Skip to content

Privacy-first CAPTCHA

GDPR-compliant CAPTCHA that protects your site from bots with a privacy-first approach. No cookies, made and hosted in Germany.

Click to Solve

Users click a simple checkbox to verify. Quick and familiar interaction pattern.

Demo: Login Form

How it works?

Stop bots in 3 simple steps

login.html
 1  <script src=
 2    "https://challenge
 3      .byebot.de
 4      /ray/widget.js"
 5  ></script>
 6
 7  <form>
 8    <input name="user">
 9    <input name="pass">
10    <div
11      class="captcha-widget"
12      sitekey="f31520..."
13    ></div>
14    <button>Submit</button>
15  </form>

1. Add the Widget

Add a script tag and a div to your form. Works with any framework — no build step required.

server.js
 1  // Validate the token
 2  const res = await fetch(
 3    "https://challenge
 4      .byebot.de
 5      /validate_token",
 6    {
 7      method: "POST",
 8      headers: {
 9        "Content-Type":
10          "application/json"
11      },
12      body: JSON.stringify({
13        api_key: KEY,
14        token: token
15      })
16    }
17  );

2. Validate Server-Side

Send the token to our API from your backend. One POST request confirms the user is human.

Live Preview
Log in

3. You're Protected

Real users breeze through your forms while bots get blocked automatically.

Add my website

7-day free trial

Privacy-first protection with the controls you actually need

Built for teams that want strong bot protection without compromising user privacy.

Clear Analytics

See validations, traffic patterns, and bot activity in real time, so you can understand how ByeBot is protecting your site.

Powerful Features

Five modes, configurable proof-of-work and TTP settings, IP whitelisting and blacklisting, rate limiting, adjustable difficulty levels for interactive challenges, and country blocking—all via a single dashboard.

Advanced Bot Protection

Layered bot protection uses proof-of-work, behavioral signals, and optional interactive challenges to distinguish real users from automated traffic.

Integrations

Works with everything

Official SDKs and plugins for popular frameworks. Get up and running in minutes.

14+
Frameworks
5min
Setup

Don't see your framework? Use our AI Integration Generator to create one for any platform in minutes.

Try free for 7 days

Simple pricing

No hidden fees. No surprises. Just honest pricing.

Monthly Annual 2 months free
Monthly validations10k
10k 50k 100k
Pro
19€ /mo

Billed monthly

For projects and companies of any size

Up to 10k validations/month

  • 10 sites
  • 10 domains per site
  • 365 days stats retention
  • All features included
7-day free trial
Start Free Trial
Enterprise

Custom solutions for large organizations

Custom

Unlimited scale

For large teams

Talk to sales

Frequently Asked Questions

Everything you need to know about ByeBot. Can't find the answer you're looking for? Reach out to us.

ByeBot is a GDPR-compliant, privacy-first CAPTCHA service that helps websites stop bots with proof-of-work challenges and modern bot protection. Made and hosted in Germany.
ByeBot uses a combination of proof-of-work, time-to-pass, behavioral signals, interactive challenges, rate limiting, blacklisting, whitelisting, and geoblocking to distinguish real users from bots while keeping the service privacy-first.
Yes, fully. ByeBot is designed from the ground up with European data protection in mind. When user-related data is stored, only temporarily as a hash.
ByeBot offers five modes — you choose the balance between security and UX:
  • Click — Users click a checkbox to verify, which then runs the challenge in the background.
  • Auto — The challenge is solved automatically in the background without any user interaction.
  • Interactive — An interactive challenge that provides the highest level of bot protection.
  • Invisible — Same as Auto, but completely invisible to the user.
  • Demo — A sandbox mode for testing and previewing the widget. Provides no bot protection.
Just add a script tag and a div with your site key — it's two lines of HTML. We provide guides for 10+ frameworks including React, Vue, Angular, Django, Express, Go, and more.
Yes! Every new account starts with a 7-day free trial of the Pro plan. You get full access to all features with 10,000 monthly validations. A payment method is required to start the trial, but you won't be charged until the trial ends. You can cancel anytime during the trial.
A validation is counted each time ByeBot evaluates a visitor request, whether the request is allowed or blocked. The monthly limit is measured by the total number of these checks across all sites during the current billing month.
If you exceed your validation limit, all your sites are put into demo mode. As soon as validations are available again, your sites automatically return to their original state.
In Demo mode, the CAPTCHA widget still appears and functions normally, but it does not perform any bot detection. This mode is intended for testing and previewing your integration.
All data is stored and processed exclusively on servers in Germany. We do not transfer any data to third parties or outside the EU.
Yes. ByeBot works on all modern browsers and devices. We also provide native SDKs for React Native, Android, and iOS.