Recaptcha service and GDPR agreement

Issue

Is the IP address sent to the Google/Recaptcha servers at the moment when the user receives the Imunify360 Captcha challenge page?

Environment

• Imunify360
• WebShield
• Captcha
• Anti-bot

Solution

Yes, when a user is shown Captcha, his IP is passed and can be logged on the Google/Recaptcha servers.

It is worth noting that earlier (v5.6), the Anti-bot (SplashScreen) mechanism was added to Imunify360. It is an alternative to the Greylist (reCAPTCHA) way to block attackers with a lower level of false positives. Since that time Imunify360 dev team constantly improved SplashScreen and smoothly migrated to it. Today most of the suspicious IP addresses get into Splash Screen and only 10% of block events relate to Greylist.

Useful links

• https://blog.imunify360.com/release-notes-imunify360-v.5.6
• https://docs.imunify360.com/features/#anti-bot-protection