About Botpoison

Botpoison is spam protection for web forms: an invisible CAPTCHA alternative and a spam classifier API, made in the EU. It stops bots without asking people to solve puzzles, and catches spam by what it says, whoever wrote it.

Botpoison is owned by Trampoline Software SRL. Its products and web properties are operated from Belgium, and its terms are governed by Belgian law. It has been around since 2021.

Two products, each for one kind of spam:

• Challenge is an invisible check for bots. When a visitor presses Send, their browser runs a small proof-of-work check, and your server verifies the solution with one call. Scripts that skip it are turned away, and every bot submission costs CPU time.
• Classify is a spam classifier API. Your server sends a form submission, and gets back spam or clean with a score, from Botpoison's own model.

One plan covers both, each with its own allowance, and both start free; see pricing.

A form check should not need to know who the visitor is. So Challenge sets no cookies, stores nothing in the browser and builds no profile of the visitor, and nothing links a visitor across sites.

Classify runs Botpoison's own model, in the EU (Ireland). No outside AI vendor reads the message.

There is no image grid, no audio clip and no checkbox, so there is nothing for anyone to get wrong. Screen reader users, keyboard users and people with low vision send a protected form like everyone else.

A visitor can still be stopped if their browser cannot run the check: JavaScript is off, something blocks the script or the API, or the browser is too old. The library raises an error the page can catch, so the visitor is told what happened instead of being left at a form that does nothing.

Challenge does not stop headless browsers. It makes every submission they send cost CPU time, which is a different promise. It does not stop spam typed by people either, which is why Classify exists.

Classify publishes how its score relates to good messages, up to the spam label, so a review queue can be set with open eyes; see labels and scores. And a paid plan is never cut off for going over its allowance.

Botpoison runs in the EU (Ireland), and the information you provide to it is stored there. The Classify model runs there too, on Botpoison's own infrastructure, beside the rest of Botpoison. No outside AI vendor sees the message. The GDPR page has the details.

Questions go to a person, not a bot. Write to us from the contact page.