Cap Captcha Hosting Live In 5 Minutes

Deploy Cap Captcha hosting and run a self-hosted captcha, a proof-of-work one that replaces image puzzles, on a dedicated Cloud VPS. xCloud starts the pinned Cap 3.1.13 server with a private Valkey datastore, generates the Admin Key for the dashboard, keeps keys and statistics on persistent volumes and serves the dashboard, widget and siteverify API over HTTPS on your own domain, ready for your first site key.

Deploy your Cap Captcha

No terminal
No technical skills needed
No lock-in, cancel anytime

What is Cap Captcha?

Cap is a self-hosted and privacy-first CAPTCHA alternative that does not make users click on traffic lights. The visitor's browser solves a few small challenges in the background, such as proof-of-work and instrumentation, which can also be configured to stop autonomous AI agents, and there are no puzzles or third-party trackers. Run on your own server it is a self-hosted Cap Captcha, an alternative to reCAPTCHA or hCaptcha, licensed under Apache-2.0.

On xCloud it is the Cap standalone server: tiago2/cap 3.1.13 and a private Valkey 9 datastore, both pinned by digest. The cap_valkey_data volume holds keys, sessions and statistics, and cap_data holds optional downloaded IP databases. A generated Admin Key signs in to the dashboard, and the challenge and verification endpoints are served on your domain.

From Sign-Up to a Live Cap Captcha In Just 3 Easy Steps

A Cap install normally means the standalone server, a Valkey datastore, an admin key, two volumes, a domain and a certificate before the first site key. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick Cap Captcha from the OneClick catalog. Choose a domain and a server; the install form has no application fields, because xCloud generates a 40-character Admin Key.
Step 02
We Deploy It For You
One click. We start tiago2/cap 3.1.13 and valkey 9-alpine, both pinned by digest, with Valkey private, mount cap_valkey_data and cap_data, set the Admin Key and publish the dashboard and API over HTTPS. It usually takes under a minute.
Step 03
Create A Site Key And Add The Widget
Sign in with the Admin Key, create a site key and secret in the dashboard, add the widget to your page and call the siteverify endpoint for that key from your backend with the secret.

Everything Cap Captcha Does, On Your Own Server

Cap 3.1.13 runs here as a standalone CAPTCHA server, with keys, sessions and statistics kept on volumes you own.

Proof-Of-Work Challenges
The visitor's browser quietly solves small challenges, such as proof-of-work and instrumentation, instead of clicking on traffic lights.
Drop-In Widget
Add a client widget to your pages, with no dependencies by default, that talks to the challenge and redeem endpoints on your own domain.
siteverify API
Validate a solved token from your backend through siteverify with the per-key secret. Upstream says it is compatible with reCAPTCHA's verification API.
Dashboard With Per-Site Keys
Create site keys and secrets, set allowed origins per key and read statistics in a dashboard protected by the Admin Key.
Private Valkey Datastore
Keys, sessions, statistics and settings live in a Valkey container that publishes no port, on the cap_valkey_data volume.
Public By Design, Locked Where It Counts
Challenge, redeem and siteverify are public by design. The dashboard and management API need the Admin Key, and DEMO_MODE must stay unset.

Everything You Need To Run Your Bot Protection 24/7

Managed hosting for Cap Captcha, so the parts that keep it online are not your problem.

Cap 3.1.13 deployed instantly
Images pinned by digest
Admin Key generated for you
Valkey kept private
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With Cap Captcha

Protect a signup form without a third-party CAPTCHA
Add the Cap widget to a form and verify tokens from your backend, so no visitor data goes to an outside CAPTCHA provider.
Migrate off reCAPTCHA with a small code change
Upstream's migration guide says Cap's siteverify mirrors reCAPTCHA's request shape, so the backend call moves to your own instance and the widget is swapped tag for tag.
Run keys for several sites from one server
Create a separate site key and secret per website in the dashboard, each with its own allowed origins.
Slow down scrapers and automated agents
Use proof-of-work and instrumentation challenges to make bulk automated requests costlier, without claiming to stop every bot.

Cap Captcha vs Alternatives

reCAPTCHA: A hosted CAPTCHA run by Google; Cap is Apache-2.0 software you run yourself, with keys and statistics in Valkey on your own xCloud server.
hCaptcha: A hosted CAPTCHA service run by its vendor; with Cap Captcha the challenge and verification endpoints sit on your own domain.
Cloudflare Turnstile: A hosted CAPTCHA alternative run by Cloudflare; Cap Captcha keeps challenge and verification endpoints on your own domain and server.
Anubis: A proof-of-work bot filter placed in front of a site, available as its own OneClick app; Cap is a widget CAPTCHA you embed in forms.
Altcha: Another privacy-focused proof-of-work CAPTCHA; compare its widget and verification model with Cap's dashboard of per-site keys.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for Cap Captcha hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More sites and traffic on the same server.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Cloud VPS 24 GB

Cap alongside the applications it protects.

$84.99per month

24 GB RAM
8 vCPU cores
300 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. Cap itself is licensed under Apache-2.0.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Cap Captcha on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own CAPTCHA Server?

Cap Captcha on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own your data. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Can I run Cap Captcha in Docker?

Yes, and this template is Cap Captcha Docker hosting without the compose file: tiago2/cap 3.1.13 and a private valkey 9-alpine, both pinned by digest, with persistent volumes and an HTTPS route to port 3000. Upstream says it runs with Docker, on workers or on Railway.

Is Cap Captcha an alternative to reCAPTCHA?

Upstream presents Cap as a self-hosted, privacy-first CAPTCHA alternative with no puzzles and no third-party tracking, and says its verification endpoint is compatible with reCAPTCHA's. No CAPTCHA stops every bot, so test it against your own traffic.

How do I verify a Cap Captcha token?

Create a site key and secret in the dashboard, add the widget to your page, then call the siteverify endpoint for your key from your backend with the key secret. The secret is required, so keep it out of front-end code.

How much RAM does Cap Captcha need?

For Cap plus Valkey the template estimates half a gigabyte of memory, a single core and 2 GB of disk. It is an estimate, not a measured upstream requirement. Entry-level 6 GB hosting is plenty to begin with.

How do I log in to the Cap Captcha dashboard?

Sign in with the 40-character Admin Key from the credentials page. It is read on every start, so change it in the Environment editor and redeploy, using at least 12 characters. Never set DEMO_MODE to true, because that removes all dashboard authentication.

Is the Cap Captcha challenge endpoint public?

Yes, by design: the challenge, redeem and siteverify endpoints are public because browsers and backends call them, and siteverify also needs the key secret. The dashboard and management API need the Admin Key. Restrict CORS_ORIGIN, which defaults to everything.

Is Cap Captcha free?

Yes. Cap is licensed under Apache-2.0, so the software has no licence fee. What you rent is the dedicated server, nothing more. Optional IP-database downloads, such as MaxMind, may have their own terms. You also pay nothing extra for site keys or the number of sites.

How do I back up Cap Captcha?

Back up both volumes. cap_valkey_data holds all application state, including keys, sessions, statistics and settings, while cap_data only holds optional downloaded IP databases and can be rebuilt. Nothing is scheduled by default, so turn on scheduled backups and verify a restore.

Backup and restore Docker apps

How do I upgrade Cap Captcha?

Nothing upgrades itself: your install stays on Cap 3.1.13 and Valkey 9-alpine, both pinned by digest, until you adopt a newer template version. Before you do, back up cap_valkey_data and cap_data and review the upstream release notes. Never use docker compose down -v, which would remove the volumes.

Is this a Cap Captcha cloud service?

It is the Cap standalone server on a dedicated Cloud VPS under your xCloud login, a Cap cloud of your own at your domain. The /swagger page documents the API without a login but exposes documentation only, not data.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.