Forms are the cheapest door to attack
And the defense most teams installed years ago now costs more, annoys more, and answers fewer of the questions the business actually has to answer.
Spam and intrusive automation keep growing
Junk records and mass submissions against contact, signup and quote forms. They pollute the CRM and burn the time of the team that works it.
Variable cost catches you off guard
Several platforms charge per evaluation processed. The invoice climbs when traffic climbs, even if the number of real leads never moves.
Traditional CAPTCHA adds friction
Visual puzzles cost conversion and raise accessibility barriers for people using a screen reader or with low vision.
Self-hosting has a hidden cost
Installing it is the easy part. Operating it, monitoring it, patching it and answering when it breaks at 3 a.m. on a Sunday is where the real work is.
You have to be able to say where the data lives
When an auditor asks what data your form defense touches and where it is processed, the answer has to be documented. In Colombia the applicable framework is Law 1581 of 2012; elsewhere, your own data-protection regime.
Nobody measures whether it works
Without visibility into blocks, latency and false positives, you can't tell whether the protection is helping or turning away real customers.
A service, not a product we install and walk away from
Centinela protects your forms with a permissively licensed open source engine, operated by FACEX. What you buy is the engineering work that keeps it running.
Form protection
Validation of the submitted content, with no visual puzzles for the legitimate user.
Less spam
Fewer junk records in the CRM and less noise for the team working it.
Mitigation of intrusive automation
For supported cases of automated submission against forms.
Implementation and integration
On your existing forms and systems, with hands-on technical support.
Monitoring and maintenance
Continuous watch over the service and how it behaves in production.
Updates
Patches and versions applied and tested by us, not by your team.
Named support
In your time zone, with a person you can actually reach.
SLA by service option
Availability and response times committed in the contract.
Managed, or deployed in your VPC
Residency defined by service option; deployment in your VPC available.
From diagnostic to operation, in six steps
We assess
Your forms, your real evaluation volume and your current architecture.
We choose the option
Managed service or deployment in your VPC, based on your control and residency requirements.
We integrate
Into your forms and your backend, with server-side verification.
Controlled pilot
Bounded scope and success criteria agreed before we start.
We measure
Effectiveness, latency and false positives, with data you can review.
Operation and continuous improvement
Monitoring, updates, rule tuning and support under SLA.
Where Centinela fits — and where it doesn't
An honest comparison. If a free option solves your case, this page will tell you so.
| Criterion | Google reCAPTCHA | Cloudflare Turnstile | hCaptcha Pro | Centinela |
|---|---|---|---|---|
| Pricing model | Per evaluation | Free plan; Enterprise optional | Per evaluation | Flat fee by service option |
| User friction | Images and puzzles | Almost always invisible | Images and puzzles | No puzzles |
| Form data residency | Google (US) | Cloudflare (global network) | IMD / hCaptcha | Defined by service option; your VPC available |
| Contractual SLA | Enterprise only | No SLA on the free plan; Enterprise optional | Enterprise only | Yes, by service option |
| Named support team | No | No | No | Yes |
| Operation and updates | Vendor's | Vendor's | Vendor's | Managed by FACEX |
| Can you audit the engine? | No | No | No | Yes — open source core |
| If you decide to leave | Rewrite the integration | Technical migration required | Rewrite the integration | You keep the configuration and the data |
When a free alternative is enough
Cloudflare Turnstile offers a free plan, it can be used without buying other Cloudflare services, and its Enterprise plan is optional. For many cases it is a sound answer, and saying so is part of our job. If your volume is low, you have no data-residency requirements, you don't need a contractual SLA and your team can operate the integration, stay with the free option. Centinela earns its place when managed operation, a named support team, your own SLA, or control over where the data is processed actually matter.
Three ways to work with us
The option and the commercial terms are defined in the diagnostic, with your volume and your architecture on the table.
Managed service
We operate the infrastructure. The lightest option for your team.
Terms defined in the diagnosticDeployment in your VPC
Runs inside your own cloud, under your network controls and your policies. We operate it.
Terms defined in the diagnosticTechnical pilot
Bounded scope, agreed success criteria, and measurement of effectiveness, latency and false positives before you commit.
Recommended entry pointCompare your case in 30 seconds
Move your monthly volume of evaluations and see the order of magnitude. An evaluation is generated when your backend sends the service the token produced in the client; it does not automatically equal one form submission.
Don't know your volume? It's in your current provider's console, on your invoice, or in your backend logs. We work it out with you during the diagnostic.
Estimated difference vs. your current provider
—Who you're talking to
Institutional backing
Centinela is delivered by FACEX Consulting Group SAS, whose Excellence Management System is certified to ISO 9001, ISO 14001, ISO 45001 and ISO 21001.
Integration and implementation are carried out by professionals certified in ISO/IEC 27001, together with development experience for a Colombian financial institution operating at high validation volumes.
- Centinela is an implementation, integration, operation and support service delivered by FACEX.
- The core is a permissively licensed open source engine. We are not its authors and we claim no rights over it.
- The SBOM is generated and validated per version before delivery to the customer.
- The contract and the technical annex detail third-party components and their licenses.
What Centinela is not
We'd rather say it before the first meeting. Centinela protects forms. It does not replace:
Advanced credential-stuffing defense · transactional fraud prevention · a complete enterprise bot-management platform · general API protection · end-to-end fraud prevention.
If that's what you need, we'll tell you in the diagnostic and, where we can, point you toward the right category.
What people ask before deciding
Does Centinela replace every bot-management system?
Where is the data stored?
Does it run inside my own cloud?
Is the cost fixed?
Can we start with a pilot?
What does FACEX need in order to run the diagnostic?
Does Centinela guarantee it will eliminate all spam?
Find out whether Centinela is right for your forms
A 30-minute diagnostic session. We review your forms, your volume and your architecture, and we tell you straight whether it makes sense — including when the answer is that you should stay where you are.
Fields marked * are required. We process your data in accordance with Colombia's Law 1581 of 2012 and only to respond to this request. You may ask to access, update or delete it at any time.