Solutions for Enterprises

Enterprises don't just need bot protection — they need it to fit inside an existing security posture: data residency requirements, SSO and role-based access control, audit trails, high-availability infrastructure, and a vendor who can be held to an SLA. A third-party CAPTCHA service that routes your traffic and user data through someone else's cloud rarely clears that bar.

ALTCHA Sentinel is built for exactly this. It's the same adaptive detection engine behind ALTCHA Cloud, but deployed entirely on your own infrastructure — so your traffic, your users' data, and your compliance boundary never leave systems you control.

Why Enterprises Choose ALTCHA Sentinel

Full data control. Sentinel runs on your infrastructure — Docker, Kubernetes, AWS, Azure, Bunny, or bare metal. No visitor data, form content, or traffic pattern is ever sent to a third party. That makes it straightforward to reason about under GDPR, HIPAA, and internal security review, since there's no subprocessor or vendor data-sharing agreement to account for in the first place.

Enterprise-grade access control. SSO via OIDC or LDAP/Active Directory, multi-factor authentication, and per-account role-based access (Admin, Member, Read-only) let you fold Sentinel into your existing identity provider and access policy instead of managing a separate set of credentials.

Built for scale and high availability. Clustering runs multiple Sentinel replicas against shared state, with support for multi-regional deployments where each region runs its own replica set against a shared main database. Kubernetes with the official Helm chart is the recommended path for production, multi-instance deployments.

Deep observability. Export traces to your existing stack via OpenTelemetry, and monitor cluster health — CPU, memory, request rate, error rate — per instance from the admin dashboard.

Deployment on your terms. Install with Docker, Kubernetes, AWS, Azure, or Bunny, against your own PostgreSQL, MySQL, Oracle, or other supported database. Air-gapped and offline license verification is supported for environments that can't allow outbound call-home traffic.

Privacy by design, not by policy. No cookies or fingerprinting. Sentinel identifies devices using Ephemeral Device Keys — non-persistent identifiers rotated daily — and anonymizes or discards logs automatically, so privacy compliance doesn't depend on a retention policy someone has to remember to enforce.

Accountable licensing and support. An Enterprise license unlocks SSO, multi-replica clustering, and OpenTelemetry, backed by a support SLA — not a best-effort community forum. See Pricing for plan tiers.

What Sentinel Includes

• Adaptive CAPTCHA with risk-based, self-tuning challenge policy (Autopilot)
• Interaction-based, contextual, and machine-learning bot detection
• Spam and content classification, phishing and link detection
• Real-time threat intelligence and proxy/TOR detection
• Context-aware, multi-layer rate limiting
• SSO (OIDC, LDAP/Active Directory) and MFA
• Multi-account, role-based access control
• Clustering and multi-regional deployment
• OpenTelemetry tracing and cluster monitoring
• Self-hosted deployment with Docker, Kubernetes, AWS, Azure, Bunny, and more

Getting Started

1. Introduction to Sentinel — how it works and what it adds over open-source ALTCHA.
2. Integration Checklist — a launch-readiness checklist before going to production.
3. Install — deploy on your infrastructure of choice.
4. SSO and Users & Accounts — wire up your identity provider and access policy.
5. Clustering — scale out for production traffic and high availability.

Not sure Sentinel is the right fit yet, or need something lighter-weight first? See Solutions for Businesses for the fully managed ALTCHA Cloud option, or Solutions for Individuals for the free, open-source widget.