WordPress plugin
Install the plugin. The spam stops.
Bots stop at every form on your site, and real visitors never see a puzzle.
Already in production
Publishing platforms, fintech and national charities across Europe already run TrustSig on their forms.
PublitPrint-on-demand and digital book distribution for publishers.Publishing · Sweden
LEI SystemOfficial Legal Entity Identifier registration agent.Fintech · Estonia
Disability Sport WalesNational charity for inclusive and disability sport.Charity · Wales
Nothing for your visitors to solve.
CAPTCHAs your visitors solve
Real people go straight through, on the first try.
Covered the moment you activate
- Login
- Registration
- Password reset
- Comments
- WooCommerce checkout
- Contact Form 7
- WPForms
- Elementor Pro
Anything else on the site is found on its own.
Your dashboard counts what it stopped.
Every form it covers is listed there, core and plugin alike.
Up and running in 60 seconds.
No account, no settings screen, nothing to paste.
Install from WordPress.org
Get TrustSig from the official WordPress.org plugin directory.
View on WordPress.orgAdd to WordPress
Or, in your WP admin, search and install directly:
Click Activate
Hit the Activate Plugin button.
All your forms are now protected.
04 Platform Comparison
Cookieless, EU hosted, and it tells you why.
The other three in this table set a cookie on your visitor's device.
| Capability | TrustSigEU hosted · No cookies · Invisible | Fingerprint | reCAPTCHA | hCaptcha |
|---|---|---|---|---|
| User friction | None (invisible) | None (invisible) | Puzzle / click | Puzzle / click |
| EU-based | Yes (EU) | No (US) | No (US) | No (US) |
| GDPR-native | Yes | Partial | Partial | No |
| Bypass-resistant | Hardware-level | Fingerprint-level | Moderate | Easily bypassed |
| Uses cookies | No | Yes | Yes | Yes |
| Full detection on free tier | Yes | No | No | Limited |
| Monetises user behaviour | Never | Never | Partially | Yes |
| Tells you why | Reason codes | Signal flags | Score only | Pass / fail |
| Persistent device id | Yes | Yes | No | No |
Comparison based on publicly available documentation, August 2026.
Comparison based on publicly available documentation, August 2026.
Start free. Stay free until you grow.
EU-hosted on every tier.
Free
For personal projects and sites getting started with bot protection.
- 5,000 requests / month2 domains • 2 projects • 30-day retention
- Full Signal Coverage
- Device Intelligence
- Reasoned Risk Scoring
- No CAPTCHA for real users
- Community support
Scout
For growing businesses with moderate traffic and multiple properties.
- 30,000 requests / month10 domains • 5 projects • 90-day retention • €2 per extra 1,000
- Everything in Free
- Confidence Scoring
- Verified Bot Detection
- Email support
Scale
For established companies needing high-volume protection and priority SLA.
- 120,000 requests / month30 domains • 15 projects • 365-day retention • €1 per extra 1,000
- Everything in Scout
- Custom Context
- Data Export
- Full Data Control
- Priority support
Enterprise: unlimited volume · SLAs · on-prem · dedicated support.
Frequently asked.
The verdict, plus the evidence behind it: a 0 to 100 risk grade, coarse reason codes, a project-scoped device id, and whether the request arrived over a VPN, Tor, a datacenter or a mobile carrier. Gate on the verdict, log the rest, or set your own threshold per surface.
TrustSig identifies the device, not the person on it. The id is derived from hardware and scoped to your project alone, so the same machine returns a different id to every customer. Nothing follows a visitor from your site to anyone else's. No cookie is set, and no name or email reaches TrustSig.
No. A CAPTCHA puts the work on the visitor. TrustSig scores the device and the request instead, then hands your backend a signed verdict to enforce.
Upload it and activate it. The free tier needs no signup and no key, and your forms, login and comments are covered from that moment.
Commercial farms solve CAPTCHAs for a fraction of a cent, which is why the challenge layer stopped being a defence. TrustSig scores the rendering environment instead: hardware attestation, timing and network origin. It raises the attacker's cost rather than ending the problem.
A single script tag, or the WordPress plugin. Scoring runs out of band, so nothing blocks your page load and nobody waits on a verdict. Most teams are protected in under an hour.
Yes. Add the client SDK to your frontend and verify the token on your server, and your existing forms and logins keep working. No reverse proxy, no rewrite, no migration project.
Yes. Free covers 5,000 requests a month, with the same detection library and the same device history the paid tiers get. Scout and Scale add volume, domains, retention, confidence scoring and verified bot detection.
Score your next request with the evidence behind it.
The free tier covers 5,000 requests a month, and you can pull the script back out the same day.
Tell us what you need to protect.
Describe the abuse you are seeing, and we come back with what TrustSig would do about it.
- A reply from an engineer, not a sales sequence
- EU-hosted, nothing leaves the region
- Every detection on every tier