TuringA modern, self-hosted captcha

Zero third-party dependencies, cross-language wire contract, native Web Crypto proof-of-work. No external service, no tracking.

Get started

Wire contract

Live demo

Self-hosted

The server issues and verifies its own signed challenges. No calls to a third party, nothing to leak, no per-request quota.

Cross-language

A frozen wire contract (token, canonical JSON, PoW) with byte-exact vectors every language port reproduces. PHP core ships first.

Proof-of-work

Deterministic PBKDF2 or hashcash SHA-bit, solved in the browser with native Web Crypto — no WASM, CSP-safe, optionally offloaded to a Web Worker.

Drop-in clients

One tag for plain HTML, a <turing-captcha> Web Component, and thin Vue and React wrappers, all over one headless core.

What it is

Turing is cluion's self-hosted captcha: a signed challenge the server issues, a client widget that solves it in the browser, and a token the enclosing form submits for the server to verify. The whole thing is framework-agnostic — a PHP Core defines the wire contract, framework integrations (Laravel first) wire it into requests, and a JS client mounts the widget.

Pick your stack to get started:

Laravel — <x-turing> Blade component + a validation rule
Plain HTML — one <script> and a [data-turing] container
Vue — <Turing> component
React — <Turing /> component