TrustSig evaluates. You only spend a check when traffic actually hits a protected surface, so bot floods do not quietly drain your quota.
Myra Security alternative questions
No, and deliberately so. TrustSig is focused invisible bot and abuse protection. If you only need to stop bots, fake signups and form spam, you get exactly that without adopting a managed edge suite.
No. There is no managed edge in the request path. The frontend SDK collects a signal and your server verifies it locally — your infrastructure and CDN stay exactly as they are.
Yes. TrustSig is self-serve with a free tier — the complete threat engine and 50,000 requests/month, no credit card and no onboarding call.
Only in Germany. TrustSig is cookieless, stores no PII, and is GDPR Article 25 by design.
The complete deterministic threat engine and 50,000 requests per month, with no credit card.
Just bot protection. Nothing to re-platform.
Start free in minutes. Focused, self-serve, EU-hosted. No credit card.











