We believe in the power of digital technology and co-creation. This blog is our contribution to our community of technology enthusiasts and learners. Enjoy!
Two separate trackers now count more bot traffic on the web than human traffic. Business owners keep reaching for a better CAPTCHA, but on the old puzzles that fight is lost: free, locally run AI models beat 92.6% of real reCAPTCHA sessions in a September 2026 paper. What still works is asking for something a bot cannot fake cheaply at scale: hardware, money, identity or history.
A free, locally run vision model now solves reCAPTCHA's image puzzles 92.6% of the time, without paying anyone or calling an API. Meanwhile a newer generation of CAPTCHA still beats most AI agents, and a plain image grid can get a small business sued for being inaccessible. Here is what the research says a CAPTCHA is good for in 2026, and where it stops.
Small-site owners on Hacker News describe the same fight: a contact form full of junk, a signup form running up an SMS bill for numbers that never convert. The fixes that hold up are boring: a hidden field, a free widget, a rate limit keyed to the account instead of the IP. Here is the order I would add them in, and where the real money risk hides.
Every vendor in this space says "book a demo." A handful say the number out loud. We read every pricing page ourselves, on the same day, and found three groups: free tools that cover most small sites, a metered middle tier whose bill rises with a bot flood, and an enterprise tier whose published contracts start at $45,960 a year.
Amazon won a court order against Perplexity's shopping agent in March 2026 and lost it on appeal in August. Meanwhile Visa, Mastercard, Google, Stripe and OpenAI are building the plumbing that lets an agent pay a merchant directly. Blocking everything with "AI" in the user agent string is the easy move, and for a growing slice of your traffic, the wrong one.
A practical guide to securing your Next.js application against the React2Shell vulnerability (CVE-2025-55182). Includes step-by-step instructions, code examples, and a copy-paste checklist.
About fifteen questions, five minutes — Shyam writes it himself, free.
