--- title: "hCaptcha vs reCAPTCHA vs Turnstile for Real Estate Forms" description: "Compare CAPTCHA services for your website's inquiry forms. Check supported integrations, visitor challenges, costs, privacy, and receipt evidence." canonical: "https://scalewithsearch.com/articles/compare-captcha-services-agent-inquiry-forms" --- ## Site navigation - [Scale With Search](https://scalewithsearch.com/) - Services - Services - [AI systems](https://scalewithsearch.com/ai-systems) - [Site build](https://scalewithsearch.com/work#site-build) - [Whole website fix](https://scalewithsearch.com/work#whole-website-fix) - [Content library with SEO](https://scalewithsearch.com/work#content-library) - [Working session](https://scalewithsearch.com/audit) - Start here - [Send your brief](https://scalewithsearch.com/work#send-your-brief) - [Example scope](https://scalewithsearch.com/work#review-the-example-scope) - [Prices and terms](https://scalewithsearch.com/work#prices-and-terms) - Industries - Real estate - [Real estate agents and teams](https://scalewithsearch.com/for/real-estate) - [Platforms, ownership, and IDX](https://scalewithsearch.com/for/real-estate/real-estate-website-platforms-ownership-idx) - [Search, content, and AI](https://scalewithsearch.com/for/real-estate/real-estate-search-content-ai) - [Inquiries, campaigns, and handoffs](https://scalewithsearch.com/for/real-estate/real-estate-website-inquiries-campaigns-handoffs) - [Buyer, seller, and local pages](https://scalewithsearch.com/for/real-estate/real-estate-buyer-seller-local-resources) - [Rules, privacy, and trust](https://scalewithsearch.com/for/real-estate/real-estate-website-rules-privacy-trust) - Browse by business - [Trades and home services](https://scalewithsearch.com/for/#group-trades) - [Health, wellness, and animal care](https://scalewithsearch.com/for/#group-practices) - [Law, finance, and IT](https://scalewithsearch.com/for/#group-professional) - [Marketing and SEO agencies](https://scalewithsearch.com/for/#group-agencies) - [Shops and manufacturers](https://scalewithsearch.com/for/#group-manufacturing) - [Restaurants, shops, studios, and nonprofits](https://scalewithsearch.com/for/#group-local-services) - Chiropractic practices - [Chiropractic and wellness practices](https://scalewithsearch.com/for/chiropractic-and-wellness-practices) - [Chiropractic and physical therapy clinics](https://scalewithsearch.com/for/chiropractic-and-physical-therapy-clinics) - [All industries](https://scalewithsearch.com/for/) - Resources - Free tools - [AI readiness check](https://scalewithsearch.com/check) - [Free tools](https://scalewithsearch.com/tools/) - [Free Starter Kit](https://scalewithsearch.com/kit/business-memory-starter-kit.zip) - Guides - [AI-native library](https://scalewithsearch.com/ai-native) - [Industry intelligence](https://scalewithsearch.com/intelligence) - [Office job guides](https://scalewithsearch.com/guides/) - [Business memory](https://scalewithsearch.com/articles/business-memory-for-ai-agents-guide) - [Agent governance](https://scalewithsearch.com/articles/ai-agent-governance-guide-small-business) - [Migration and ownership](https://scalewithsearch.com/articles/leaving-vendor-ai-memory-guide) - Articles - [All articles](https://scalewithsearch.com/articles/) - [What changed](https://scalewithsearch.com/changes/) - About - Evidence - [Proof](https://scalewithsearch.com/proof) - Scale With Search - [About](https://scalewithsearch.com/about) - [How it works](https://scalewithsearch.com/how-it-works) # hCaptcha vs reCAPTCHA vs Turnstile for agent inquiry forms Choose hCaptcha, Google reCAPTCHA, or Cloudflare Turnstile by your form's supported integration, the visitor experience you approve, and the maintenance you can assign. Require verification evidence and a received buyer or seller test inquiry before accepting the change. Start with the form you have. Ask its maintainer to identify the provider, exact mode, account owner, and verification method. Use the comparison below to evaluate a supported replacement. The selection criteria and test plan are recommendations, not measured results from your website. ## Check which service your form supports Have the maintainer name the form platform or plugin and its installed version. Request its current documentation for the proposed CAPTCHA integration. Confirm the supported mode as well as the provider's name. WPForms supplies one documented example: its reCAPTCHA, hCaptcha, and Cloudflare Turnstile integrations are available in all versions, including Lite. That establishes options for WPForms, not compatibility with every agent website. [WPForms spam-protection documentation, checked 2026.10.14](https://wpforms.com/docs/how-to-prevent-spam-in-wpforms/). Turnstile can be embedded without routing your website traffic through Cloudflare's network. Its use does not require Cloudflare's CDN. [Turnstile overview, checked 2026.10.14](https://developers.cloudflare.com/turnstile/). For a custom form, request a demonstration of the complete connection before choosing a provider. For an embedded form controlled by another company, ask that company to confirm its available options. Leave an unsupported integration unresolved in the website brief. ## Compare the challenge a buyer or seller encounters Compare specific modes rather than treating each brand as one visitor experience. | Service | Documented behavior | Decision for your inquiry form | | --- | --- | --- | | hCaptcha | The standard widget uses a challenge flow. Invisible mode removes the checkbox but can still present a challenge. [Developer guide](https://docs.hcaptcha.com/), [invisible-mode guide](https://docs.hcaptcha.com/invisible/), checked 2026.10.14. | Ask which mode and plan the proposal uses. Demonstrate the visitor's recovery when a challenge appears. | | Google reCAPTCHA | v2 includes checkbox and invisible-badge options; either can present a challenge. v3 returns a score without visitor interaction. [Google's version guide, checked 2026.10.14](https://developers.google.com/recaptcha/docs/versions). | Have the maintainer specify v2 or v3. For v3, require a written decision about how the form handles the score. | | Cloudflare Turnstile | Managed mode can require a checkbox interaction. Non-Interactive mode displays a widget without interaction. Invisible mode displays no widget. [Widget modes, checked 2026.10.14](https://developers.cloudflare.com/turnstile/concepts/widget/). | Request the exact mode in the demonstration. Inspect how the page communicates a verification failure. | hCaptcha distinguishes invisible mode from fully passive mode. Its fully passive mode requires Enterprise access and consumption of the risk score. Do not accept an invisible setting as proof that nobody will face a challenge. [hCaptcha mode distinctions, checked 2026.10.14](https://docs.hcaptcha.com/invisible/). Google tells developers to verify the v3 response and expected action on the backend, then choose behavior using the score. Have the maintainer explain that decision for seller and buyer requests. Ask who reviews a legitimate inquiry that the chosen rule rejects. [reCAPTCHA v3 implementation, checked 2026.10.14](https://developers.google.com/recaptcha/docs/v3). Evaluate access on your proposed page. hCaptcha documents a text-based accessibility challenge when enabled, plus an accessibility authorization route. It calls for evaluation of the particular implementation. [hCaptcha accessibility guidance, checked 2026.10.14](https://www.hcaptcha.com/accessibility). Request keyboard and assistive-technology checks for every candidate. Inspect the challenge, correction instructions, and approved alternative contact route. Make the observed result part of the selection record. ## Compare account costs and responsibility Use the plan that supports your selected behavior. Keep service charges separate from installation and maintenance work in the proposal. Cloudflare publishes Free and Enterprise Turnstile plans. Both include unlimited challenges, while widget and hostname allowances differ. [Turnstile plans, checked 2026.10.14](https://developers.cloudflare.com/turnstile/plans/). Google publishes assessment-based pricing with a free allowance and paid arrangements. Its free allowance aggregates use across an organization. Ask which project and organization own your implementation before estimating its cost. [Google reCAPTCHA pricing, checked 2026.10.14](https://cloud.google.com/recaptcha/pricing). hCaptcha documents a free Basic tier and paid Pro and Enterprise options. Pro billing combines a subscription with additional usage charges. [hCaptcha Pro plans and billing, checked 2026.10.14](https://docs.hcaptcha.com/pro/). Request a dated estimate for the actual account, expected usage, and chosen mode. Name who owns billing, maintains the connection, and handles service changes. Choose against those terms and the demonstration rather than a universal vendor ranking. ## Require verification beyond the visible widget Each provider documents server-side verification. hCaptcha requires a verification request using the account secret and submitted token. Google documents verification of the response token. Cloudflare states that its client-side widget alone does not protect a form. [hCaptcha verification](https://docs.hcaptcha.com/#verify-the-user-response-server-side), [Google verification](https://developers.google.com/recaptcha/docs/verify), [Turnstile validation](https://developers.cloudflare.com/turnstile/get-started/server-side-validation/), checked 2026.10.14. Ask the maintainer to demonstrate this sequence in a controlled environment: obtain a token, verify it, apply the verification result, and process the accepted inquiry. Require an invalid-token check too. Keep secret keys out of screenshots and ordinary project documents. Expiry is worth testing on a seller form where someone may pause while writing. Google's response tokens last two minutes and can be verified once. Turnstile tokens last five minutes and are single-use. hCaptcha also documents single-use tokens that require verification within a short period. [Google token rules](https://developers.google.com/recaptcha/docs/verify), [Turnstile token rules](https://developers.cloudflare.com/turnstile/get-started/server-side-validation/), [hCaptcha token rules](https://docs.hcaptcha.com/#verify-the-user-response-server-side), checked 2026.10.14. Have the maintainer test expiration against the selected provider's documented behavior. Require a way to retry without silently discarding the visitor's question. Inspect recovery from an unavailable verification service in the controlled environment. Agree what the visitor sees and who receives the repair alert. - [Fix reCAPTCHA domain errors on your agent website](/articles/fix-recaptcha-domain-key-agent-contact-form) ## Review visitor data and the privacy notice A CAPTCHA tool may process visitor data. Cloudflare lists client IP addresses, browser-related signals, and the sitekey with its associated origin. hCaptcha's privacy policy describes information processing through its service. Google states that reCAPTCHA sets a necessary cookie for risk analysis. [Turnstile Privacy Addendum](https://www.cloudflare.com/turnstile-privacy-policy/), [hCaptcha privacy policy](https://www.hcaptcha.com/privacy), [Google reCAPTCHA FAQ](https://developers.google.com/recaptcha/docs/faq), checked 2026.10.14. Cloudflare requires a reference to its Turnstile Privacy Addendum in your privacy policy when enabling invisible mode. hCaptcha's invisible-mode documentation supplies required disclosure text and privacy and terms links. [Cloudflare invisible-mode condition](https://developers.cloudflare.com/turnstile/concepts/widget/), [hCaptcha disclosure instructions](https://docs.hcaptcha.com/invisible/), checked 2026.10.14. Have your privacy reviewer examine the selected configuration and disclosures. Use the [CCPA applicability guide](/articles/ccpa-applicability-agent-website) to prepare coverage questions. Use the [website inquiry retention guide](/articles/website-lead-retention-schedule-agent) to inventory records and their owners. Keep any legal conclusion with your reviewer. ## Accept the provider change against your inquiry path Agree the test plan before installation. Use contact details you control and labeled seller and buyer questions. These are proposed acceptance checks: 1. Complete the actual inquiry page on a phone and with a keyboard. Save the selected provider, mode, and visible result. 2. Exercise verification failure and expiry in the controlled environment. Inspect retained entries, correction instructions, and the approved alternative route. 3. Have the maintainer show that an invalid verification token is rejected by the server. Record the result without exposing credentials. 4. Submit an accepted inquiry through the normal page. Compare the received question and contact details with the original test. 5. Confirm that the intended recipient can find the matching inquiry. Save the receipt with the page, time, and verification result. Keep CAPTCHA verification and inquiry receipt as separate acceptance checks. Use the [seller inquiry-path checklist](/articles/seller-inquiry-path-agent-website) for the wider delivery review. Record failures and repeat the affected checks after repair. A passed demonstration documents that test; it promises no future inquiry or response result. ## Specify CAPTCHA selection and testing Your CAPTCHA worksheet identifies supported connections, visitor recovery, and privacy requirements. Request the specific form repair at [whole website fix: CAPTCHA recovery](/for/real-estate). The whole website fix checks a test submission's arrival. [Published whole website fix scope, checked 2026.10.14](https://scalewithsearch.com/work). - [Test the seller inquiry path on your real estate website](/articles/seller-inquiry-path-agent-website) - [Check your real estate website in 30 minutes](/articles/real-estate-website-audit) - [Own your real estate website: domain, hosting, editing, and leads](/articles/own-your-site) ## Related: Real estate - [Test the seller inquiry path on your real estate website](/articles/seller-inquiry-path-agent-website) - [Check your real estate website in 30 minutes](/articles/real-estate-website-audit) - [Own your real estate website: domain, hosting, editing, and leads](/articles/own-your-site) ---- ```text .|########||. .|########||. .|########||. |##||. .||##|. |##||. .||##|. |##||. .||##|. |#|. .|#|. |#|. .|#|. |#|. .|#|. |#| |#| |#| |#| |#| |#| .#| |#. .#| |#. .#| |#. .#. .#| .#. .#| .#. .#| |#. .#| |#. .#| |#. .#| |# ...... #| |# ...... #| |# ...... #| .# ||#########| #| .# ||#########| #| .# ||#########| #| .#. |######||######|. .#. .#. |######||######|. .#. .#. |######||######|. .#. #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# #. .##|###|##|#|######| .# || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || || |##|#||||||||||||#||#| || # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. # |#||||||||||||||||||||#| #. || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # # .#||||||||||||||||||||||||#| # || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || || ....|||#||||||##|#|||#|#||##||||....|. || #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# #. . ....|# ....#||| ||| .#||| ....#. .# # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. # . ||||#| .#####|| . .#| .#||| ||||# #. .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || .| ||||| #. |#|||||. || #. |#||. .||||| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || || |.... #. ....|#. |. ...|. ....|| || #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# #. .||||||##||||||##||####|||||||#||||||#| .# # .||####|###########################|. # # .||####|###########################|. # # .||####|###########################|. # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#||||||.#.|| # |. ..# #| #|||||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||||| .. |# ## |#| ...#|#|||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#|||#|# .# .#| #| ##|.#..#|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # .#||||||############|######|||||#| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # # |...||#||||||#||||#|#||||||#|||||#||| |.| # #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# #. .. ||||# .|||##|. |#| .|| || .|||#. #| # .# || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || | ...|| ...##| | #| .|. |. ##### .. .| || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || || ||||| || ||||#| . |. |. |#. ||||| |#| || || .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. .# |.....#|....|#.||||.|||##.|#|....||.#||.#. #. #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# #.|||||||#############################| ||| .# || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || || ##||#||#||||||#||#||#||#||##. || # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # # .#|||||||||#||#|||||||||||#| # || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || || |#||||||||||||||||||||||#| || .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. .# |#||||||||||||||||||||#| #. || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || || |#||||||||||||||||||#| || #. .######|#|#########| .# #. .######|#|#########| .# #. .######|#|#########| .# .#. |#####||||#####| .#. .#. |#####||||#####| .#. .#. |#####||||#####| .#. |# ||########|| #. |# ||########|| #. |# ||########|| #. |# ...... #| |# ...... #| |# ...... #| |#. .#| |#. .#| |#. .#| |#. .#. |#. .#. |#. .#. .#| |#. .#| |#. .#| |#. |#| |#| |#| |#| |#| |#| .|#|. .|#|. .|#|. .|#|. .|#|. .|#|. |##||. .||##| |##||. .||##| |##||. .||##| .||########||. .||########||. .||########||. Scale With Search 2026 [scalewithsearch.com](https://scalewithsearch.com) ```