Captchas.ir / security
Trust begins with explicit boundaries
Implemented controls, practical limitations and evidence to review
Management authentication
The panel uses HttpOnly sessions, CSRF protection and tenant separation Global operations belong to the installation owner
Binding and replay
Receipts and sessions bind to the request context Public demos do not mint customer access grants
Method limitations
PoW does not prove humanity Marks has no independent AI-resistance certification No single method guarantees protection against every bot
Certification and SLA status
This page claims no security certification, government endorsement or guaranteed SLA Contract terms require separate review and agreement