Overview of reCAPTCHA Enterprise

This page introduces reCAPTCHA Enterprise.


Google has been defending millions of sites with reCAPTCHA for almost a decade. reCAPTCHA Enterprise is an extension of that effort to help enterprises detect other types of fraudulent activity on their sites, like scraping, credential stuffing, and automated account creation. reCAPTCHA Enterprise offers enhanced detection with more granular scores, reason codes for risky events, and the ability to tune your site-specific model.

reCAPTCHA Enterprise is a service that protects your site from spam and abuse. reCAPTCHA Enterprise builds on the existing reCAPTCHA API which uses advanced risk analysis techniques to tell humans and bots apart. reCAPTCHA Enterprise adds enhancements specifically designed to protect enterprise businesses, such as more granular scoring and returning reason codes with low scores to aid in analysis.

When to use reCAPTCHA Enterprise

reCAPTCHA focuses on detecting automated attacks. These attacks could originate from scripts, emulators, bots, or even humans. As a site owner, you embed a snippet of javascript on your pages which enables signal collection between reCAPTCHA Enterprise servers and the end user's machine.

How reCAPTCHA Enterprise works

The signals sent using the embedded snippet are processed by reCAPTCHA Enterprise backends, which compute a score in the range [0, 1.0]. The score, along with some metadata, is embedded in an encrypted token and delivered back to web page. The page must then send the token back to the your site's backend for assessment. The assessment step is performed by contacting the reCAPTCHA Enterprise backend. This backend extracts and returns the score from the token.

What's next