cap is a self-hosted and privacy-first captcha alternative that doesn't force your users to click on traffic lights. there are no puzzles, no tracking, and no third parties watching your visitors.
instead, the user's browser quietly solves a few small challenges in the background, such as gpu-resistant proof-of-work and instrumentation, which can also be configured to stop autonomous AI agents from using up your resources.
it has no dependencies by default, is 200x smaller than hCaptcha, and you can run it with docker, on workers or on railway. it's already used in production by large companies like bunny.net and adguard.
cap is licensed under apache 2.0.