GateCHA for WordPress is the official WordPress plugin for GateCHA. It protects forms with ALTCHA proof-of-work CAPTCHA and routes challenges and verification through the site owner’s own GateCHA server. The plugin is described as privacy-first and self-hosted, with no cookies, fingerprinting, user tracking, or third-party services.
Its listed features include server-side verification, built-in replay protection, central stats on a GateCHA dashboard, and a bundled ALTCHA Web Component that does not depend on an external CDN. It can be configured from a single settings page, where each protected form can be enabled or disabled individually. The plugin also offers a fail-open or fail-closed choice if the GateCHA server becomes unreachable. For custom forms, it provides a [gatecha] shortcode and requires server-side verification of the altcha field.
GateCHA for WordPress supports 14 form types, including WordPress core login, registration, password reset, and comments forms; WooCommerce login, registration, and password reset forms; and forms from Contact Form 7, WPForms, Gravity Forms, Elementor Pro, Forminator, Formidable Forms, and HTML Forms. The page says the plugin mirrors the hooks and filters of the official ALTCHA plugin, so migration is straightforward. It is intended for WordPress site owners who want CAPTCHA protection while keeping communication limited to their own GateCHA instance.
The plugin is available from WordPress.org and manual installs are also offered through GitHub. The stated requirements are WordPress 6.0 or later, PHP 7.4 or later, and a running GateCHA instance with an API key. The license is GPL-2.0-or-later. The page also says GateCHA can be installed in a single Docker container with zero external dependencies.
GateCHA CAPTCHA sits in PulseGate's Security & compliance platforms category. It focuses on protecting WordPress forms from spam and bots without compromising user privacy or relying on third-party services. It is built as an open-source project for wordPress site administrators seeking privacy-focused spam protection. The project is open source (MIT). It runs on the web and the command line, and it can be self-hosted.
It is developed by gatecha, and it first shipped in 2026. The project is developed in the open on GitHub with 77 commits in the last 90 days. Key capabilities include Proof-of-work CAPTCHA, no cookies, and no fingerprinting. The interface is available in English and Macedonian. It exposes integrations via a public API.
Summary written by a language model from the project’s public pages.
What PulseGate has recorded for this listing
Closest matches by what these projects do