CertiLayer tells real humans from bots by how they move, type, and scroll — passively, in the background. No CAPTCHAs. No personal data. Zero friction for the people you actually want on your site.
A four-stage pipeline that runs entirely server-side, invisible to users, and impossible to game.
Our 5.5KB SDK silently captures behavioral signals — keystroke dynamics, mouse patterns, scroll behavior, and touch gestures — without any user interruption.
L1 SDK34 behavioral features are extracted per session — IKI timing, mouse curvature, scroll entropy, touch pressure, and motion jitter — forming a rich signal vector.
L2 IngestionFour ML models run in sequence: rule-based gates, Siamese LSTM identity verification, XGBoost bot classification, and contrastive autoencoders for anomaly detection.
L3 HCE EngineA single HCS value between 0.0 and 1.0 is returned in under 10ms. Your policy engine decides in real time: allow, challenge, tarpit, or block.
L5 Trust EngineBuilt for security engineers who want real signals, not checkbox compliance.
Continuous passive monitoring of 34 behavioral features. No interruption to the user journey.
Velocity curves, micro-adjustments, click patterns, and direction entropy — all without screenshots.
IKI timing, dwell time, flight time, burst scoring — uniquely identifying typing cadence per user.
A single HCS value 0.0–1.0 with configurable thresholds, policy rules, and silent enforcement.
4-model pipeline: rule gates, Siamese LSTM, XGBoost, contrastive autoencoders. AUROC up to 0.9994.
No names, no emails, no device IDs. Only behavioral embeddings — GDPR and CCPA compliant by design.
A 5.5KB Web SDK, plus Node.js and Python SDKs for your backend — React Native in beta.
import { init } from '@certilayer/web'
const certilayer = init({
apiKey: 'certilayer_live_pk_xxxxxxxxxxxx'
})
const sessionId = certilayer.getSessionId()
await fetch('/api/checkout', {
headers: { 'X-CertiLayer-Session': sessionId }
})Start free. No credit card required. Save ~17% with annual billing.
Try it on a real integration — no credit card required.
For small products getting their first real traffic.
For growing products that need reliable protection at scale.
For platforms with serious volume and uptime requirements.
Dedicated infrastructure, SLAs, and compliance.
Start protecting your product in minutes. No CAPTCHAs. No PII. No friction.
Free forever · No credit card required · Setup in 5 minutes