WordPress Plugin
WordPress CAPTCHA. Invisible & Effortless.
The invisible WordPress CAPTCHA plugin – effortless to install, effortless for your visitors. The definitive reCAPTCHA alternative for WordPress: protect your forms, logins and registrations without annoying users or slowing your site. Available on the official WordPress.org plugin directory.
Already in production
Publishing platforms, fintech and national charities across Europe already run TrustSig on their forms.
PublitPrint-on-demand and digital book distribution for publishers.Publishing · Sweden
LEI SystemOfficial Legal Entity Identifier registration agent.Fintech · Estonia
Disability Sport WalesNational charity for inclusive and disability sport.Charity · Wales
Everything protected. From the moment you install.
CAPTCHAs shown to your visitors
Invisible by design
What your WordPress admin looks like after installing.
No configuration screen. No API key prompt. Just an active dashboard and your site protected.
Up and running in 60 seconds.
No account. No API keys. No configuration.
Install from WordPress.org
Get TrustSig from the official WordPress.org plugin directory. No signup required.
View on WordPress.orgAdd to WordPress
Or, in your WP admin, search and install directly:
Click Activate
Hit the Activate Plugin button. That's it.
All your forms are now protected. Nothing else to do.
04 Platform Comparison
How TrustSig compares.
Most captcha tools challenge your users with image puzzles, click boxes, and math problems. TrustSig is invisible by design, so visitors face zero friction and never see a challenge.
| Capability | TrustSigEU hosted · No cookies · Invisible | CF Turnstile | reCAPTCHA | hCaptcha |
|---|---|---|---|---|
| User friction | None (invisible) | Minimal puzzle | Puzzle / click | Puzzle / click |
| EU-based | Yes (EU) | Yes (EU) | No (US) | No (US) |
| GDPR-native | Yes | Yes | Partial | No |
| Bypass-resistant | Hardware-level | Easily bypassable | Moderate | Easily bypassed |
| Uses cookies | No | No | Yes | Yes |
| All features in free tier | Yes | No | No | Limited |
| Monetises user behaviour | Never | Never | Partially | Yes |
Comparison based on publicly available documentation, June 2026.
Comparison based on publicly available documentation, June 2026.
Start free. Stay free until you grow.
No card. EU-hosted on every tier.
Starter
For personal projects and sites getting started with bot protection.
- 50,000 requests / month2 domains
- Full threat protection suite
- Bot farm blocking
- No CAPTCHAs for visitors
- Community support
Growth
For growing businesses with moderate traffic and multiple properties.
- 300,000 requests / month20 domains • €5 per 100k extra reqs
- Full threat protection suite
- Bot farm blocking
- No CAPTCHAs for visitors
- Email support
Business
For established companies needing high-volume protection and priority SLA.
- 750,000 requests / month25 domains • €5 per 100k extra reqs
- Full threat protection suite
- Bot farm blocking
- No CAPTCHAs for visitors
- Priority support
Enterprise: unlimited volume · SLAs · on-prem · dedicated support.
One check is a single verification request: a page view, form submit, or login attempt that TrustSig evaluates. You only spend a check when traffic actually hits a protected surface, so bot floods do not quietly drain your quota.
Frequently asked.
No. TrustSig is a threat protection platform, not a CAPTCHA tool. We eliminate the need for CAPTCHAs entirely by providing deterministic signals that allow your infrastructure to block bot traffic with absolute confidence. Your visitors experience nothing. No puzzles, no checkboxes, no friction.
Extremely simple. For free tier usage, you just need to upload the plugin and activate it. No signup, API keys, or complex configuration required. Your forms and login pages are protected instantly upon activation.
Existing CAPTCHA solutions can be defeated in seconds by commercial bot farms, a well-documented industry reality. TrustSig operates at the hardware attestation and traffic behaviour layer, not the challenge layer. We mathematically verify the rendering environment via deterministic hardware cryptography, making circumvention fundamentally harder and economically unviable.
Minimal. A single script tag for web, or a lightweight SDK for iOS and Android. TrustSig operates out-of-band, meaning zero blocking impact on your application startup or user latency. Most teams are fully protected in under an hour.
Yes. Add the client SDK to your frontend and verify the token on your server, and your existing forms and logins keep working. No reverse proxy, no rewrite, no migration project. Visitors simply stop seeing puzzles.
Yes. The Starter tier covers 50,000 requests a month with the full threat engine and no credit card. Paid plans add volume and domains, but every tier ships the same protection.
Stop bots. Not your users.
Free. No card. Live in 5 minutes.
Drops in with one snippet, rip it out anytime.