Cloudflare Turnstile Alternative — Bot Detection API + CAPTCHA combo (2026)

Cloudflare Turnstile is a CAPTCHA, not a fraud API. If you need Turnstile alternatives for bot detection (or a Cloudflare bot detection API to pair with Turnstile), this is the comparison: Turnstile vs SignupDoggy vs hCaptcha vs DataDome, with the 2-stage funnel pattern that catches 99%+ of bots while keeping every real user.

Cloudflare Turnstile vs a server-side fraud API: which actually wins?

Turnstile is the free, frictionless CAPTCHA alternative. It catches 95% of browser-based bots. It misses 100% of non-browser bots. A server-side fraud API like SignupDoggy catches the remaining 5% plus the non-browser bots.

The right answer: use BOTH. The 2-stage funnel pattern.

STAGE 1 — Cloudflare Turnstile (free)

- Passive challenge, no user interaction in 99% of cases
- Catches 95% of low-effort browser bots
- Free up to 1M verifications/month
- Sub-100ms verification latency

STAGE 2 — Server-side fraud API (SignupDoggy)

- Single API call after Turnstile passes
- Catches the remaining 5% of browser bots
- Catches all non-browser bots (curl, Python, Node fetch)
- Catches disposable email signups
- Catches VPN/Tor users
- $0.01 per call
- Sub-50ms p95

THE COST

Turnstile: $0.
SignupDoggy: $0.01 per call (only on the ~5% that pass Turnstile).
At 50,000 signups/month: $25/month for SignupDoggy, $0 for Turnstile.
Total: $25/month.

THE BENEFIT

A 2-stage funnel catches 99%+ of bot signups with zero user friction. The 5% bot pass-through rate from Turnstile alone is fixed by the SignupDoggy stage. The user never sees a CAPTCHA challenge.

THE CODE

The full 30-line Node.js integration is in our blog post: /blog/cloudflare-turnstile-vs-server-side-fraud-api.

The short version: Turnstile verifies a token, then you call SignupDoggy with email and IP. If SignupDoggy returns recommendation: 'block', reject the signup. Otherwise allow it. The two calls add ~150ms to your signup handler and cost $0.01 per signup that passes Turnstile.

The math: 50,000 signups/month at 95% Turnstile pass-through = 2,500 SignupDoggy calls = $25/month. The cost of NOT having the funnel: 15,000 bot rows in your database per month = $7,500/year in storage. ROI: 300x.