Bot Detection

Protect your Wristband-hosted pages from brute-force attacks with Wristband's Google reCAPTCHA integration. Wristband uses real-time risk scores to identify high-risk requests and present interactive CAPTCHA challenges that help filter out automated bot traffic.

Protected Pages

Wristband CAPTCHA enforcement applies to the following pages:

• Application-level Login Page
• Tenant-level Login Page
• Application-level Signup Page
• Tenant-level Signup Page

Bot Detection Policies

Use Bot Detection Policies to configure CAPTCHA enforcement at the application and tenant levels.

Application-Level Policies

1. Open Application View for your application in the Wristband dashboard.
2. Navigate to Security → Bot Detection Policies.

The following settings are available to configure at the application level:

• Should users be required to complete a CAPTCHA during login: Controls whether CAPTCHA enforcement is enabled on your application's login pages.

  Note: Whether you can disable this setting depends on the application's environment type:

  Environment Type	CAPTCHA Disablement Allowed
  Production	❌ No
  Development	✅ Yes

Tenant-Level Policies

1. Open Tenant View for the tenant you want to configure.
2. Navigate to Security → Bot Detection Policies.
3. Select Edit Tenant Config.

The following settings are available to configure at the tenant level:

• Should users be required to complete a CAPTCHA during login: Controls whether CAPTCHA enforcement is enabled on this tenant's login pages. You can disable CAPTCHA enforcement at the tenant level for both production and development applications.

Enable Tenant Overrides

To apply tenant-level Bot Detection Policies, enable the tenant override toggle.