Skip to main content
We’ve tested our challenges extensively against leading AI vision models, including GPT-5, Claude Sonnet 4, and Gemini 2.5 Pro. In our testing (conducted September 2025), these models achieved less than 1% accuracy and frequently hallucinated or timed out entirely.However, AI capabilities evolve quickly. We continuously test against new model releases and update our challenges when needed. Our time-based verification system provides an additional layer of security, even if an advanced AI bot occasionally succeeds, it will be caught at the next checkpoint.We’re transparent about this: no challenge is permanently unbreakable. Our goal is to stay ahead of automated systems while keeping the experience seamless for human visitors.
No. Our security checks run on a highly optimized global edge network. For most users, the difference in latency is negligible and often imperceptible. We strongly recommend using the “DNS Only” setting for your CNAME record to ensure the fastest possible connection.
The easiest way is to try and access your site from a new private Browse window, you may be presented with a challenge. Over time, you should also notice a significant drop in spam comments, junk form submissions, and suspicious traffic in your server logs.
Kyvic protects your site, but it can’t serve your content if your origin server is offline. Visitors will see our captcha challenge, but after solving it, they will receive an error message since we cannot connect to your server.
Currently, we offer a standard, clean interface designed for clarity and speed. We are planning to introduce customization options for our business customers in the future.
Absolutely not. Protecting your site’s SEO is a core principle of Kyvic. Our system leverages Cloudflare’s powerful bot detection to intelligently analyze your traffic before it even reaches your site.We have configured our system to automatically identify and grant access to verified bots that are beneficial to your site’s visibility and operations. This includes bots in categories such as:
  • Search Engine Crawlers: These bots index your site for search results. (e.g., Googlebot, Bingbot, YandexBot, DuckDuckGo Bot)
  • Search Engine Optimization (SEO): These are tools you or your marketing team might use to analyze and improve your site’s ranking and performance. (e.g., Google Lighthouse, AhrefsBot, SemrushBot, Moz’s Rogerbot, Screaming Frog)
  • Advertising & Marketing: These bots verify ad placements or generate link previews for social sharing. (e.g., GoogleAdsBot, LinkedInBot, Pinterestbot)
  • Essential Webhooks: These are services that need to communicate with your site for critical functions like payment processing and automation. (e.g., Stripe, Slackbot, Zapier)
These trusted bots are always allowed to access and index your content without being challenged.Conversely, Kyvic is designed to challenge suspicious and unwanted traffic. This specifically includes aggressive AI data scrapers that harvest your content for training models, as well as other unidentified, malicious, or non-essential bots.The result is a website that is fully protected from harmful traffic while ensuring that the bots essential for your search ranking always have access.
No. Kyvic is a privacy-first service. We act as a pass-through security gateway and do not store your website’s content or any sensitive personal information from your visitors. All traffic is processed in real-time to perform security checks and is not permanently logged or stored.Please read more about this in our Privacy Policy.
This almost always happens when your website uses multiple subdomains for assets (e.g., cdn.example.com or assets.example.com). Please ensure you have added every subdomain to your Kyvic Console and configured its DNS record correctly. This is the most common setup issue.
When your account reaches 85% of your plan’s traffic limit, you’ll see a notification in your Kyvic Console and receive an email reminder to consider upgrading.Important: To avoid any service interruption, upgrade to a higher tier before hitting 100% of your limit. If your usage exceeds your plan’s allocation, your service will be automatically suspended for the remainder of the billing cycle, as outlined in our Terms and Conditions.We recommend monitoring your usage regularly, especially during traffic spikes, to ensure uninterrupted protection for your site.
We’ve got your back. If a malicious IP attempts to flood your site with excessive requests, our network automatically detects the abuse and temporarily blocks the offender to discourage further attacks.Most flood attempts come from bots and scrapers. Our system issues blocks long enough to discourage them from continuing, typically, they’ll move on to easier targets rather than persist against our defenses.This protection happens automatically in the background, so you don’t need to configure anything or take manual action.