FVAVerify

Human security for your website. The "Verify you are human" checkbox that stops bots and form spam, built by FVA70K.

Try the live demo See plans

Try it right now

This is the real widget, talking to the real FVAVerify server. Click the box.

Token will appear here after you verify.

How it works

📋

1. Add one script

Paste the widget on any form: contact, signup, checkout, comments.

→
✅

2. Visitor checks the box

We watch how they interact and issue a signed token for real humans.

→
🔒

3. Your backend verifies

One server call confirms the token. Bots never get through.

Plans

Start free. Upgrade when your traffic grows.

Free

Free

forever

  • 1,000 verifications/month
  • 1 website
  • Bot score with every token
  • Setup docs
Get Free
Popular

Starter

Price to be set

per month

  • 10,000 verifications/month
  • 3 websites
  • Everything in Free
  • Remove FVA70K branding
  • Email support
Get Starter

Growth

Price to be set

per month

  • 50,000 verifications/month
  • 10 websites
  • Everything in Starter
  • Verification analytics
  • Priority support
Get Growth

Scale

Price to be set

per month

  • 250,000 verifications/month
  • Unlimited websites
  • Everything in Growth
  • Custom score thresholds
  • Dedicated support
Get Scale

International pricing to be confirmed on enquiry.

Add it to your site in minutes

Frontend: one div and one script. Backend: one call.

1. The widget

<div data-fvaverify data-sitekey="YOUR_SITE_KEY"></div> <script src="https://fva70k.com/verify.js"></script>

2. Verify the token on your server

curl -X POST https://fva70k.com/api/verify/siteverify \ -H "Content-Type: application/json" \ -d '{"secret":"YOUR_SECRET_KEY","token":"TOKEN_FROM_FORM"}' # {"success":true,"sitekey":"fvav_...","score":0.87}

3. PHP example

$ch = curl_init('https://fva70k.com/api/verify/siteverify'); curl_setopt($ch, CURLOPT_POSTFIELDS, json_encode([ 'secret' => 'YOUR_SECRET_KEY', 'token' => $_POST['fvaverify_token'], ])); curl_setopt($ch, CURLOPT_HTTPHEADER, ['Content-Type: application/json']); curl_setopt($ch, CURLOPT_RETURNTRANSFER, true); $res = json_decode(curl_exec($ch), true); if (empty($res['success'])) { die('Please verify you are human.'); }

Keep your secret key on the server. Never put it in frontend code.

Questions

What does FVAVerify actually stop?

Automated form spam, fake signups, and casual bots. The widget watches real interaction signals (mouse movement, timing, touch) and every token is cryptographically signed, single-use, and expires in 5 minutes.

Is it as strong as Cloudflare Turnstile or reCAPTCHA?

Honestly: no. Those services run on global threat intelligence we do not have. FVAVerify is lightweight protection built for small business websites, and it is honest about that. For banks and high-risk targets, use Cloudflare.

Does it work offline or on any platform?

The widget needs internet to reach our verification server, but it works on any website: WordPress, plain HTML, PHP, Node, anything that can POST from a backend.

What is the bot score?

Every token carries a score from 0 to 1. Higher means more human-like. You can set your own cutoff on paid plans, for example only accepting scores above 0.5 on a payment form.

How do I get my keys?

Talk to us and we will issue your site key and secret key, usually within a day. Every website we build can ship with FVAVerify included.

Get your keys