Skip to main content
verifyngo is a reverse-proxy bot filter written in Go. It sits in front of your web service and intercepts every incoming request before it reaches your app. Suspicious visitors are shown a CAPTCHA challenge — powered by Cap, Cloudflare Turnstile, or hCaptcha — and only let through once they solve it. You do not need to change a single line of your application code.

Introduction

Understand how verifyngo works, what the challenge flow looks like, and which providers and rules are available.

Quickstart

Get verifyngo running in front of your service in under five minutes.

Configuration

Explore every configuration option — ports, upstreams, CAPTCHA providers, rules, and more.

Guides

Step-by-step guides for deploying verifyngo with Docker, behind nginx, and other common setups.

​
Get started in three steps

Follow the steps below to go from zero to a working bot-protection layer in front of your service.
1

Run the Docker image

Pull and start the verifyngo container, mapping port 8080 on your host to the proxy listener inside the container.
2

Edit config.json

Open config.json and set your upstream URL, choose a CAPTCHA provider, and paste in your site key and secret key.
3

Point your reverse proxy at verifyngo

Update your existing reverse proxy (nginx, Caddy, a load balancer, etc.) so it forwards traffic to verifyngo on port 8080 instead of directly to your application. verifyngo handles the rest.