Cloudflare Demo
All demos

Security · Turnstile

Turnstile: prove human, skip the puzzles

A mock form protected by Turnstile in Managed mode. Complete the widget and submit to see the full server-side siteverify verdict — or skip the challenge entirely and see exactly what a bot gets.

Turnstile primer

Human verification without the friction

Two slides, then a live protected form with raw siteverify responses.

Turnstile

A token proves the visit, server verifies it

The widget runs a series of non-interactive browser checks and issues a short-lived token. Your server exchanges that token with Cloudflare's siteverify API for a simple success verdict — no puzzles, no personal data harvested.

Tokens are single-use and expire after 300 seconds — a stolen token is worthless.

Widget

Browser checks → token

Your server

POST token to siteverify

Verdict

success: true / false

The form below shows the raw siteverify JSON for every submission

Live verification

Widget, token, verdict

The widget issues a single-use token; the server exchanges it with Cloudflare's siteverify API. Every attempt shows the raw JSON response.

A form worth protecting

A mock contact form — nothing is stored or sent anywhere except the token exchange below.

Loading Turnstile widget…

The second button simulates a bot that skips the widget entirely — the server still calls siteverify, which rejects the missing token.

Raw siteverify response

Exactly what Cloudflare returns to the server on every submission.

Complete the widget and submit to see the verdict.