# Hacker News launch post
**Title** (≤80 chars):
> Show HN: Captchaforge – open-source CAPTCHA solver for headless browsers (Rust)
**Body** (≤2 short paragraphs + ≤5 bullets, then links):
I've been building captchaforge, an open-source CAPTCHA-solving
library + HTTP API + CLI written in Rust. It targets the gap that
nopecha (closed), 2captcha (SaaS, human-solver), and
puppeteer-extra-stealth (stealth-only) leave: a single open
codebase that ships every vendor solver, learns per-domain which
strategy wins, and runs as a library inside your own scraper.
What's in 0.2.31:
- 17 production solvers: Cloudflare Turnstile / Akamai BotManager /
DataDome / PerimeterX / GeeTest / AWS WAF / Arkose / hCaptcha /
reCAPTCHA v2+v3 / Turnstile-interactive / sliders / audio / PoW.
- Network-layer Cloudflare interstitial replay (no chromium needed
for the JS challenge path).
- 158-vendor community detection rule pack with JSON-Schema +
per-rule fixtures.
- Pattern store + fingerprint LRU, the chain learns "for hCaptcha
on Chrome131WinPQ, BehavioralBypass wins 12/14 attempts".
- Bearer-token auth + per-IP rate limit + SSRF guard + body caps
on the HTTP API.
- Container, Helm chart, Python + Node bindings, WASM in-page
build, Prometheus alert rules.
Repo: https://github.com/santhreal/captchaforge
Docs: https://captchaforge.santh.dev
crates.io: https://crates.io/crates/captchaforge
The honest gaps: the real-world bypass-rate scorecard is being
populated this week (nightly CI hitting public test sitekeys for
Cloudflare / hCaptcha / reCAPTCHA). The behavioral solvers return
real vendor tokens now (regression test in
tests/integration.rs::behavioral_solver_returns_real_harvested_token_not_label).
Marketing's at zero before today, you're seeing this 18 hours
after the first public commit.
License: MIT/Apache 2.0. Issues + PRs welcome; the bug-bounty
program is open at .github/SECURITY_BOUNTY.md.