hCaptcha Pro adds adaptive protection, deeper customization, and shared account management for growing teams.
Protect
Minimize challenges for real users and match hCaptcha to your product experience.
Operate
Manage shared account resources with your team.
Pro includes a two-week free trial with no credit card required. See rates and billing for plan details.
This is the default mode for newly created Pro sitekeys. No configuration is required to enable it unless you are upgrading from a Basic plan, in which case you can visit your sitekey in the dashboard and set its Behavior to 99.9% Passive.
"99.9% Passive" mode will selectively challenge users based on an evaluation derived from thousands of factors.
The system attempts to minimize challenges to real people to less than 0.1% of users, while still increasing the costs of an attack in virtually all cases.
Whether a visual challenge is presented or not, many other security controls arestill operating on every request to make attempts to bypass it more costly, including advanced dynamic proofs of work.
Note that 99.9% Passive mode is describing the behavior of the evaluation, whether it comes from a user clicking on the checkbox, binding to your Submit button using e.g. react-hcaptcha, or you calling hcaptcha.execute() programmatically.
If you would like the appearance of the checkbox to be invisible, for example with the evaluation triggered by a user clicking on your button, simply set theme to "invisible". Detailed docs are here.
hCaptcha Pro is easily customizable to match your site or app's color scheme.
Simply generate a theme config via our visual theme configurator, then make sure it is passed in at initialization.
The Pro Account Sharing feature allows Pro subscribers to invite team members to manage their account, allowing delegates to help manage sitekeys and settings without sharing login credentials.
This feature is enabled by default for all Pro accounts.
user+alias@gmail.com if user@gmail.com is already a member or has a pending invite.If you do not see the option to invite users, make sure you have added a valid credit card to your account.
To add a user to your Pro account:
The experience depends on whether the invitee is a new or existing user:
If the invited email is not associated with an existing account:
If the invited email already belongs to a registered user:
The owner may revoke access privileges from team members at any time.
If the primary owner account is demoted (e.g. subscription cancellation or payment failure):
Use Country access to allow or block traffic from selected countries for a sitekey. This feature is in Beta.
You can also configure Country access when creating a new sitekey.
To allow access from all countries, clear the selected countries and click Save. When you remove the last country, the action resets to Allow.
The dashboard setting applies to all traffic for the sitekey. To allow or block countries for each verification request, send these parameters to /siteverify. This method is available for Pro sitekeys and does not change the saved sitekey configuration.
geo_restriction_actionblock to reject the listed countries, or allow to accept only the listed countries.geo_restriction_countriesUS,CA.Send both parameters together in the URL-encoded POST body. You can change the action and country list for each request. For example, this request blocks verification for tokens from the United States or Canada:
curl https://api.hcaptcha.com/siteverify \
--data-urlencode "secret=YOUR_SECRET" \
--data-urlencode "response=USER_RESPONSE_TOKEN" \
--data-urlencode "geo_restriction_action=block" \
--data-urlencode "geo_restriction_countries=US,CA"
If the token's country is blocked by the rule, /siteverify returns:
{
"success": false,
"error-codes": ["geo-restriction-mismatch"]
}
Only allow the protected action when /siteverify returns success: true.
The country check uses the country recorded in the token. If no country is available, this check does not reject the token. The other verification checks still apply.
Pro has a two week free trial period, with no credit card required. During or after the trial is up, you can continue using it by adding a credit card.
If you opt not to enter a credit card, once your trial is up your account will be downgraded to the free (Basic) tier. Sitekeys using a Pro mode will reset to a challenge mode supported in the free tier, and any shared users will be removed from your account.
Pro costs $99/mo for 100K units per month when billed annually, or $139/mo on a month-to-month basis. Additional requests are billed at $0.99 per 1000 requests.
You will receive an email invoice each time you are billed, which will be either annually or monthly depending on the plan you have selected. Overages will be billed immediately after certain thresholds are met.
If you are using millions of requests per month, our Enterprise plans include many powerful features like risk scoring, custom threat models, SOC review, and much more.
Volume discounts are also available for committed Enterprise usage, which can make it more cost effective than pay-as-you-go usage on the Pro plan once you are using millions of requests per month. Just contact us with your expected volumes to get a rapid quote.
When changing your billing cycle, your account will be adjusted using prorated credits or refunds based on your actual usage and the type of switch you make.
If you move from a yearly billing cycle to a monthly billing cycle, you will receive a pro-rated refund via your original payment method, calculated as Original Yearly Payment - Used Service Value − First Month of New Monthly Plan − Transaction Fee.
If you move from a monthly billing cycle to a yearly billing cycle, a credit will be applied directly to your first yearly invoice, calculated as Current Month Payment − Used Service Value.
hCaptcha Pro offers features like a low friction self-optimizing challenge mode, custom themes, and more. hCaptcha Free is a classic CAPTCHA experience, in which most users will generally be shown a challenge.
hCaptcha Enterprise is a complete anti-abuse and bot mitigation platform. It is used by many of the largest online services to protect their users from fraud and abuse of all kinds, both human and automated.
Features unique to hCaptcha Enterprise include passive (No-CAPTCHA) modes, risk scores, custom threat models, rich analytics and tagging interfaces, role-based access controls, SAML SSO, strong SLAs, and much more.
hCaptcha Pro is the right choice when you want a simple tool that you can enable in minutes, letting our system manage configuration.
hCaptcha Enterprise is the right choice when you need not just low friction but sophisticated defenses against account takeovers, advanced persistent threats, API integration, and more.
If your hCaptcha volume is greater than one million evaluations per month then hCaptcha Enterprise can also be more cost-effective, as committed volume discounts are available.
hCaptcha Pro is billed either annually or monthly for the base subscription, which includes 100,000 evaluations per month. Additional evaluations are billed at $0.99 per 1000 requests, which will be charged to your credit card periodically once the 100,000 evaluation capacity quota is consumed.
The monthly price with an annual subscription discount is $99, or $139 if paid month-to-month.
Annual Billing Example: if your total usage in a given month is 115,000 requests and you have selected annual billing, you will see a single charge for the annual-billed amount when you sign up, and an overage charge for $14.85 in the month you consumed more than 100,000 requests.
Monthly Billing Example: if your total usage in a given month is 115,000 requests and you have selected monthly billing, you will see a charge for the monthly-billed amount when you sign up and on each subsequent month, and an overage charge for $14.85 in the month you consumed more than 100,000 requests.