The reCAPTCHA Alternative. That doesn't send your users to Google.

reCAPTCHA alternative, side by side

Both stop bots. Only one does it without a US data transfer, a cookie banner, and an image grid in front of your users.

reCAPTCHA costs you a consent banner and a conversion step

Every item here is structural, not something you can tune in the console.

Replace reCAPTCHA in 5 minutes

Remove the reCAPTCHA script and the grecaptcha call, then add the scan and one verify call. Two npm packages, no infrastructure changes.

1. 01
   Frontend: replace the widget

   // Before: reCAPTCHA
   // <script src="https://www.google.com/recaptcha/api.js" />
   // const token = await grecaptcha.execute(SITE_KEY, { action: "submit" })
   
   // After: TrustSig (no widget, nothing rendered)
   import { useTrustSig } from "@trustsig/react"
   
   function ActionForm() {
     const { getResponse } = useTrustSig()
   
     const handleSubmit = async () => {
       const response = await getResponse()
       await fetch("/api/action", {
         headers: { "X-TrustSig-Response": response?.token || "" },
       })
     }
   }

2. 02
   Backend: replace the verify call

   // Before: reCAPTCHA (round-trip to Google)
   // await fetch("https://www.google.com/recaptcha/api/siteverify", ...)
   
   // After: TrustSig (one verify call at the edge)
   import { TrustSig } from "@trustsig/server"
   
   const ts = new TrustSig({ secretKey: process.env.TRUSTSIG_SECRET_KEY })
   
   app.post("/api/action", async (req, res) => {
     const token = req.headers["x-trustsig-response"]
   
     const result = await ts.verifyRemote(token)
   
     if (result.action !== "ALLOW")
       return res.status(403).json({ error: "Blocked" })
   })

reCAPTCHA migration questions