Open-source, invisible CAPTCHA that detects AI agents, bots, and headless browsers via 40+ behavioral signals, device & TLS fingerprinting, and SHA-256 proof of work. Self-hosted and privacy-first.
Go net/http middleware implementing the supercookie favicon-cache browser fingerprinting technique — identifies returning visitors without cookies or local storage.