Turnstile alternative: Antisy or Cloudflare Turnstile, by the documentation of each

Looking for a Turnstile alternative? Antisy and Turnstile both verify, from your server, a token sent with the form, with no image to recognise. They differ in the company that operates the service, in the display modes and in the state of the offer: Turnstile is available today; Antisy is on a waiting list.

As of 27 October 2026.

The table: Antisy and Cloudflare Turnstile

Antisy and Cloudflare Turnstile, point by point
Criterion	Antisy	Cloudflare Turnstile
Company and legal framework	Antisy Sàrl, a Swiss company entered in the Geneva commercial register. The API and the dashboard (in French) are hosted at Infomaniak, in Geneva, and have been in service since 27 October 2026.	Cloudflare, Inc. The privacy addendum says that Cloudflare is a processor of the signals processed to provide Turnstile to its customers, and a controller of those it processes to improve bot detection. The data localisation compatibility page notes that the regionalisation of the Siteverify API is not yet ensured. [4] [7]
What the visitor sees	Nothing: no checkbox and no puzzle. The visitor’s browser only does a short computation in the background.	Three modes. In “managed” mode, an interaction is required only if an additional check is needed: the visitor then ticks a box, with no image or text to decipher. In “non-interactive” mode, a widget is visible but never requires an interaction. In “invisible” mode, the visitor sees neither a widget nor any indication. [1]
Cookies and storage	Neither the verification script nor the API sets a cookie, and the script writes nothing to the browser’s storage. The data the script measures and the data the server reads are listed, with their retention periods, on the home page and in the frequently asked questions.	The privacy addendum refers to the cookie policy of Cloudflare. The optional pre-clearance feature (Pre-Clearance) has Turnstile issue a cookie. [3] [4]
Integration	A `<script>` tag in the page; on submission, the script puts a short token in the hidden field `antisy-token`; your server sends it to `POST /v1/siteverify` with its secret and reads `allow` or `deny`.	A script loaded from `https://challenges.cloudflare.com/turnstile/v0/api.js`, which must be loaded from that exact address; a hidden field `cf-turnstile-response` carries the token. The server verifies it with `POST https://challenges.cloudflare.com/turnstile/v0/siteverify`; a token is valid for 300 seconds and can be verified only once. [5] [6]
Public prices	Free: CHF 0, 2,500 checks per month and 1 site, no credit card. Standard, Pro and Enterprise: on quote. Access is by waiting list; nothing is paid online.	Free plan: up to 20 widgets and unlimited challenges. The Enterprise plan is negotiated with the sales team, with no published price. [2]

Company and legal framework

Antisy

Antisy Sàrl, a Swiss company entered in the Geneva commercial register. The API and the dashboard (in French) are hosted at Infomaniak, in Geneva, and have been in service since 27 October 2026.

Cloudflare Turnstile

Cloudflare, Inc. The privacy addendum says that Cloudflare is a processor of the signals processed to provide Turnstile to its customers, and a controller of those it processes to improve bot detection. The data localisation compatibility page notes that the regionalisation of the Siteverify API is not yet ensured. [4] [7]

What the visitor sees

Antisy

Nothing: no checkbox and no puzzle. The visitor’s browser only does a short computation in the background.

Cloudflare Turnstile

Three modes. In “managed” mode, an interaction is required only if an additional check is needed: the visitor then ticks a box, with no image or text to decipher. In “non-interactive” mode, a widget is visible but never requires an interaction. In “invisible” mode, the visitor sees neither a widget nor any indication. [1]

Cookies and storage

Antisy

Neither the verification script nor the API sets a cookie, and the script writes nothing to the browser’s storage. The data the script measures and the data the server reads are listed, with their retention periods, on the home page and in the frequently asked questions.

Cloudflare Turnstile

The privacy addendum refers to the cookie policy of Cloudflare. The optional pre-clearance feature (Pre-Clearance) has Turnstile issue a cookie. [3] [4]

Integration

Antisy

A <script> tag in the page; on submission, the script puts a short token in the hidden field antisy-token; your server sends it to POST /v1/siteverify with its secret and reads allow or deny.

Cloudflare Turnstile

A script loaded from https://challenges.cloudflare.com/turnstile/v0/api.js, which must be loaded from that exact address; a hidden field cf-turnstile-response carries the token. The server verifies it with POST https://challenges.cloudflare.com/turnstile/v0/siteverify; a token is valid for 300 seconds and can be verified only once. [5] [6]

Public prices

Antisy

Free: CHF 0, 2,500 checks per month and 1 site, no credit card. Standard, Pro and Enterprise: on quote. Access is by waiting list; nothing is paid online.

Cloudflare Turnstile

Free plan: up to 20 widgets and unlimited challenges. The Enterprise plan is negotiated with the sales team, with no published price. [2]

This table compares neither detection rates nor speed: Antisy publishes none. The facts about Cloudflare Turnstile come from its official documentation, read on 27 October 2026; the numbers refer to the sources, at the bottom of the page.

Where does Antisy stand?

Access is by waiting list. The API and the dashboard (in French) have been in service since 27 October 2026, hosted at Infomaniak in Geneva; no customer is in production yet.

See also: The pilot · Join the waiting list

Looking for a Turnstile alternative? When to choose one or the other

Choose Cloudflare Turnstile if…

you want a service available today, with a free plan and no limit on challenges;
you want to choose between a widget that sometimes asks for a click (“managed”), a visible widget that never asks for one (“non-interactive”) and a mode with no widget (“invisible”);
your site already goes through Cloudflare and you want to stay with the same provider.

Choose Antisy if…

you want the visitor to see neither a checkbox nor a widget;
you want a contract with a Swiss company and an API operated in Geneva, at Infomaniak;
you want a verification script that sets no cookie;
you accept going through the waiting list: access is not open yet and no customer is in production.

Frequently asked questions

Does Antisy do the same thing as Turnstile?

Both avoid images to recognise and give your server what it needs to decide, from a token to verify. Turnstile shows a widget in two of its three modes; Antisy shows nothing. Antisy returns a verdict with two outcomes, allow or deny, with no reason.

These pages do not compare effectiveness: Antisy announces no detection rate.

Where is the data processed with each one?

For Antisy, the API and its database are hosted at Infomaniak, in Geneva, in service since 27 October 2026. For Turnstile, the data localisation compatibility page of Cloudflare notes that the regionalisation of the Siteverify API is not yet ensured.

Which one is free?

Turnstile: the free plan goes up to 20 widgets, with unlimited challenges. Antisy: the Free tier, 2,500 checks per month for 1 site, no credit card; it is not open yet, access is by waiting list.

Can Antisy be used today?

Access is by waiting list. The API and the dashboard (in French) have been in service since 27 October 2026, hosted at Infomaniak in Geneva; no customer is in production yet. A pilot is planned; it has not started.

Sources

Official pages of Cloudflare Turnstile, read on 27 October 2026.

Cloudflare Turnstile: the widget modes: https://developers.cloudflare.com/turnstile/concepts/widget/
Cloudflare Turnstile: the plans (updated on 14 August 2026): https://developers.cloudflare.com/turnstile/plans/
Cloudflare Turnstile: frequently asked questions: https://developers.cloudflare.com/turnstile/frequently-asked-questions/
Cloudflare Turnstile: privacy addendum (18 June 2025): https://www.cloudflare.com/turnstile-privacy-policy/
Cloudflare Turnstile: display the widget (client-side rendering): https://developers.cloudflare.com/turnstile/get-started/client-side-rendering/
Cloudflare Turnstile: validate the token on the server side: https://developers.cloudflare.com/turnstile/get-started/server-side-validation/
Cloudflare: data localisation compatibility: https://developers.cloudflare.com/data-localization/compatibility/