Product review
reCAPTCHA Enterprise bot detection review
reCAPTCHA Enterprise remains the ranked product name from this comparison; current Google documentation places reCAPTCHA within Google Cloud Fraud Defense. Website assessments return risk scores and available reasons for the protected interaction. Essentials, Premium and Enterprise have different access, billing and commitment conditions.
Editorial score
- Evidence layer
- Website or mobile integration with server-side assessments
- Free access
- 10,000 assessments per organization per calendar month across accounts and sites; Essentials/Premium conditions apply
- Paid entry
- Premium: 8 US dollars flat for 10,001–100,000 monthly assessments, then 1 US dollar per 1,000; Enterprise uses volume commitments
Key facts
- Score direction
- The global risk score runs from 0.0 to 1.0: 1.0 indicates likely legitimate activity, while 0.0 indicates higher risk. Score granularity and reason-code access depend on billing and security-review conditions. Vendor page ↗
- Pricing
- The billing guide documents 10,000 monthly free assessments. Premium billing applies a flat charge of 8 US dollars from 10,001 through 100,000 assessments, then 1 US dollar per 1,000. Enterprise commitments have separate terms. Vendor page ↗
- Deployment
- Choose the appropriate key type, send tokens for backend assessment and evaluate results for each protected action. A score-based deployment does not require showing a puzzle to every visitor. Vendor page ↗
- Current product and allowance
- reCAPTCHA is part of Google Cloud Fraud Defense. The free monthly allowance aggregates across the organization; higher-tier features and additional assessments have separate requirements. Vendor page ↗
Strengths
- Published assessment pricing with a monthly free allowance.
- Score-based and challenge-based options fit different application flows.
Limitations
- Assessment scores are interaction-level outputs; compare them with identification products using the actual task and billing unit.
- Check billing-account requirements, score levels, reason codes and behavior when the free allowance is exhausted.
Who it fits
Teams that want action-level risk assessments and selective challenges with Google Cloud billing.
Use the alternatives by protection model to compare device-aware detection, edge management and interaction challenges.
What the score means
The 7.3 out of 10 score is an editorial assessment under the same 40-criterion, seven-category framework. The rubric covers detection, tamper resistance, legitimate-user impact, AI agents, response/visibility, integration and access. The published scale runs from 0 to 10.
The award and score are distinct. Read all criteria and relative weights and verify the required signal and integration for your traffic.
How to evaluate it
Run score-based assessments without immediate enforcement, review score distributions on known customers and evaluate any step-up policy on the affected action.
Google Cloud setup and assessment evaluation
Follow the product's setup route to evaluate score-based or challenge-based keys and verify assessments on the backend.
Open evaluation routeSources and further reading
- Product and detection approach · checked October 23, 2026
- Pricing and access · checked October 23, 2026
- Integration and result documentation · checked October 23, 2026
- Interpreting assessments, scores and reason codes · checked October 23, 2026
FAQ
Does reCAPTCHA always show a visible challenge?
No. Score-based keys can evaluate interactions invisibly. The chosen key type and application policy determine when a visible challenge or another step-up is used.
Which way does the reCAPTCHA score run?
Its global score runs from 0.0 to 1.0, with higher scores indicating more likely legitimate activity. Keep this direction separate from bot-risk scores where higher values indicate higher risk.