SentinelCaptcha
MWIS24 SentinelCaptcha protects contact, registration, ordering and enquiry forms from automated abuse without confronting every visitor with a visible task. It assesses each request in stages: normally an invisible cryptographic proof of work is sufficient; suspicious signals trigger a simple confirmation; only high-risk activity receives a short visual challenge. Operators add the widget with a script and public site key, then validate the issued token server-side through the REST API. Allowed domains, separate public and secret keys, expiry controls and usage dashboards support controlled operation. SentinelCaptcha is available as a managed multilingual SaaS service.
AI detects bots and abuse
AI handles routine work — decisions stay transparent and with your team.
- 01Behaviour patterns scored automatically
- 02Protection level adapts to risk
- 03Real users barely notice
Your benefits
Effective bot protection that leaves genuine visitors largely undisturbed.
Fewer barriers for genuine visitors
Normal requests are checked in the background; visible interaction appears only when risk requires it.
Risk-based, multi-stage protection
Invisible proof, checkbox and visual challenge work together, increasing effort only with the level of suspicion.
Controlled website integration
Public site keys, secret verification keys and server-side token validation separate browser interaction from trust decisions.
Transparent managed service
Usage, checks and security events stay visible while M.Werner IT Service GmbH manages operations and updates.
Features in detail
Invisible cryptographic proof
The browser completes a time-limited calculation in the background, usually without visitor interaction.
Automatic risk escalation
Suspicious signals move the check from invisible proof to checkbox and, at high risk, to a visual task.
Embeddable website widget
A script and marked container add protection to existing forms and submit the response token with the form.
Server-side REST API
API endpoints issue challenges, process attempts and validate response tokens before an enquiry is accepted.
Domain and key management
Manage allowed domains and separate public and secret keys for each website, with key rotation when required.
Short-lived, single-use checks
Expiry and server-side state checks restrict reuse of challenges and response tokens.
Usage and security overview
Dashboards show verification volume, site usage, protection levels and relevant security events.
SaaS operation and customisation
Central operation and updates with protection rules, language, domains and integration adapted to each application.
Interested in SentinelCaptcha?
Request a tailored quotation for a purchase version or managed SaaS service. We can also demonstrate the solution personally.