Turnstile
Turnstile is Cloudflare’s smart CAPTCHA alternative. It can be embedded into any website without sending traffic through Cloudflare and works without showing visitors a CAPTCHA.
Turnstile leverages the same technology behind our Managed Challenge, but opens it to anyone not currently utilizing the Cloudflare network. In contrast to our Challenge page offerings, Turnstile allows the customer to run challenges anywhere on their site in a less-intrusive way without requiring the use of Cloudflare’s CDN.
Rather than try to unilaterally deprecate and replace CAPTCHA with a single alternative, we built a platform to test many alternatives and rotate new challenges in and out as they become more or less effective.
With Turnstile, we adapt the actual challenge outcome to the individual visitor or browser. First, we run a series of small non-interactive JavaScript challenges gathering more signals about the visitor/browser environment. Those challenges include, proof-of-work, proof-of-space, probing for web APIs, and various other challenges for detecting browser-quirks and human behavior. As a result, we can fine-tune the difficulty of the challenge to the specific request and avoid ever showing a visual puzzle to a user.
Turnstile also includes machine learning models that detect common features of end visitors who were able to pass a challenge before. The computational hardness of those initial challenges may vary by visitor, but is targeted to run fast.
Customers are able to choose the widget type via Turnstile. This helps avoid CAPTCHAs, which also reduces the lifetimes of human time spent solving CAPTCHAs across the Internet.
Turnstile widget types include:
- A non-interactive challenge.
- A non-intrusive interactive challenge (such as clicking a button), if the visitor is a suspected bot.
- An invisible challenge to the browser.
Accessibility
Turnstile is WCAG 2.1 AA compliant. Visually or motorically impaired visitors are able to solve Turnstile widgets by obtaining a pre-clearance token via an external service.
Features
Turnstile Analytics
Assess the number of challenges issued, evaluate the challenge solve rate, and view the metrics of issued challenges.
Related products
Availability
Turnstile is available for free for unlimited use via our visible widget in Managed mode. An Enterprise version is available for customers who need additional features like support.
A pay-as-you-go option for advanced features will be available in early 2024 for self-serve customers.
Users can continue to access these advanced features below our 1 million siteverify request limit.