// crytify — request trust engine for developers

Decide
before
you render.

One call before your page renders. Crytify returns allow, challenge, or block — bots never see protected content.

stops scraper bots blocks fake signups catches checkout fraud

1,000 free credits/day · no credit card

$ start --free $ man crytify
crytify — decision console live · this is you
$ POST /v1/trust ip=216.73.216.53 path=/
├─ network   US · AS16509 · Anthropic, PBC
├─ type      hosting
├─ signals   4/28 matched
└─ decision  BLOCK trust 0 · risk 100 · 32ms
$
integration
require 'crytify.php';  crytify_gate('cry_live_••••••••'); // that's the whole integration
01

decisions

One API call, three possible outcomes. You act on the string, Crytify carries the reasoning.

→ ALLOW     proceed normally — request passed every check
→ CHALLENGE visitor proves themselves on a hosted challenge page
→ BLOCK     denied before anything renders
trust_score  0–100 · how human this looks
risk_score   0–100 · weighted detector evidence
reasons[]    public categories · auditable, no black box

// deploy at the paths attackers actually hit

/login challenge risky sessions before credential attempts
/checkout screen payment attempts before payment steps render
/api/* gate expensive or private endpoints with one decision
/account protect dashboards and documents pre-render

works with: PHP · Next.js · Express · Laravel · CodeIgniter · WordPress · custom APIs

02

api

POST /v1/trust 2 / 4 / 8 cr
// full request context in
{ "ip": "203.0.113.5", "user_agent": "...", "path": "/checkout", "headers": {...} }
// one decision out
{
"decision": "challenge",
"trust_score": 42,
"risk_score": 61,
"reasons": ["identity_risk", "request_risk"]
}

the core endpoint — evaluates all 27 detectors, returns the verdict

POST /v1/ip 1 cr
// an address in
{ "ip": "8.8.8.8" }
// raw intelligence out — no decision, just signal
{
"country": "US",
"asn": "AS15169",
"org": "Google LLC",
"network_type": "business",
"risk_category": "network_risk"
}

geo, ASN, org, network type — use the signal however you want

GET /v1/usage & /v1/me — free, no credits consumed

03

protection_modes

Match strictness to the sensitivity of the page — per request, not per site.

  easy medium · default hard
cost 2 credits 4 credits 8 credits
posture low friction — never challenges, only blocks obvious threats balanced — challenges suspicious, blocks confirmed threats strict — challenges by default, only high-trust passes freely
challenge page — ✓ ✓
best for content pages, marketing dashboards, accounts, forms login, admin, checkout, APIs
04

self_learning

Failed challenges, confirmed automation, and abusive fingerprints feed a shared reputation network. An attacker burned on one protected site arrives pre-flagged at every other one.

It compounds: every request makes the next decision sharper.

38,899+ trust decisions processed since launch
// what the network remembers
learn failed challenge → ip reputation lowered
learn confirmed automation → fingerprint flagged
learn abusive network → whole range distrusted
// and how it answers later
next visit same actor, any site → pre-flagged
reasons[] stays public — every decision auditable, no black box
05

pricing

Credits represent compute — deeper checks cost more. Every plan gets every feature; plans only change volume.

free
$0 /forever

1,000 / day

promo: 10,000/day until Jan 1, 2027

$ start
starter POPULAR
$10 /month

10,000 / day

$ start
growth
$29 /month

100,000 / day

$ start
business
$99 /month

1,000,000 / day

$ start
/v1/trust · 2, 4, or 8 credits by mode /v1/ip · 1 credit /v1/usage, /v1/me · free all endpoints, modes, and dashboard on every plan

// ship it before the next bot wave

Decide before you render.

$ start --free $ man crytify

1,000 free credits/day · no credit card · no commitment