The Best mCaptcha Alternatives in 2026

Cap offers an open-source, self-hosted CAPTCHA alternative using proof-of-work and instrumentation challenges.

Cap provides a self-hosted, open source alternative to CAPTCHA challenges for websites.

Add a proof-of-work CAPTCHA system to an application using the mCaptcha backend component.

Solve reverse engineering challenges published on challenges.re, a challenge-focused site.

Protect a website from automated bot requests with Anubis, which evaluates incoming HTTP requests.

Manage two-step verification tokens on Android with Aegis Authenticator, a free, open-source app.

Facia provides deepfake and liveness detection for identity verification and authentication.

Test a browser for privacy leaks, including exposed IP addresses, device information, and fingerprinting risks.

Wazuh monitors systems and detects threats through an open source security platform for organizations.

Test how trackers and fingerprinting systems see your browser with Cover Your Tracks from the EFF.

IPv6 Leak Test checks whether a device has IPv6 connectivity and displays connection information related to privacy.

The Metasploit cheat sheet collects command references for working with the framework.

Asymmetric Research provides security partnerships for L1 and L2 blockchains and DeFi protocols, including engineering and threat-response work.

Browse a cybersecurity-focused collection of links and resources in this repository.

This GitHub list curates GPT agents designed for cybersecurity work and related security tasks.

Manage two-factor authentication codes with OTP Auth, an iOS app listed on the App Store.

Generate secure SSL configurations for selected web, database, and mail software.

SSL for Free provides SSL and wildcard certificates for enabling HTTPS on websites.

GoPlus offers Web3 security tools including audits, APIs, a user security hub, and a browser extension.

Search the National Vulnerability Database, a public resource for vulnerability information.

WhatsMyDNS checks DNS record propagation across global resolvers for record types including A, AAAA, MX, and TXT.

Find which websites support two-factor authentication and what methods they offer in this directory.

View Toronto Police calls for service on a map that updates in real time, according to the supplied page description.

Use Metasploit to find security issues, verify mitigations, and manage authorized penetration testing assessments.