Cap Captcha Hosting Live In 5 Minutes

Self-hosted, privacy-friendly CAPTCHA that challenges bots with proof-of-work instead of image puzzles. Cap is free and open source; we handle the server, the HTTPS and the Admin Key.

Deploy your Cap Captcha

No terminal
No technical skills needed
No lock-in, cancel anytime

From Sign-Up to a Live Cap Captcha In Just 3 Easy Steps

Self-hosting Cap normally means hand-wiring the Cap container, a Valkey datastore, a reverse proxy and a TLS certificate before you can protect a single form. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick Cap Captcha from the OneClick catalog, then choose a domain. xCloud generates the 40-character Admin Key for you.
Step 02
We Deploy It For You
One click. We provision the server, bring up the digest-pinned Cap and Valkey containers, publish the dashboard over HTTPS on your domain, and wait for first start to finish.
Step 03
Start Using It
Save the Admin Key from your installation credentials, sign in to the dashboard, create a site key and secret, and drop the widget into your site.

Everything Cap Does, On Your Own Server

Cap runs in full here — the open-source standalone edition is complete, and challenge and verification traffic stays on infrastructure you control.

Proof-Of-Work, Not Puzzles
Visitors solve a proof-of-work challenge instead of identifying objects in images, and the challenge runs on your own server.
Protect Any Form
Drop the widget into sign-up, login, contact or comment forms on any frontend — the widget works independently of your stack.
Per-Site Keys And Secrets
Create separate site keys and secrets for every website from one dashboard, instead of sharing a single credential across properties.
Verify From Your Backend
Call the siteverify API with the solved token and your secret; tokens are single-use and a wrong secret is rejected, as verification confirmed.
Drop-In Widget
The @cap.js/widget package attaches to any frontend without committing you to a particular framework.
Backed By Valkey
Site keys and settings persist in Valkey; both keys created during verification were still present after both containers restarted.

Everything You Need To Run Your Bot Protection 24/7

Managed hosting for Cap Captcha, so the parts that keep it online are not your problem.

Cap Captcha 3.1.13 deployed instantly
Dashboard and site key management
Drop-in widget and siteverify API
Admin Key generated for you
Free SSL certificate
Automatic backups
Security updates included
30+ server locations
Unused balance refunded

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for Cap Captcha. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More sites, more site keys, more verify traffic.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Cloud VPS 24 GB

Cap alongside a whole self-hosted stack.

$84.99per month

24 GB RAM
8 vCPU cores
300 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Cap Captcha on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Own Your Bot Protection?

Cap Captcha on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own your verification traffic. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

What makes Cap different from reCAPTCHA?

Cap uses proof-of-work challenges and runs on your own server, so challenge and verification traffic stays with you instead of a third-party CAPTCHA provider.

How do I sign in?

Use the Admin Key shown in the xCloud installation credentials. It is re-read on every start, so rotate it in the Environment editor and redeploy if you need to change it.

What runs alongside Cap?

A private Valkey datastore that holds keys, sessions and statistics. It is not exposed publicly.

What should I back up?

Both named volumes — cap_valkey_data is the one that matters — and your .env values, especially the Admin Key.

Does it need extra setup to verify tokens?

Create a site key in the dashboard, then POST the token and key secret to /<siteKey>/siteverify from your backend.

Are the CAPTCHA endpoints exposed publicly?

Yes, by design — the challenge, redeem and siteverify endpoints and the /swagger documentation are public. Siteverify's security comes from the per-key secret, not from hiding the endpoint.

Is cross-origin access locked down by default?

No. CORS_ORIGIN allows all origins by default (the upstream setting) — restrict it in the Environment editor or set allowed origins per key if that matters for your site.

What are the server requirements?

The template manifest asks for 512 MB of RAM, 1 CPU core and 2 GB of disk as a floor. This page sells the 6 GB tier, which is comfortably above that; measured idle use for both containers was about 26 MiB.

Is Cap free to self-host?

Yes. It is released under the Apache License 2.0. What you pay xCloud for is the server it runs on and the management around it, not a Cap license.

Can I run other apps on the same server?

Yes. It is a dedicated Cloud VPS, not a locked appliance, so you can deploy other OneClick apps or your own sites beside it as long as the resources are there.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.