API v2.1 — Now with adaptive challenge scoring

Stop bots before they
touch your forms

NordSpark embeds an invisible challenge layer into every form submission — no CAPTCHAs, no friction, no compromises.

Start free trial → See how it works
2,400+
Protected integrations
99.7%
Bot detection accuracy
<3ms
Avg. challenge latency
4 DCs
EU-hosted infrastructure

// capabilities

Everything you need to stay
one step ahead

Built for engineering teams who can't afford downtime or false positives.

🧩
Invisible Challenges
Session fingerprinting and behavioural analysis run silently. Your real users never see a puzzle.
⚡
Sub-3ms Verdict
Decisions are made at the edge before the request reaches your origin. No round-trip penalty.
🔑
Token-based API
Each challenge session receives a signed token. Verify on your backend with one HTTP call.
🌍
EU-Residency Guarantee
All data processed and stored inside the EU. GDPR-compliant by architecture, not by policy.
📊
Real-time Analytics
See threat breakdowns, session scores, and submission velocity on a live dashboard.
🛡️
Adaptive Scoring
Risk thresholds self-calibrate per endpoint. High-value forms get harder challenges automatically.

// integration

Five minutes to
invisible protection

01
Add our script tag
A single <script> loads the challenge runtime asynchronously. No layout shifts, no blocking.
02
Challenge runs on submission
When the user submits, NordSpark silently evaluates browser signals, timing patterns and session entropy.
03
Verify the token server-side
A signed X-Captcha-Token is appended to every request. Verify it via our API before processing.
04
Done. Block bots, pass humans.
Invalid tokens are rejected at the edge. Legitimate traffic flows through with zero added friction.
verify · POST /api/v1/captcha/challenge/verify/
$ curl -X POST \
https://fra.nordspark.co/api/v1/ \
-H "X-Captcha-Session: a9f3..." \
-H "X-Captcha-Token: eyJh..."
 
# Response
{
"verdict": "pass",
"score": 0.97,
"latency_ms": 2,
"session_id": "a9f3c812..."
}

// pricing

Simple, predictable billing

No per-seat fees. Pay for verifications, not team size.

Starter
€0/mo
Up to 10,000 verifications
  • 1 domain
  • Invisible challenge
  • Token verification API
  • 7-day log retention
  • Community support
Get started free
Most popular
Growth
€49/mo
Up to 500,000 verifications
  • 10 domains
  • Adaptive scoring
  • Webhook alerts
  • 30-day log retention
  • Email support (24h SLA)
  • Analytics dashboard
Start Growth trial
Enterprise
Custom
Unlimited verifications
  • Unlimited domains
  • Dedicated EU nodes
  • SLA 99.9% uptime
  • 90-day log retention
  • Slack & phone support
  • Custom challenge logic
  • DPA & audit reports
Talk to sales