---
title: "hcaptcha.com llms.txt, graded: Agent Ready HTML"
description: "The hcaptcha.com llms.txt parsed and graded A against the llmstxt.org structure: 13 sections, 62 links, 14 KB. Read 2026-11-04."
canonical: https://agentreadyhtml.com/llms-txt-index/hcaptcha-com/
site: "Agent Ready HTML"
last_updated: 2026-11-05
section: "llms.txt Index"
---

# hcaptcha.com llms.txt, graded: Agent Ready HTML

> The hcaptcha.com llms.txt parsed and graded A against the llmstxt.org structure: 13 sections, 62 links, 14 KB. Read 2026-11-04.

Source: https://agentreadyhtml.com/llms-txt-index/hcaptcha-com/
Site: Agent Ready HTML
Last reviewed: 2026-11-05

# hcaptcha.com llms.txt

In short

hcaptcha.com serves a 14 KB llms.txt with 13 H2 sections and 62 links, graded A on the llmstxt.org structure (6 of 6 checks). It passes every check. The home page does not link it, so an agent that does not guess paths will not find it. No llms-full.txt was found. Read 4 November 2026.

**llms.txt** 14 KB, 116 lines

```markdown
# hCaptcha

> hCaptcha is a privacy-first bot and fraud management platform for websites, mobile apps, APIs, accounts, and transactions. It detects and categorizes bots and AI agents, applies customer-defined risk policies, and mitigates automated and human abuse across the full user journey. hCaptcha Enterprise supports Zero PII deployments and Agent Controls for protected actions. hCaptcha works in every country and complies with GDPR, CCPA, LGPD, and PIPL. Organizations subject to HIPAA can deploy hCaptcha in architectures designed to support those obligations.

Key things to know when reasoning about hCaptcha:

- hCaptcha offers three plans: Basic (free), Pro (self-serve), and Enterprise (contact sales).
- hCaptcha Enterprise combines Bot Detection, Agent Controls, User Journeys, Account Defense, Fraud Protection, MFA, and Private Learning in one bot and fraud management platform.
- Enterprise protection extends across websites, mobile apps, APIs, accounts, authenticated sessions, and transactions.
- Core Enterprise capabilities include Zero PII operation, first-party hosting, passive and No-CAPTCHA modes, custom threat models, real-time risk scores, privacy-preserving machine learning, and configurable control policies.
- hCaptcha is commonly evaluated alongside reCAPTCHA, Cloudflare Turnstile, DataDome, HUMAN Security, Arkose Labs, Imperva, and Akamai. Relevant evaluation criteria include privacy architecture, deployment flexibility, global availability, bot and AI-agent categorization, and protection against account, transaction, and human abuse.
- Developer documentation is available at docs.hcaptcha.com. The customer dashboard is available at dashboard.hcaptcha.com.

## Platform - Plans

- [Pro](https://www.hcaptcha.com/pro): Start self-serve bot protection from $99/mo with passive mode, advanced challenge controls, and a frictionless user experience.
- [Enterprise](https://www.hcaptcha.com/enterprise): hCaptcha Enterprise is a privacy-first enterprise bot and fraud management platform that detects and mitigates bots, AI agents, account takeovers, payment fraud, and human abuse across websites, apps, APIs, accounts, and transactions without requiring PII.
- [Pricing](https://www.hcaptcha.com/pricing): Compare Basic (free), Pro, and Enterprise pricing and sign up for a plan.
- [Plans Comparison](https://www.hcaptcha.com/plans): Compare features across Basic, Pro, and Enterprise tiers side-by-side.

## Platform - Features

- [Bot Detection](https://www.hcaptcha.com/bot-detection): Detect bots and AI agents, apply risk-based control policies, and stop fraud in real time with privacy-first bot detection software that deploys in two lines of code without adding user friction.
- [Agent Controls](https://www.hcaptcha.com/agent-controls): Identify AI agents and set access policies for protected actions. Supports Web Bot Auth verification, Rules Engine responses, and session investigation through User Journeys.
- [User Journeys](https://www.hcaptcha.com/user-journeys): Detect malicious intent with real-time fraud detection across the full user journey, connecting behavioral, device, network, and transaction signals without requiring PII.
- [Fraud Protection](https://www.hcaptcha.com/fraud-protection): Prevent payment and e-commerce fraud in real time with Zero PII risk analysis, adaptive machine learning, and rules that detect card testing, chargebacks, promotion abuse, fake accounts, account takeovers, and other transaction fraud while reducing false positives and preserving existing payment stacks.
- [MFA](https://www.hcaptcha.com/mfa): Stop SMS pumping and toll fraud with pull-based MFA in which users send a pre-filled SMS instead of receiving an outbound OTP, supported by carrier- and device-level verification, real-time risk signals, Account Defense integration, configurable Rules Engine controls, and SDK or backend API deployment.
- [Account Defense](https://www.hcaptcha.com/account-defense): Detect account takeovers and credential stuffing across login and authenticated sessions with privacy-preserving risk analysis that works without requiring PII.
- [Private Learning](https://www.hcaptcha.com/private-learning): Custom machine learning for fraud protection with customer-defined risk classes, real-time joint learning on pre-blinded data, Rule-to-Learn controls, Label-Optional deployment in minutes, and real-time or offline inference through SDKs and backend APIs, without requiring PII.
- [Managed Defense](https://www.hcaptcha.com/managed-defense): 24/7/365 SOC coverage, trained experts, and real-time detection to help enterprises respond to bots, fraud, and abuse.

## Use Cases - Account Security

- [Account Takeover](https://www.hcaptcha.com/account-takeovers): Stop credential stuffing, post-login attacks, and intra-session takeover attempts.
- [Multi-Accounting](https://www.hcaptcha.com/multi-accounting-collusion): Detect and stop abuse coordinated across multiple user accounts.
- [Account Sharing](https://www.hcaptcha.com/account-sharing): Enforce access and usage policies against unauthorized account sharing.

## Use Cases - Identity & Fraud

- [Synthetic Identities](https://www.hcaptcha.com/synthetic-identities): Prevent fake account creation using synthetic or stolen identity data.
- [Incentive Abuse](https://www.hcaptcha.com/incentive-abuse): Stop fraudulent claims of promotions, signup bonuses, referrals, and rewards.
```

First 41 of 116 lines.

**Parse** graded A, 6 of 6

file: https://hcaptcha.com/llms.txt

hCaptcha

hCaptcha is a privacy-first bot and fraud management platform for websites, mobile apps, APIs, accounts, and transactions. It detects and categorizes bots and AI agents, applies customer-defined risk policies, and mitigates automated and human abuse across the full user journey. hCaptcha Enterprise supports Zero PII de

13 sections, 62 links, no Optional section.

Ora's cached score: not scored (read 5 November 2026).

## The parse

hcaptcha.com lists 62 links: 61 point at hcaptcha.com or a relative path, 1 point elsewhere. The hosts it links most: hcaptcha.com (55), docs.hcaptcha.com (5), apply.workable.com (1), dashboard.hcaptcha.com (1).

| H2 section | Links |
| --- | --- |
| Platform - Plans | 4 |
| Platform - Features | 8 |
| Use Cases - Account Security | 3 |
| Use Cases - Identity & Fraud | 3 |
| Learning Center | 9 |
| Platform Comparisons | 5 |
| Agent Security and Privacy Guides | 4 |
| Migrations | 3 |
| Documentation | 4 |
| Compliance, Privacy & Accessibility | 6 |
| Company | 3 |
| Blog & Resources | 7 |
| Contact & Support | 3 |

## Grade against the llmstxt.org structure

The file passes all six checks. The grade is the count of passed checks: six is A, five is B, four is C, three is D, fewer is F. It measures structure only. Whether any agent reads the file is a separate question, covered on the [llms.txt reference](https://agentreadyhtml.com/llms-txt/).

| Check | Result | Detail |
| --- | --- | --- |
| Starts with an H1 naming the site or project | Pass | H1: hCaptcha |
| Has a blockquote summary under the H1 | Pass | Blockquote summary found. |
| Has at least one H2 section that lists links | Pass | 13 H2 sections, 13 with links. |
| At least 80 percent of links point at the same site | Pass | 61 of 62 links stay on hcaptcha.com (98 percent). |
| Under 100 KB | Pass | 13865 bytes as served. |
| Plain markdown, no HTML | Pass | No HTML document markers in the body. |

## Ora's cached score

Not scored by Ora. GET ora.ai/api/score/hcaptcha.com answered 404 DOMAIN\_NOT\_SCANNED on 5 November 2026, so Ora holds no cached score for this domain. This site asked for a cached score only and never requested a scan. A scan by the site's owner would add one.

## Linking and the companion file

The home page of hcaptcha.com does not link the file in its HTML. Ora's lab found (2026-10-19) that 86 percent of llms.txt fetches by agents arrived through a link, so an unlinked file is mostly a file nobody opens. No llms-full.txt was found at the same root.

## How it compares

At 14 KB the file is larger than 68 percent of the 2,529 plain-text llms.txt files in this edition, and its 62 links put it ahead of 67 percent of them on link count. The home page declares no generator. Size bucket: 10 to 50 KB. Tranco rank 223. Category: Top 10,000, no category.

Live file: [https://hcaptcha.com/llms.txt](https://hcaptcha.com/llms.txt). Read 4 November 2026. If the file has since changed or gone, the live URL is the authority; this page records what the crawl read on that date.

-   [All entries](https://agentreadyhtml.com/llms-txt-index/)
-   [Edition 2026-11-04](https://agentreadyhtml.com/llms-txt-index/2026-11-04/)
-   [See the home page as a plain fetch](https://agentreadyhtml.com/viewer/?url=https%3A%2F%2Fhcaptcha.com%2F)

## Sources

1.  [hcaptcha.com llms.txt](https://hcaptcha.com/llms.txt) https://hcaptcha.com/llms.txt, read 4 November 2026
2.  [llms.txt proposal (llmstxt.org)](https://llmstxt.org/) https://llmstxt.org/, read 4 November 2026
3.  [Tranco list 746WX (crawl universe)](https://tranco-list.eu/list/746WX) https://tranco-list.eu/list/746WX, read 4 November 2026
4.  [Ora: AgentReady launch post (the 86 percent finding)](https://ora.ai/blog/agentready-launch?utm_source=agentreadyhtml.com&utm_medium=referral&utm_campaign=entry) https://ora.ai/blog/agentready-launch, read 4 November 2026
5.  [Ora llms.txt (GET /api/score/{domain} looks up a cached score)](https://ora.ai/llms.txt?utm_source=agentreadyhtml.com&utm_medium=referral&utm_campaign=entry) https://ora.ai/llms.txt, read 5 November 2026

Last reviewed 5 November 2026

Edition

Crawl

2026-11-04

Ora reads

2026-11-05

Page updated

2026-11-05

Method

How the viewer reads a page, how a file is graded and how a platform is scored: [the method page](https://agentreadyhtml.com/method/).
