GetUniq provides a bot verification platform that uses a lightweight JavaScript SDK and REST API to assess client behavior and issue risk‑based challenges such as image, audio, or logic puzzles. The service returns HMAC‑signed tokens for server‑side validation, enabling e‑commerce, SaaS, and other web applications to protect login, checkout, and content endpoints with minimal UI impact. A dashboard offers real‑time analytics and configurable rate‑limiting for monitoring and response.
Funding
Funding not disclosed
Founders
Product
Problem
Automated scripts and bots can bypass login forms, scrape protected content, and execute fraudulent transactions, leading to revenue loss and security breaches for online services. Traditional CAPTCHAs often degrade user experience and are increasingly circumvented by advanced bots. Organizations therefore need a reliable, low-friction method to distinguish human users from automated traffic.
Solution
GetUniq delivers a bot verification platform that integrates programmable challenge flows into web applications via a lightweight JavaScript SDK and RESTful verification API. The service evaluates client behavior in real time, applying risk‑based scoring to decide whether to present an invisible or interactive challenge. Challenges include image, audio, and logic puzzles that are dynamically generated to resist machine learning attacks. Verification tokens are signed with HMAC and can be validated server‑side to enforce access control on login, checkout, or content endpoints. All interactions are encrypted in transit, and the platform provides a centralized dashboard for monitoring traffic patterns, false‑positive rates, and compliance metrics. Integration requires only a few lines of code, enabling developers to protect high‑value flows without redesigning the user interface.
Target Audience
The primary customers are e‑commerce platforms, SaaS providers, and web developers who need to secure authentication, payment, and content‑access endpoints against automated abuse.
Features
- JavaScript SDK with auto‑injection of adaptive challenges and fallback to invisible mode
- Real‑time risk engine that combines device fingerprinting, mouse/keyboard dynamics, and IP reputation
- REST API for token validation, supporting JSON Web Tokens (JWT) signed with HMAC‑SHA256
- Configurable challenge types (image selection, audio transcription, logic puzzles) to thwart AI‑based solvers
- Rate‑limiting and throttling rules per endpoint to mitigate credential stuffing attacks
- GDPR‑compliant data handling with minimal PII storage and explicit consent hooks
- Analytics portal with live traffic heatmaps, bot detection statistics, and alert thresholds
- Webhook integration for event‑driven workflows (e.g., block IP, trigger MFA)