Turnstile (Captcha)

Free

$0.00

Stop The Bots. Skip The Fire Hydrants.

Cloudflare Turnstile runs a quiet background check on every Joomla form, so your real customers never have to prove they're human the hard way.

What Your Store Gets

A quiet check that catches bots and leaves real shoppers alone.

No Puzzle, No Picture Grid

Visitors prove they're human without clicking a single fire hydrant. Most never even notice it happened.

Invisible Until It's Needed

The widget can stay completely out of sight and only surface a visible challenge when something genuinely looks off.

Every Failure Tells the Truth

Expired token, already-used token, unsupported browser, bad setup — each one gets its own honest message instead of a shrug.

Looks Like It Belongs

Light, dark, or auto theme; three widget sizes. It sits on the page like it was part of the original design.

Speaks Your Visitor's Language

The challenge automatically defaults to whatever language your visitor's storefront is already running in. No manual mapping.

Doesn't Panic Over a Slow Connection

A configurable retry window gives a shaky network a second shot before anyone gets unfairly blamed for it.

The Paranoia-Or-Revenue Switch

Every verification service has a bad minute sometimes. You decide what happens to your store when it does — block the visitor outright for maximum caution, or wave them through so a few seconds of trouble somewhere else never costs you a sale in here.

Maximum caution mode for stores that can't risk a single bot slipping through
Revenue-first mode so a third-party hiccup never blocks a real buyer
Your call, flipped with a single switch

Rehearse the Disaster Before It Happens

Working on a local build? Force the exact outcome you want to test — pass, fail, stall like a bad connection, or escalate to a full challenge — and watch your forms handle it before a real customer ever hits the same wall for real.

No live credentials required to build and test
Four forced outcomes, on demand, on your own machine
Every custom trigger provable before launch day

Real-World Use Cases

A B2B storefront opens registration to speed up bulk buyers getting set up, and within a week the account list is mostly junk — scraper bots harvesting the signup form for email lists. Turnstile sits quietly on the form. Real buyers sail through. The junk accounts stop showing up entirely.

A store runs a 24-hour blowout sale and traffic spikes hard — exactly the moment nobody wants a slow, puzzle-heavy checkout turning away impatient buyers. With the paranoia-or-revenue switch already set to favor the sale, a brief verification hiccup never costs a single order.

A store sells across a dozen countries with the admin running in one language and shoppers arriving in a dozen others. The settings screen speaks the admin's language. The challenge automatically defaults to whatever language each visitor's storefront is already running in. Nobody translates anything by hand.

A dev shop is building a client's store locally with no live credentials issued yet. Instead of stalling, they flip on localhost testing, force each possible outcome one at a time, and confirm every custom trigger and error message behaves exactly as designed before the client's real keys ever enter the picture.

Let The Bots Waste Their Time Somewhere Else

Your customers get a store that just works. The bots get nothing. That's the whole deal.

Translated In The Following Languages

Arabic Unitag (ar-AA), Chinese, Traditional (zh-TW), Danish (da-DK), Dutch (nl-NL), English (en-GB), English, USA (en-US), Finnish (fi-FI), French (fr-FR), German (de-DE), Greek (el-GR), Hebrew (he-IL), Italian (it-IT), Japanese (ja-JP), Norwegian Bokmål (nb-NO), Persian Farsi (fa-IR), Polish (pl-PL), Portuguese, Brazil (pt-BR), Portuguese, Portugal (pt-PT), Russian (ru-RU), Spanish (es-ES), Swedish (sv-SE), Turkish (tr-TR)