Interactive demo

Passkey-first bot defense, with CAPTCHA only as fallback

Test the exact flow your users will experience: a fast passkey step-up first, then a lightweight behavioral challenge only when needed.

No visual CAPTCHA by default Privacy-first signals Works with passkeys

Verification flow

1

Passkey step-up

Confirm the user with a secure passkey action.

2

Fallback challenge

Triggered only when passkey is unavailable or policy requires it.

3

Result

Return a signed verification outcome to your backend.

Register a passkey first to try the passkey step-up demo.

Live fallback challenge

Scratch the surface to reveal the hidden shape.

Ready to verify

Scratch the surface to begin verification.

Add Notabot in one script tag

  1. 1 Create a site key in the developer portal
  2. 2 Add the loader script to your page
  3. 3 Verify the result on your backend
Open developer portal
<script
src="https://cdn.notabot.com/widget/v2/loader.js"
data-notabot-site-key="tk_your_site_key"
data-notabot-action="signup"
data-notabot-mount="#notabot-widget">
</script>

Privacy-first

When biometrics are used, biometric data stays on the user's device. Notabot only receives verification signals.

Frictionless by default

Most returning users can verify with a fast passkey step-up before any challenge is shown.

API-first

Signed JWT results, webhooks, and server-side verification built in.