Protect your Java applications from automated threats. High-performance, scalable bot mitigation with zero friction.
No credit card required. Free forever tier.
import { useTrustSig } from '@trustsig/react'; const { scan } = useTrustSig(); const { token } = await scan();
{
is_bot: false,
score: 0,
action: "ALLOW",
req_id: "a3F9..c21B",
}Human verifiedRun the same check your visitors get. TrustSig reads 20+ device signals and returns a signed verdict in around 20ms. No CAPTCHA, no cookies.
import { useTrustSig } from '@trustsig/react'; const { scan } = useTrustSig(); const { token } = await scan();
const { scan } = useTrustSig(); const { token } = await scan();
02 Platform Comparison
Most captcha tools challenge your users with image puzzles, click boxes, and math problems. TrustSig is invisible by design, so visitors face zero friction and never see a challenge.
| Capability | TrustSigEU hosted · No cookies · Invisible | CF Turnstile | reCAPTCHA | hCaptcha |
|---|---|---|---|---|
| User friction | None (invisible) | Minimal puzzle | Puzzle / click | Puzzle / click |
| EU-based | Yes (EU) | Yes (EU) | No (US) | No (US) |
| GDPR-native | Yes | Yes | Partial | No |
| Bypass-resistant | Hardware-level | Easily bypassable | Moderate | Easily bypassed |
| Uses cookies | No | No | Yes | Yes |
| All features in free tier | Yes | No | No | Limited |
| Monetises user behaviour | Never | Never | Partially | Yes |
Comparison based on publicly available documentation, June 2026.
Comparison based on publicly available documentation, June 2026.
No cookies, no tracking pixels. Built for enterprise compliance (GDPR, SOC2).
Seamless user experience. No puzzles or checkboxes for real users.
Advanced hardware signal extraction to catch even the most sophisticated bots.
No card. EU-hosted on every tier.
For personal projects and sites getting started with bot protection.
For growing businesses with moderate traffic and multiple properties.
For established companies needing high-volume protection and priority SLA.
Enterprise: unlimited volume · SLAs · on-prem · dedicated support.
One check is a single verification request: a page view, form submit, or login attempt that TrustSig evaluates. You only spend a check when traffic actually hits a protected surface, so bot floods do not quietly drain your quota.
The core team behind TrustSig brings a decade of national cyber defence experience to enterprise bot protection.
Former Cyber Defence Exercise Manager at NATO CCDCOE, architect of Locked Shields and Crossed Swords, the world's largest live-fire cyber exercises. At TrustSig, he applies that same operational grade to stopping automated attacks.
NATO CCDCOE, CybExer Technologies, 10+ yrs cyber defence
The architectural force behind TrustSig's core signal processing engine and hardware attestation layer. Leads all platform engineering from protocol design to SDK delivery.
Core Engine Architect, Hardware Attestation
Leads security governance and operations across all TrustSig layers, ensuring each layer remains sound, secure and compliant.
CISSP, CISA, CSSLP, ISO27001 Senior LA
Reach out for help integrating TrustSig with your Spring Boot architecture.