Bot protection without captchas
Bots get a silent no.
A WebAssembly verifier scores every session in under 200ms. Humans pass with no captcha. Bots get a poisoned token your backend quietly rejects.
Built to say no quietly
WebAssembly core
A Rust to WASM core fingerprints 190+ signals, runs the VM, solves the proof-of-work and collects automation + behaviour probes.
Zero friction for humans
Humans pass untouched. No captcha, no puzzles - a signed token you trust offline.
Silent rejection
Bots get a poisoned token: a 200 OK indistinguishable from success. They never learn they were caught.
Seven-dimension scoring
Every verdict weighs fingerprinting (190+ signals), TLS & HTTP handshakes, automation frameworks, behavioural analysis, proof-of-work and honeypots.
Offline verification
No callback on the happy path - your backend verifies the token with the site secret.
Live analyzer
Run the actual engine against your own browser on instantblock.eu.
Challenge, verify, verdict
Challenge
The loader pulls a nonce, a proof-of-work target and a per-session VM, wrapped in an opaque binary.
Verify
Fingerprinting, automation detection and behaviour analysis run against the live session.
Verdict
Accept means a signed token. Reject means a poisoned token.
import { runChallenge } from '@instantblock/loader';
const { token } = await runChallenge({ sitekey });
// backend: verify offline with your secret
const claims = verifyToken(token, SECRET);Pay for volume, not protection
Free
- 1 site
- 25k verdicts/mo
- 7-day retention
- Community support
Pro
- 10 sites
- 2M verdicts/mo
- 90-day retention
- Editable weights & thresholds
- Email support
Scale
- Unlimited sites
- Volume pricing
- 1-year retention + export
- TLS training-data export
- Priority SLA
Detection is never paywalled - every plan runs all seven dimensions. You pay for volume, not protection.
We run it on our own front door
InstantBlock is built by the maker of InstantNode, and it protects InstantNode's own login and signup in production. When you sign in to our panel, this exact verifier is what checks your session - real dogfooding, not a demo.
Protect your site in minutes
Drop in the loader, verify tokens with your secret - the free plan covers your first site.