Solutions for Governments

Government agencies and public sector organizations answer to a different set of requirements than a commercial business: statutory compliance, mandatory accessibility for every citizen, data sovereignty, and procurement that favors software your agency can own and operate indefinitely — not a subscription to a third party's cloud that your data has to pass through.

ALTCHA Sentinel is built around exactly that constraint. It's a self-hosted platform you deploy and run entirely on infrastructure your agency controls, with perpetual licensing available so the software remains an asset you operate — not a service you rent.

Compliance by Design

ALTCHA is built to simplify — not complicate — your compliance posture.

Data protection regulations. Because Sentinel runs entirely on your own infrastructure, with no third-party processing, no subprocessors, and no cookies or tracking, it removes most of the complexity that data protection law adds to third-party services. See GDPR Compliance and HIPAA Compliance for how this applies in practice — the same self-hosted, no-subprocessor model applies regardless of which jurisdiction's law you're accountable to.

Privacy by architecture, not policy. No cookies, no fingerprinting, no persistent visitor tracking. Sentinel identifies devices using Ephemeral Device Keys — non-persistent identifiers that rotate daily — and anonymizes or discards verification logs automatically. Compliance doesn't depend on someone remembering to enforce a retention policy; it's the default behavior.

Audit-ready access control. SSO via OIDC or LDAP/Active Directory, multi-factor authentication, and per-account, role-based access (Admin, Member, Read-only) let Sentinel plug into your agency's existing identity provider and access policy, with an audit trail of who can do what.

Accessibility Compliance

Public sector websites are frequently under the strictest accessibility obligations of any sector — and CAPTCHA is one of the most common places those obligations get broken.

ALTCHA's widget is built to WCAG 2.2 AA from the ground up: full keyboard navigation, screen reader-optimized descriptions, an audio alternative to the visual challenge, and valid, ARIA-compliant markup. This is the same accessibility benchmark referenced by accessibility regulations worldwide, including the EU's European Accessibility Act (EAA) and comparable public-sector accessibility mandates elsewhere.

Where a traditional CAPTCHA forces every visitor through a visual puzzle, ALTCHA's proof-of-work challenge is invisible to almost all legitimate users by default — accessibility and usability reinforce each other instead of trading off.

Platform Ownership

Perpetual licensing. ALTCHA supports perpetual licensing options, so the software your agency deploys remains an asset it can operate and control — not a subscription that stops working, or a service that can change terms, the day a contract lapses.

Self-hosted, on your infrastructure. Deploy Sentinel on your own servers, private cloud, or on-premises infrastructure — Docker, Kubernetes, AWS, Azure, or Bunny — against your own PostgreSQL, MySQL, Oracle, or other supported database. Nothing about running Sentinel requires an external service to function.

Air-gapped deployment. Offline license verification via LICENSE_JSON is supported for environments that can't or won't allow outbound call-home traffic — a common requirement for classified or otherwise isolated networks.

Built for scale and continuity. Clustering runs multiple Sentinel replicas against shared state, including multi-regional deployments, so protection stays available and consistent across a large or distributed agency without depending on any single instance.

Open-source core. The underlying widget and verification protocol are open source and auditable — your security team can review exactly what's running, rather than taking a vendor's word for it.

What Sentinel Includes

• Adaptive CAPTCHA, WCAG 2.2 AA accessible by default
• Interaction-based, contextual, and machine-learning bot detection
• Real-time threat intelligence and proxy/TOR detection
• Spam and content classification, phishing and link detection
• Context-aware, multi-layer rate limiting
• SSO (OIDC, LDAP/Active Directory), MFA, and role-based access control
• Perpetual licensing and air-gapped/offline deployment support
• Clustering and multi-regional high availability
• Self-hosted deployment with Docker, Kubernetes, AWS, Azure, Bunny, and more

Getting Started

1. Introduction to Sentinel — how it works and what it adds over open-source ALTCHA.
2. Integration Checklist — a launch-readiness checklist before going to production.
3. Install — deploy on your infrastructure of choice.
4. SSO and Users & Accounts — wire up your identity provider and access policy.
5. Privacy Protection — the technical detail behind ALTCHA's compliance posture.

For procurement or licensing questions specific to public sector deployments, see Pricing or contact us.