Stop bots before they reach your database.

ERRICtrap is a server-side CAPTCHA alternative that blocks fake registrations and automated submissions before they become database writes. When traffic is clearly hostile, ERRICbog quarantines it so attackers waste time — not your resources.
No puzzles for real users Server-side scoring Protects POST / write endpoints Quarantine mode (bog)
Protect database writes
Focus on the moment data is saved — not just page views.
Runs on your server
Fast, private, compatible with existing stacks.
Quarantine suspicious traffic
Bots sink into the bog while legitimate users proceed normally.
ERRICtrap™
Entry Verification Layer
  • Scores each request: Allow / Challenge / Quarantine
  • Stops fake signups & spam submissions
  • Designed to protect write endpoints (POST, forms, registrations)
  • PHP-first MVP, expandable to other stacks
ERRICbog™
Automated Traffic Quarantine
  • Routes high-risk traffic away from real endpoints
  • Sticky slowdowns + non-productive routes
  • Optional logging to identify repeating patterns
  • Goal: attackers waste time; your database stays clean
ERRICtrap vs CAPTCHA
CAPTCHA tools are front-end challenges. They can frustrate real users and still miss automated POST abuse. ERRICtrap is built for server-side request scoring before database writes occur.
Tip: Many sites use CAPTCHA and still get polluted databases. ERRICtrap is designed specifically to prevent that.
Starter Plan
For small sites and first deployments
  • Protect up to 3 endpoints
  • Server-side scoring
  • Basic quarantine routing
  • 3 months free
  • $29/month after trial
Best for: signup forms, contact forms, small web apps.
Pro Plan
Full control + ERRICbog quarantine
  • Protect unlimited endpoints
  • ERRICbog quarantine mode
  • Request logging (optional)
  • 3 months free
  • $79/month after trial
Best for: SaaS, membership sites, high-volume registrations.
Request a 3-month trial
Tell us your website and stack. We’ll reply with onboarding steps.
No spam. You can unsubscribe anytime.
Admin note: set $FORM_SIGNING_SECRET to a long random string for maximum protection.