These guides describe the qualified 1.0.0 candidate. Public download and paid checkout remain unavailable until the WordPress.org listing and Freemius deployment are released.
Local check
The default account-free challenge is bundled with the plugin and verified by the store. It adds modest browser work, does not contact an outside challenge provider, and should not be described as proof of humanity.
Managed alternatives
- Cloudflare Turnstile is the recommended stronger managed option
- Google reCAPTCHA v2 checkbox is an optional alternative
- Only the selected provider loads, and only after local risk requires a challenge
- No-provider mode turns recoverable limits into an explicit temporary throttle
Failure behavior
Unverified or transiently unavailable remote providers fall back to the local check. Challenge errors expose a visible retry. Ordinary descriptor 404 responses mean no challenge is pending and stay quiet.
Related resources
How the decision flow works · Compatibility matrix · Support · Public source