Glossary
What is reCAPTCHA?
reCAPTCHA is Google's bot-detection service for websites. Version 2 shows the "I'm not a robot" checkbox and image grids when unsure; version 3 runs invisibly and gives each request a score from 0.0 (likely bot) to 1.0 (likely human). 21 of the 352 directory flows we recorded used it.
Versions
| Version | Experience |
|---|---|
| v2 checkbox | "I'm not a robot", images if suspicious |
| v2 invisible | Challenge only if suspicious |
| v3 | No challenge; returns a score |
| Enterprise | v3-style scoring with more features |
How sites use the score
With v3, the site sees a score per action and decides what to do: allow, require extra verification, or block. Directory forms often block low scores silently, so a submission can fail with no visible error.
reCAPTCHA and agents
Browsers with a normal history and signed-in Google session score higher. Automated or headless browsers score lower and see more image grids. Agents should pause for the user when a challenge appears rather than try to solve it.
Example
A founder's agent submits a form protected by reCAPTCHA v3. Nothing appears, but the submission silently fails. Repeating it with the founder interacting normally in the same browser succeeds; the agent notes that directory as needing a manual step.
FAQ
Is reCAPTCHA free?
There's a free tier with usage limits; higher volumes are paid.
What is a good reCAPTCHA v3 score?
Google suggests 0.5 as a starting threshold; sites tune it.
Why do I get so many image challenges?
VPNs, privacy settings, automation and unusual behaviour lower the confidence score.