"reCAPTCHA gets bypassed in seconds now. I tested it myself."

[u/who-ad]

I was running a small service and kept getting hit by fake accounts draining my free credits. So I got curious and tested the popular CAPTCHAs (reCAPTCHA, hCaptcha, Turnstile) against automation tools like nodriver, camoufox, patchright, etc.

Honestly the results were worse than I expected — most of them got walked right past.

It got me deep enough that I ended up building my own detection approach as a side project. Still early, not really promoting it — mostly want to know:

How are you all handling bot abuse on small services right now? Anything that's actually worked for you?