Skip to main content

Anti-Abuse

Active defenses against abuse — captcha, honeypot, rate limits, AI budget.

Enforcement Mode

BOT_DETECTION_MODE live

Captcha (ALTCHA)

Configured

Proof-of-work captcha (ALTCHA) on auth flows.

Honeypot

Active

Hidden field "bookmark" on the feedback form (2000ms minimum fill time).

Rate Limits

Active

Per-IP and per-email limits. Per-email: 5/1 h.

AI Budget

Active

Daily token cap of 100,000 per user.

Think this pattern could be better? Tell us how.

Leave feedback