WebDecoy

WebDecoy/FCaptcha

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

8 good first / help-wanted issues · JavaScript · last activity Oct 13, 2026

ai-bot-detection anti-bot behavioral-analysis bot-detection captcha fingerprinting go headless-browser-detection invisible-captcha nodejs playwright-detection proof-of-work puppeteer-detection python scraping-protection security selenium-detector self-hosted tls-fingerprinting web-security
8 Open Issues Need Help Last updated: Oct 13, 2026

Open Issues Need Help

View All on GitHub
documentation good first issue
WebDecoy/FCaptcha
221

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

JavaScript
#ai-bot-detection#anti-bot#behavioral-analysis#bot-detection#captcha#fingerprinting#go#headless-browser-detection#invisible-captcha#nodejs#playwright-detection#proof-of-work#puppeteer-detection#python#scraping-protection#security#selenium-detector#self-hosted#tls-fingerprinting#web-security
Official React component about 8 hours ago
enhancement help wanted javascript
WebDecoy/FCaptcha
221

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

JavaScript
#ai-bot-detection#anti-bot#behavioral-analysis#bot-detection#captcha#fingerprinting#go#headless-browser-detection#invisible-captcha#nodejs#playwright-detection#proof-of-work#puppeteer-detection#python#scraping-protection#security#selenium-detector#self-hosted#tls-fingerprinting#web-security
documentation help wanted
WebDecoy/FCaptcha
221

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

JavaScript
#ai-bot-detection#anti-bot#behavioral-analysis#bot-detection#captcha#fingerprinting#go#headless-browser-detection#invisible-captcha#nodejs#playwright-detection#proof-of-work#puppeteer-detection#python#scraping-protection#security#selenium-detector#self-hosted#tls-fingerprinting#web-security
documentation good first issue
WebDecoy/FCaptcha
221

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

JavaScript
#ai-bot-detection#anti-bot#behavioral-analysis#bot-detection#captcha#fingerprinting#go#headless-browser-detection#invisible-captcha#nodejs#playwright-detection#proof-of-work#puppeteer-detection#python#scraping-protection#security#selenium-detector#self-hosted#tls-fingerprinting#web-security
documentation good first issue python
WebDecoy/FCaptcha
221

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

JavaScript
#ai-bot-detection#anti-bot#behavioral-analysis#bot-detection#captcha#fingerprinting#go#headless-browser-detection#invisible-captcha#nodejs#playwright-detection#proof-of-work#puppeteer-detection#python#scraping-protection#security#selenium-detector#self-hosted#tls-fingerprinting#web-security
enhancement good first issue
WebDecoy/FCaptcha
221

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

JavaScript
#ai-bot-detection#anti-bot#behavioral-analysis#bot-detection#captcha#fingerprinting#go#headless-browser-detection#invisible-captcha#nodejs#playwright-detection#proof-of-work#puppeteer-detection#python#scraping-protection#security#selenium-detector#self-hosted#tls-fingerprinting#web-security
enhancement good first issue
WebDecoy/FCaptcha
221

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

JavaScript
#ai-bot-detection#anti-bot#behavioral-analysis#bot-detection#captcha#fingerprinting#go#headless-browser-detection#invisible-captcha#nodejs#playwright-detection#proof-of-work#puppeteer-detection#python#scraping-protection#security#selenium-detector#self-hosted#tls-fingerprinting#web-security
enhancement good first issue
WebDecoy/FCaptcha
221

Self-hosted, invisible CAPTCHA that detects AI agents driving real browsers. GDPR, WCAG 2.2 AA, and EAA: no cookies, no third-party data sharing, and no visual or audio puzzle. With a false-positive budget enforced in CI. Proof of work, drop-in for Turnstile and reCAPTCHA.

JavaScript
#ai-bot-detection#anti-bot#behavioral-analysis#bot-detection#captcha#fingerprinting#go#headless-browser-detection#invisible-captcha#nodejs#playwright-detection#proof-of-work#puppeteer-detection#python#scraping-protection#security#selenium-detector#self-hosted#tls-fingerprinting#web-security