AWS Waf CHALLENGE vs CAPTCHA
Did you know you can save big money using WAF Challenge over WAF Captcha?
What is the difference? Captcha as you can imagine presents the potentially malicious user with a CAPTCHA to solve.
The challenge alternatively runs some code in the browser to try and determine if it is a bot or not. The most obvious way to trigger getting flagged by the CHALLENGE is is by putting a page that will run a challenge inside of an iframe. It really does not like that which is good. That will prevent malicious websites from double or single click jack attacks.
The costs differences are staggering. The CAPTCHA is $4.00 per ten thousand attempts. The challenge is $0.40 per MILLION. Notice one was measured in thousands and the other in millions. That means the CATPCHA is going to cost $400 per million as opposed to $0.40 per million…. No idea why that is so expensive for a CAPTCHA but the pricing difference is crazy.
Are you using WAF Captcha? Perhaps you should consider WAF Challenges instead to save a few bucks(or a few thousand).
PS: As I just found out while trying to push this live evidentally WAF Challenges even block Make.com and other marketing automation tools.... so .. that is fun.