The Friendly Captcha alternative for spam that people type.

Messages that pass a bot check: real submissions and how Doorman judged them

  1. Specimen · Contact formNº 186215 7771

    From growth@rankwise.io

    “Your restaurant isn't showing on page one of Google. We can fix your local SEO in 30 days, guaranteed. Can I send a proposal?”

    Sales pitch

    1% chance it’s real · 82 ms

    Void

  2. Specimen · Contact formNº 184538 0152

    From zara@quill.example

    “I run Quill Legal. We use Xero today. Half our clients are in the UK. Can we get a demo this week?”

    91% chance it’s real · 87 ms

    Genuine

  3. Specimen · Contact formNº 189571 3009

    From hello@pixelcraft.agency

    “We build stunning websites for architects. Your current site feels dated. 15 minute call to show you some concepts?”

    Sales pitch

    2% chance it’s real · 84 ms

    Void

  4. Specimen · Contact formNº 187893 5390

    From kofi@proton.me

    “I run Brightline Dental. Clients keep asking to pay by card and we can't take it. Does it import from what we use now?”

    81% chance it’s real · 78 ms

    Genuine

  5. Specimen · Contact formNº 192926 8247

    From hello@scaleleads.co

    “Are you accepting guest posts? I have a well researched article on small business cash flow that fits your audience.”

    pitch

    2% chance it’s real · 83 ms

    Void

  6. Specimen · Contact formNº 191249 0628

    From claire.m@gmail.com

    “Hi, my son chipped a front tooth at football. Do you have anything this week for children? He's 11.”

    95% chance it’s real · 90 ms

    Genuine
Start free
Paste a pitch you got

Sound familiar?

Friendly Captcha is a privacy-conscious, invisible way to slow bots, with strong EU positioning. But today's outreach bots solve the puzzle. Doorman reads the message itself and keeps the pitches out.

14 days of Pro free, no card. Then free for 100 submissions a month, or Pro from $29.

  1. Puzzles don't stop peopleProof-of-work costs a bot time. A human typing an agency pitch doesn't notice it.
  2. Small request allowancesCommercial plans start at 1,000 requests a month for €9.
  3. The free plan is non-commercialA business site needs a paid plan from the first request.

Doorman and Friendly Captcha, side by side.

QuestionDoormanFriendly Captcha
What it checksWhat the visitor sent, against what you sellA background proof-of-work puzzle plus device and IP risk signals
Pitches from bots that pass the checkKept outPass
What visitors seeNothingNothing, or a small widget solving in the background
Why something was blockedThe exact sentenceRisk intelligence from the Advanced plan up
SetupA form URL or one server callA script and widget on the page, plus server-side verification
PriceFree for 100 submissions a month, commercial use included; Pro $29 for 5,000Free for non-commercial sites; Starter €9 a month for 1,000 requests, Growth €39 for 5,000

Their plans and behaviour as published on their own sites, checked 29 September 2026. Sources: friendlycaptcha.com, friendlycaptcha.com/signup.

Which one is right for you?

Choose Doorman if

  • Your junk is outreach: pitches, SEO offers, partnership requests, written fresh for your site
  • You run a commercial site and want a real free tier
  • You want the reason for every decision
  • You want more for the money: 5,000 submissions for $29

Choose Friendly Captcha if

  • You need EU hosting and a strongly GDPR-positioned vendor
  • Your spam is mostly automated
  • You need a self-hosted endpoint (on their Enterprise plan)

Switch in two minutes

  1. Hosted form change the form's action to your Doorman URL and remove the Friendly Captcha script and widget.
  2. From your server replace the Friendly Captcha verify call with one doorman.check call; act on deliver, hold or drop.
  3. Or ask your agent copy one prompt into Claude Code, Codex or Cursor and it does the swap.
  4. Start safely watch mode delivers what it would have dropped, tagged, until you switch it to enforce.

Read the docs

Before → afterhtml
<!-- before: a Friendly Captcha script and widget -->
<form action="/contact" method="POST"> … <div class="friendly-captcha-widget"></div>

<!-- after: no script, no widget -->
<form action="https://withdoorman.com/f/f_yourForm" method="POST"> …

Checked, not guessed.

Every decision comes from Doorman's models reading the submission, in milliseconds, with the reason attached.

13/13
agency and SEO pitches dropped in our labelled set; a bot check passes all of them
0
genuine enquiries dropped; the unsure ones were held for you
~100 ms
to judge a submission, invisible to the visitor

Labelled test set: 104 invented but labelled contact-form and checkout submissions, judged live; latency is the median of those checks. Questions were not tuned to the set.

Questions

Where is Doorman's data stored?

In the United States, on Fly.io. Submissions are never used for training, and you can export or delete everything from Settings.

Does Doorman run anything in the visitor's browser?

No. Hosted forms post straight to Doorman; with the API, your server calls it.

Can I use it on a commercial site for free?

Yes. The free plan is 100 submissions a month, commercial use included.

How much does it cost?

Free for 100 submissions a month. Pro is $29 a month for 5,000 and Business is $79 a month for 50,000, and every account starts with 14 days of Pro. Until November 30, the first 100 paying customers get Pro at $19 and Business at $59, kept for as long as they stay. See pricing.

Try it on your own forms.

Start with 14 days of Pro, free. Turn on watch mode to see every call before you trust it.

Start free Try the live demo