Comment to 'Login Form "Honey Pot" to Trap Bots'
  • Thanks Dannie!

    You are correct, modern anti-bot tools use similar techniques. While users may think that captcha resolver is the only obstacle, the detection is actually a lot more complex. You may have noticed that some detectors don't even render captcha challenge anymore. Newer tools like Cloudflare Turnstile and Vercel BotID are almost entirely frictionless. Verification methods can be complex and they have to be frequently updated (including honeypots, keystrokes and cursor observers, timing tracking, form honeypots, pseudo elements, pattern matching, etc). We don't recommend using self-hosted captcha tests for that very reason - they don't protect from modern bots, and can in fact be a magnet for bots that seek out more vulnerable systems.

    By the time v15 final is release we will have additional tools in AntiSpam app, most likely with BotID and potentially Turnstile integrations. We're also experimenting with Vercel bot management API in NEO app with the goal to provide it as a integrated metered service for UNA Pro subscribers.