Form spam
Keep contact forms, comments and signups free of automated submissions.
Custom Rules
Your traffic. Your rules.
Tune protection to your traffic with rules tailored to your application.
Trusted by companies around the world
Tailor protection to your highest-risk flows
Repeat sign-ups
Detect users abusing free trials, promo codes or referral programs through repeat or duplicate accounts.
Bot accounts
Catch automated accounts at signup so they never reach your community, marketplace or growth metrics.
Rules that match your application
Combine signals like country, network type, request pattern and risk score into rules that fit each endpoint. Protect signup with strict thresholds while keeping checkout frictionless, all from a single configuration.
- Multi-condition rules — combine IP ranges, countries, device types and risk score into a single rule.
- Flexible match logic — mix and choose from different match operators and request actions.
Iterate without redeploying
Attack patterns shift daily, and waiting on a release cycle means protection always lags behind. With rules managed in the dashboard instead of your codebase, your security team reacts to new threats the moment they appear, no engineering ticket required.
- Instant rollout — edited rules in the dashboard take effect immediately across every deployment.
- One-click revert — watch impact in live metrics and roll back in one click if a rule doesn't behave as expected.
Frequently asked questions
Everything you need to know. Can't find your answer? Contact our support team.
What are custom rules in CaptchaFox?
Custom rules let you combine signals like country, network type, IP range, device type and risk score into conditions that decide whether a request is allowed, challenged or blocked. Each rule can target a specific endpoint or flow.
Do rule changes require a code deployment?
No. Rules are managed in the CaptchaFox dashboard and take effect across all deployments within seconds. There is no release cycle, and any change can be reverted with one click.
Can I apply different rules to different endpoints?
Yes. You can protect signup with strict thresholds while keeping checkout frictionless, all from a single configuration. Rules are evaluated per endpoint, so each flow gets exactly the protection it needs.
Do I need a developer to manage rules?
No. Rules are created and edited in the dashboard without writing code, so security and operations teams can respond to new attack patterns directly — no engineering ticket or release required.
Which conditions and actions can rules combine?
Rules support multiple match operators across IP ranges, countries, network types, device types and risk scores, combined with actions like allow, challenge and block.
Take a look at our latest articles
Read CaptchaFox guides, case studies and insights on bot protection, spam prevention and account security.
May 5, 2026
New Intelligence APIs now available
Use the Intelligence APIs to evaluate incoming traffic before it reaches your application or server.
Read now
April 22, 2026
What Is IP Geolocation? How It Works & Accuracy
Learn how IP geolocation maps IP addresses to physical locations, where accuracy breaks down, and why bot detection systems use it as one signal among many.
Read now
April 15, 2026
What Are Residential Proxies? Bot Attacks & Detection
Learn what residential proxies are, how they work and how attackers take advantage of them.
Read now
April 9, 2026
Best European CAPTCHA Solutions in 2026
Compare the top European CAPTCHA providers for 2026. Evaluate privacy, GDPR compliance, accessibility, and pricing to find the right fit.
Read nowFight bots and protect your users' data.
Don't give fraudsters and spammers a chance and protect your website with CaptchaFox today.
