Sentinel Overview

Sentinel is our self-hosted bot-defense suite. It pairs an embeddable, privacy-friendly captcha widget with server-side verification and a live IP reputation engine.

The pieces

• Widget — a self-contained captcha you drop into any form. No build step.
• Verify — a server-to-server call that confirms a widget token before you trust a submission.
• IP reputation — score any IP address for proxy, VPN, Tor, datacenter, bot and abuser signals.

How a request flows

1. A visitor solves the widget on your form, which mints a short-lived token.
2. Your form submits that token to your backend.
3. Your backend calls POST /sentinel/siteverify with your Secret Key to confirm the token and read the risk outcome.
4. You allow, challenge, or block based on the outcome.

Getting set up

Create your Sentinel sites from the Sentinel → Sites area of the Lab. Each site has a public Site Key (renders the widget) and a private Secret Key (verifies submissions, shown once when you create the site). The captcha is free on every plan.