Server-signed, dignity-preserving human verification. Score computed inside the Cloudflare Worker with a secret the browser never sees. No puzzles, no surveillance.
Worker: cross-origin Captchaless HMAC-SHA256 3 modes
Diagnostics use the /hv10/passive path. The embed code + preview update from your Sitekey, Endpoint, and mode.
https://hv10-dashboard.pages.dev URL, not from disk (file://) — browsers block cross-origin fetch from file pages.Developers paste this before </body>. It exposes window.HV10.verify() and auto-protects any <form data-hv10> with a hidden hv10_token field. Checkbox mode also renders into <div data-hv10-widget></div>.
No token yet.
Not checked yet.