Which bot checks let a signed agent in?

Our agent signs every request with its name and a Web Bot Auth signature anyone can check. 95 products met it with a bot check: 77 turned it away, 18 let it in.

A bot check is there to keep out anonymous bots, and a signed agent isn't anonymous. Below, per vendor: how often it stopped our agent, and how to let signed agents through.

10 vendorsSigned drives 2–16 Oct 2026The data

The numbers

Of the 95 products whose bot check met our signed agent.

Same check, different settings.

Google reCAPTCHA, hCaptcha, ALTCHA and Other checks stopped our agent at some products and let it in at others. Per vendor, the most met first: the setting that lets signed agents through.

Vendor	Stopped	Let in	How to let signed agents through
Google reCAPTCHA	36	10	Check the Web Bot Auth signature on the sign-up request and skip reCAPTCHA (or lower the score threshold) for signed agents; or offer a documented sign-up API with email verification.
Check the Web Bot Auth signature on the sign-up request and skip reCAPTCHA (or lower the score threshold) for signed agents; or offer a documented sign-up API with email verification.
Cloudflare	27	0	Let verified bots and signed agents past the check on sign-up: in Cloudflare, add a WAF custom rule that skips the bot challenge on your sign-up paths for verified bots and for signed agents (rule field cf.bot_management.signed_agent; since 1 July 2026 signed agents count as verified bots), and render Turnstile only when the request is not from a verified agent.
Let verified bots and signed agents past the check on sign-up: in Cloudflare, add a WAF custom rule that skips the bot challenge on your sign-up paths for verified bots and for signed agents (rule field cf.bot_management.signed_agent; since 1 July 2026 signed agents count as verified bots), and render Turnstile only when the request is not from a verified agent.
hCaptcha	8	1	Check the Web Bot Auth signature on the sign-up request (the agent's key directory is public) and skip hCaptcha for signed agents; or offer a documented sign-up API with email verification.
Check the Web Bot Auth signature on the sign-up request (the agent's key directory is public) and skip hCaptcha for signed agents; or offer a documented sign-up API with email verification.
ALTCHA	1	2	Skip the CAPTCHA for signed agents (valid Web Bot Auth signature), or offer a documented sign-up API.
Skip the CAPTCHA for signed agents (valid Web Bot Auth signature), or offer a documented sign-up API.
Arkose Labs	3	0	Let signed agents (valid Web Bot Auth signature) skip the bot check on sign-up, or offer a documented sign-up API with email verification.
Let signed agents (valid Web Bot Auth signature) skip the bot check on sign-up, or offer a documented sign-up API with email verification.
The product's own check	0	2	–
Friendly Captcha	0	1	–
HUMAN Security	0	1	–
Stytch device fingerprinting	1	0	Use Stytch's Web Bot Auth verification to let signed agents through device fingerprinting.
Use Stytch's Web Bot Auth verification to let signed agents through device fingerprinting.
Other checks	1	1	Let signed agents (valid Web Bot Auth signature) skip the bot check on sign-up, or offer a documented sign-up API with email verification.
Let signed agents (valid Web Bot Auth signature) skip the bot check on sign-up, or offer a documented sign-up API with email verification.

Let signed agents past your bot check, step by step

Each case, with its drive.

Per vendor: the products, where our agent met the check, and the check as the drive recorded it.

Google reCAPTCHA36 stopped10 let in

reCAPTCHA (invisible)

AmplitudeStopped at sign up
CloseStopped at sign up
CraftLet in at sign up
monday.comLet in at sign up
Teamwork.comLet in at sign up
TwentyLet in at sign up

Google reCAPTCHA (invisible)

MailgunStopped at sign up
MongoDB AtlasStopped at sign up
BrevoLet in at sign up
FirecrawlLet in at sign up
TidyCalLet in at sign up

Google reCAPTCHA v2 (checkbox)

ClickUpStopped at sign up
HubSpotStopped at sign up
SlackStopped at sign up

Google reCAPTCHA v2 (invisible)

AkiflowStopped at sign up
MoneybirdStopped at sign up
PublerStopped at sign up

Google reCAPTCHA v2

FormspreeStopped at sign up
SerpApiStopped at sign up

Google reCAPTCHA v2 (image challenge)

ApifyStopped at sign up
HeapStopped at sign up

reCAPTCHA v2 checkbox

CalendlyStopped at sign up
Lemon SqueezyStopped at sign up

Cloudflare Turnstile (invisible) plus reCAPTCHA v3

GorgiasStopped at sign up

Google reCAPTCHA (invisible, escalated to v2 image challenge)

MailchimpStopped at sign up

Google reCAPTCHA (invisible, escalating to v2 checkbox)

MailtrapStopped at sign up

Google reCAPTCHA (invisible, score)

PandaDocStopped at sign up

Google reCAPTCHA (invisible) on the Okta sign-up form, plus Typeform's registration inline hook

TypeformStopped at sign up

Google reCAPTCHA (invisible) on the sign-up form

IntercomLet in at sign up

Google reCAPTCHA (score, captcha_type=google-score)

JiraStopped at sign up

Google reCAPTCHA (score, then image challenge page)

MollieStopped at sign up

Google reCAPTCHA Enterprise (invisible score, then visible checkbox)

AsanaStopped at sign up

Google reCAPTCHA Enterprise (invisible)

SquarespaceStopped at sign up

Google reCAPTCHA Enterprise challenge page (waf=session) on auth.freshbooks.com

FreshBooksStopped at sign up

Google reCAPTCHA v2 (invisible, escalated to image challenge); eHawk Talon fingerprint field also on the form

PostmarkStopped at sign up

Google reCAPTCHA v2 checkbox

ScrapingBeeStopped at sign up

Google reCAPTCHA v2 checkbox (on Backblaze's own 'Security Check' page; reCAPTCHA Enterprise script on the form)

Backblaze B2Stopped at sign up

Google reCAPTCHA v2 picture challenge

CarrdStopped at verify

reCAPTCHA

KlaviyoStopped at sign up

reCAPTCHA (invisible, v3-style)

FilloutLet in at sign up

reCAPTCHA (script on www.shortcut.com/signup)

ShortcutLet in at sign up

reCAPTCHA Enterprise

WixStopped at sign up

reCAPTCHA Enterprise (Atlassian sign-up)

TrelloStopped at sign up

reCAPTCHA Enterprise (checkbox)

BigCommerceStopped at sign up

reCAPTCHA Enterprise (invisible) on Squarespace login

Acuity SchedulingStopped at sign up

reCAPTCHA v2 (checkbox)

JotformStopped at sign up

Cloudflare27 stopped

Cloudflare Turnstile

BaserowStopped at sign up
Cal.comStopped at sign up
EcwidStopped at sign up
Invoice NinjaStopped at sign up
LinearStopped at sign up
MailerLiteStopped at sign up
n8nStopped at sign up
PolarStopped at sign up
TaskadeStopped at sign up
tawk.toStopped at sign up
TypefullyStopped at sign up
zcalStopped at sign up

Cloudflare managed challenge (Turnstile 'Verify you are human')

KitStopped at sign up
Perplexity APIStopped at sign up

Cloudflare Turnstile (managed challenge)

LaterStopped at sign up
PlainStopped at sign up

Cloudflare managed challenge (cf-mitigated: challenge) on reg.wrike.com

WrikeStopped at sign up

Cloudflare managed challenge (interstitial)

MakeStopped at sign up

Cloudflare managed challenge (Turnstile 'Verify you are human' interstitial)

FreshdeskStopped at sign up

Cloudflare managed challenge (Turnstile)

ActiveCampaignStopped at sign up

Cloudflare managed challenge (Verify you are human)

CanvaStopped at sign up

Cloudflare Turnstile (invisible)

TodoistStopped at sign up

Cloudflare Turnstile (on Auth0 universal login, login.twilio.com)

SendGridStopped at sign up

Cloudflare Turnstile (on the Clerk sign-up form)

PinataStopped at sign up

Cloudflare Turnstile (via Clerk bot protection)

TursoStopped at sign up

Cloudflare Turnstile (visible 'Verify you are human' on the last sign-up step)

PostHogStopped at sign up

Cloudflare WAF block page

beehiivStopped at sign up

hCaptcha8 stopped1 let in

hCaptcha

BoxStopped at sign up
BufferStopped at sign up
ChatwootStopped at sign up
CrispStopped at sign up
RenderStopped at sign up
SupabaseStopped at sign up

hCaptcha (image puzzle)

SavvyCalStopped at sign up

hCaptcha (passive, via Stripe Radar) with Fingerprint visitor data

ResendStopped at sign up

hCaptcha (script loaded, invisible)

BasecampLet in at sign up

ALTCHA1 stopped2 let in

ALTCHA (proof of work)

PirschStopped at sign up

ALTCHA proof-of-work (first-party widget, /json/antispam_challenge)

ZulipLet in at sign up

Brave's own proof-of-work captcha ('Verifying you're a human being...')

Brave Search APILet in at sign up

Arkose Labs3 stopped

Arkose Labs (FunCaptcha)

DocuSignStopped at sign up
DropboxStopped at sign up

Arkose Labs (verify.figma.com, figma-api.arkoselabs.com)

FigmaStopped at sign up

The product's own check2 let in

First-party honeypot fields on the sign-up form (field1, status)

SignWellLet in at sign up

hidden honeypot field (telephone)

PlanetScaleLet in at sign up

Friendly Captcha1 let in

Friendly Captcha

Plausible AnalyticsLet in at sign up

HUMAN Security1 let in

HUMAN (PerimeterX) invisible sensor

WebflowLet in at sign up

Stytch device fingerprinting1 stopped

Stytch Device Fingerprinting (magic-link redirect)

folkStopped at verify

Other checks1 stopped1 let in

Castle (risk SDK castleSDKV3)

FramerStopped at sign up

HUMAN

AirtableLet in at sign up

What counts as stopped or let in

A product counts when our agent met its bot check at sign-up, verification or getting a key, in a drive where it signed every request. Stopped: the check turned it away, with or without a visible challenge. Let in: the check was there and our agent got through on its own.

See what an agent sees in yours.

Free, in minutes: the bot check your sign-up puts in front of agents, and the first fixes.