Products Included with Shield Pro
AZET Gate
Add one script tag to a form. Gate reads how the form was filled in, not what was typed, and decides whether a person or automation is behind it. People never see a puzzle.
What it does today
Reads behaviour, not content
Gate looks at how the form was filled in: pointer strokes, taps, the rhythm of key presses, fields filled without typing, how long the visit took and how the form was sent. What you type is not sent to Gate.
Pass, block or a background check
People are passed and the form goes through. Automation is stopped before the form is sent. When Gate is unsure, the browser solves a short proof of work in the background, then the form goes on; there is still nothing to click.
Your server confirms every pass
A passed form carries a token in the hidden field
azet-gate-response. Your server sends it with your secret to/v1/siteverify; tokens expire and work once, so a copied token is refused.Watch before you block
With
data-mode="monitor"Gate records its decision and leaves every submission alone, so you can see what it would block before you turn blocking on.Decisions you can read
Each check is turned into a plain-language account of the visit, and Gate decides from that account. The demo at gate.azet.io shows it; a production site receives only the decision.
Little kept, for a short time
IP addresses are stored only as keyed hashes, and decision records are deleted after 90 days.
One script tag. <script src="https://gate.azet.io/v1/gate.js" data-sitekey="…" defer></script> after the form. Without data-form it protects every form with a submit button on the page.
In use on a live form. On a Korean business contact form we run, Gate watched in monitor mode from 4 October to 4 November 2026. It would have blocked 84 of 91 checks, and every one of those came from a headless or scripted browser; the 7 visits by people on phones and computers were passed or given the background check. That form has blocked since 11 November 2026.
Not yet
- Self-serve site keys. Keys are issued by hand for now; ask at hello@azet.io.
- Browsers without JavaScript. The widget cannot run there, so the form arrives without a token. Your server decides what to do; we suggest accepting and flagging it rather than turning a person away.
- A guarantee. Someone driving real browsers with human-like input can get through. Gate makes form spam slower and more expensive; it does not end it.
Gate protects website forms. It is not a firewall and does not watch the rest of your site; AZET Shield does that for your servers.
At a glance
| Status | Live at gate.azet.io · included with AZET Shield Pro |
|---|---|
| Operated by | AZET LLC |
| Works with | Any HTML form, with one script tag |
| Server check | POST /v1/siteverify with your secret |
| Modes | Block (default) or monitor |
| Your data | Typed text is not sent; IP addresses kept only as keyed hashes; records deleted after 90 days |
| Based on | LocalCan/invisible-captcha (MIT) |
| Help | hello@azet.io |
See how Gate reads a form.
Try the demoNo puzzle for people · one script tag · your server confirms each pass