The Apigee developer portal comes with both Captcha Captcha and ReCaptcha provided to help prevent automated registration. However, on our portal, we now see that scripts and bots can easily defeat the captchas provided by the Captcha module, and we can’t use ReCaptcha because the Google service behind it is not supported in China. We use some other mechanisms to help mitigate bot traffic, but it would be better to start with a captcha that’s widely effective.
The possible alternatives I’ve seen so far are
- Image Recognition Captcha - seems hard to set up (especially the image licensing) and easy to for a dedicated hacker to script
- Securimage - maybe this one? Seems to not be used much
Do you have any suggested alternatives to the provided Captcha modules?