hCaptcha

What hCaptcha does

hCaptcha, operated by Intuition Machines, Inc. and headquartered in San Francisco, is a privacy-first bot detection and abuse-prevention platform that evolved from a CAPTCHA service into a broader trust-and-safety offering. Its core engine combines machine-learning models — most notably Private Learning (zero-PII detection with custom risk models and real-time adaptive learning) and Advanced Threat Signatures (clustering of attackers across thousands of IPs and devices) — to identify automated attacks, credential stuffing, account takeovers, synthetic identities, and transaction fraud. The product surface spans Bot Detection, User Journeys, Fraud Protection, Account Defense, pull-based SMS MFA, and Private Learning, addressing use cases from account takeover and multi-accounting to incentive abuse and payment fraud. The company holds SOC 2 Type II, ISO 27001, ISO 27701, and PCI DSS certifications and is designed to comply with GDPR, CCPA, LGPD, PIPL, and HIPAA by collecting no personal data.

The company distributes through a hybrid go-to-market: a self-serve product-led motion for the free Publisher tier and Pro tier (with Try-For-Free onboarding), combined with enterprise field sales for the Enterprise tier that includes SAML SSO, custom SLAs, advanced reporting, and 24/7 SOC coverage. Pricing is quote-based for Enterprise on multi-year contracts, while Pro is offered as a subscription. Hundreds of plugins and native integrations — plus a documented two-line migration path from Google reCAPTCHA — anchor the developer adoption loop, and first-party hosting (hcaptcha.yourdomain.com) supports OEM and telecom deployments.

hCaptcha serves a diversified enterprise base including e-commerce (Shopify), cloud and technology (Cloudflare, Brave), payment platforms (claimed 60%+ share among major payment processors), telecom operators, privacy-focused messaging/email/VPN services, gaming companies, and government agencies across the Americas and Europe. The platform claims to protect hundreds of millions of people globally and operates in every country. The company was founded in 2018 and operates with 11-50 employees, suggesting high revenue-per-employee leverage. Public funding history is thin, with a single 2018 seed investment from Kenetic on record, indicating the business has primarily grown without external dilution or through undisclosed financing rounds.

Name

hCaptcha

Legal name

Intuition Machines, Inc.

Website

https://hCaptcha.com

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

11–50 employees

Short description

hCaptcha, operated by Intuition Machines, Inc., is a privacy-first bot detection and abuse-prevention platform serving thousands of enterprises across e-commerce, payments, cloud, telecom, government, and privacy-focused services. Its ML-driven engine delivers Zero-PII CAPTCHA, account defense, fraud protection, and MFA.

Ownership category

akta.pro rank

Product category

Bot Management and Fraud Protection Software

NAICS

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services (518)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)

akta.pro secondary industry

Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

Keywords

• Bot detection services
• Fraud protection platform
• Account takeover prevention
• CAPTCHA verification
• Privacy-preserving security

Headquarters

HQ city

San Francisco

HQ country

United States

HQ region

North America

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations

Revenue model

1. CAPTCHA and Bot Detection Services: Subscription-based SaaS revenue from three tiers: Publisher (free), Pro (frictionless user experience), and Enterprise (world-class bot and abuse protection). Enterprise includes advanced features, SLAs, and custom terms.
2. Enterprise Add-on Services: Additional enterprise features including custom threat models, advanced reporting, SAML SSO, sophisticated RBAC access, and managed SOC coverage services.

Pricing tiers

Go-to-market motion2 records

Distribution channels4 records

Marketing channels4 records

Core offering

hCaptcha is a privacy-first SaaS CAPTCHA and bot management platform that protects websites and applications from automated bots, human abuse, account takeover, credential stuffing, and transaction fraud. It is offered in three subscription tiers — Publisher (free), Pro (self-serve frictionless experience), and Enterprise (world-class bot and abuse protection with SLAs, SAML SSO, custom threat models, and 24/7 SOC coverage) — and is delivered via API, SDKs, and hundreds of plugins across web, iOS, and Android.

Product overview

hCaptcha is a privacy-first bot management and abuse protection platform consisting of three subscription tiers (Publisher/free, Pro, and Enterprise) built around a core CAPTCHA and bot detection engine. The Enterprise tier serves as the flagship platform offering comprehensive protection including Bot Detection, User Journeys, Fraud Protection, MFA, Account Defense, and Private Learning features. The product portfolio addresses specific use cases including Account Takeover, Multi-Accounting, Account Sharing, Synthetic Identities, Incentive Abuse, and Transaction Fraud. Key AI/ML-powered features include Advanced Threat Signatures for clustering attacker patterns and Risk Insights for signal enrichment. The platform differentiates through Zero PII capabilities, privacy-preserving ML, and compatibility with privacy browsers like Brave and tools like Tor.

Differentiator

Problem solved

Functional benefit

Products and services

• hCaptcha Enterprise

Quantifiable outcome

• 99.9% passive modes - challenge less than 0.1% of legitimate users
• +4 more outcomes

Named customers6 records

Segments7 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration5 records

AI capability4 records

Feature8 records

Partnerships

Two partnerships are on record, tiered core.

• OktacoreTechnology or IntegrationSAML SSO integration with Okta identity provider for enterprise authentication and access management.
• Azure AD (Microsoft)coreTechnology or IntegrationSAML SSO integration with Azure Active Directory for enterprise authentication and access management.

Scale indicators6 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Cloudflare Turnstile: Cloudflare's free, privacy-first CAPTCHA alternative that competes head-to-head on frictionless user experience; notable because Cloudflare is also an hCaptcha Enterprise customer, creating a competitive overlap.
• HUMAN Security: Application protection platform (formed via PerimeterX and White Ops merger) offering bot mitigation, account takeover defense and fraud protection — overlapping heavily with hCaptcha's Enterprise tier.
• DataDome: AI-driven bot management and online fraud protection focused on e-commerce and classifieds; competes with hCaptcha Enterprise on fraud protection and bot detection SLAs.
• Kasada: Bot management vendor specializing in advanced persistent bot and credential-stuffing defense; competes directly with hCaptcha's Account Defense and Bot Detection capabilities.
• Arkose Labs: Bot management and account security platform combining CAPTCHA challenges with risk analytics; directly comparable to hCaptcha's Bot Detection and Account Defense offerings.
• Google reCAPTCHA: The dominant CAPTCHA service bundled into the Google ecosystem; the primary competitor hCaptcha explicitly targets with privacy-preserving positioning and a two-line-code switch path.

Broad incumbents

• Akamai Bot Manager: Enterprise bot management offering within Akamai's broader application security and CDN portfolio; overlaps with hCaptcha at Global 2000 accounts but bundled into a much larger security suite.
• F5 Shape Security: F5's fraud and abuse prevention suite (post-Shape Security acquisition) targeting credential stuffing and ATO at large financial institutions; competes with hCaptcha's enterprise fraud and ATO modules.
• Imperva Bot Management: Bot protection within Imperva's application security platform (now part of Thales); competes for the same enterprise RFPs as hCaptcha Enterprise, particularly in financial services.

Emerging players

• GeeTest: AI-based CAPTCHA and bot management vendor with strong presence in Asia; comparable product surface area to hCaptcha Pro and a meaningful alternative in regional markets.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks5 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/hcaptcha

Compliance8 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds1 record

Investors1 record

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about hCaptcha