pricing · v0
free invisible bot protection.
Start with a Turnstile-style invisible check: passive risk scoring, abuse telemetry, and a hosted widget for any page that needs protection. Paid tiers add stronger policy controls, dataset exports, and optional panel-data workflows for teams that want human or model feedback on agent outputs.
v0 published pricing. free tier is open — drop the widget on any page that needs bot protection. design-partner slots open for operators who want the dataset. lock-in for first 10 DPs at v0 rates for 12 months.
Free
$0
hosted · invisible bot check
- · unlimited low-risk verifies on protected pages
- · passive browser + behavior telemetry
- · managed escalation when risk is unclear
- · panel branding on widget
- · 1 domain · community support
- · no dataset exports or paid rater workflows
Design Partner
$99
per month · 25k verifies included
- · 25k api calls/mo · $0.0020 overage
- · 30-day judgment dataset retention
- · csv/json export on demand
- · core + 1 vertical scrubber pack
- · 3 operator domains · email support 48h
- · preview cross-org pool (1k units sampled)
Starterrecommended
$199
per month · 100k verifies included
- · 100k api calls/mo · $0.0018 overage
- · 90-day judgment dataset retention
- · csv/json export + api
- · core + 2 vertical scrubber packs
- · 5 operator domains · email support 24h
- · preview cross-org pool (10k units sampled)
Growth
$499
per month · 500k verifies included
- · 500k api calls/mo · $0.0015 overage
- · 12-month dataset retention
- · csv/json + api + webhook
- · all vertical scrubber packs
- · 10 operator domains · 24h response, 99.5% uptime
- · full read access to cross-org pool
- · full theme widget
Enterprise
$2k+
platform fee + commit · annual
- · ≥ 5M verifies baseline · $0.0010 overage
- · unlimited retention · queryable api
- · signed DPA, SCC, BAA on request
- · private scrubber rule packs
- · dedicated slack, 4h response, 99.9% uptime + named CSM
- · US/EU/regional dedicated stack
- · react/svelte widget source
the wedge — what makes this different
| turnstile | reCAPTCHA Enterprise | hCaptcha Enterprise | scale.ai / surge | panel | |
|---|---|---|---|---|---|
| price | free | ~$0.001/call > 10k/mo | $0.0005–0.001/call ent | $50k+ contracts | $0.0010–0.0020/call |
| agent-output preference data | — | — | — | yes (managed) | yes (self-serve) |
| dataset goes to operator | no | no | no (vendor keeps it) | yes | yes |
| compliance posture | CF baseline | Google data terms | hcaptcha DPA | SOC 2 | GDPR + KVKK; HIPAA roadmap; scrubber-proxy first |
| bot resistance | medium (token-based) | medium-high (risk score) | medium-high (image proof-of-work) | n/a (not captcha) | high — tasks rotate from live operator traffic, can't be pre-scraped or pre-solved by an LLM |
| turnaround | instant | instant | instant | weeks per batch | real-time (visitor traffic IS the workforce) |
overage + caps
- billed monthly in arrears, line-item per 1k calls.
- soft cap = 10× pool; returns 429 + email prompt to upgrade.
- hard cap = 100× pool; returns 503 + alerts panel side (DDoS guard).
- incomplete verifications don't bill.
annual
flat 17% off paid tiers ("2 months free"). annual prepay non-refundable mid-cycle. free tier is already free, no annual to discount.
enterprise — what makes a deal enterprise
any one of:
- > 5M verifies/mo expected
- regulated vertical with signed DPA + custom retention (medical, legal, finance)
- EU data residency required
- BAA needed (post-HIPAA roadmap)
- private scrubber rule pack
- white-label widget (no panel branding)
- procurement requires MSA, redlines, security questionnaire
base = $2k/mo platform fee + custom usage commit. 12-month contracts. NET-30 or NET-60, invoiced (not card). 10% annual-prepay discount on top.
not yet priced (roadmap)
- panel-data API — queryable aggregated cross-org dataset, separate SKU (~$1k/mo read, ~$5k/mo read+exports).
- scrubber-proxy standalone — sanitization-events priced, separate SKU.
- judge models trained on the dataset — post-GA, contract-only.
things explicitly NOT in pricing
- no per-seat pricing — operators have API keys, not seats.
- no per-domain pricing inside a tier — we cap, we don't meter per domain.
- no "premium support" upsell — SLA is a tier feature, not a bolt-on.
- no captcha-bypass-as-a-service — the whole point is we don't bypass.
- no "remove panel branding" upsell on lower tiers — always branded on free/DP/Starter; clean on Growth+/Enterprise.