Google offers two reCAPTCHA products: the free Standard version and the paid Enterprise version. Enterprise adds reason codes, custom risk thresholds, project-based management, and integration with Google Cloud security tools.
For automation developers, the main difference is adding enterprise=1 to CaptchaAI requests. This guide covers all the differences.
Feature comparison
| Feature | Standard | Enterprise |
|---|---|---|
| Price | Free (up to 1M assessments/month) | $1 per 1,000 assessments (1K–100K/month), tiered pricing above |
| Score range | 0.0–1.0 | 0.0–1.0 |
| Reason codes | No | Yes (AUTOMATION, UNEXPECTED_ENVIRONMENT, etc.) |
| Custom thresholds | No (set in your code) | Yes (configurable per action in console) |
| Project management | No | Yes (Google Cloud Console) |
| API endpoint | siteverify |
recaptchaenterprise.googleapis.com |
| Password leak detection | No | Yes |
| Account defender | No | Yes |
| Multi-factor authentication | No | Yes (WAF integration) |
| v2 support | Yes | Yes |
| v3 support | Yes | Yes |
Scoring differences
Both versions return a 0.0–1.0 score, but Enterprise provides additional context:
Standard response
{
"success": true,
"score": 0.7,
"action": "login",
"challenge_ts": "2024-01-15T12:00:00Z",
"hostname": "example.com"
}
Enterprise response
{
"tokenProperties": {
"valid": true,
"action": "login",
"createTime": "2024-01-15T12:00:00Z",
"hostname": "example.com"
},
"riskAnalysis": {
"score": 0.7,
"reasons": ["LOW_CONFIDENCE_SCORE"],
"extendedVerdictReasons": []
},
"event": {
"token": "...",
"siteKey": "...",
"expectedAction": "login"
}
}
Enterprise's reasons array tells the site why the score is what it is, enabling more nuanced security decisions.
How to identify Enterprise on a page
| Indicator | Standard | Enterprise |
|---|---|---|
| Script URL | google.com/recaptcha/api.js |
google.com/recaptcha/enterprise.js |
| Execute function | grecaptcha.execute() |
grecaptcha.enterprise.execute() |
| Verification API | siteverify endpoint |
recaptchaenterprise.googleapis.com |
| Console | reCAPTCHA admin console | Google Cloud Console |
Check the page source:
// Standard
<script src="https://www.google.com/recaptcha/api.js?render=SITEKEY"></script>
// Enterprise
<script src="https://www.google.com/recaptcha/enterprise.js?render=SITEKEY"></script>
Solving with CaptchaAI
Standard reCAPTCHA v3
resp = requests.get("https://ocr.captchaai.com/in.php", params={
"key": API_KEY, "method": "userrecaptcha", "version": "v3",
"googlekey": SITEKEY, "action": "login", "pageurl": URL, "json": 1
})
Enterprise reCAPTCHA v3
resp = requests.get("https://ocr.captchaai.com/in.php", params={
"key": API_KEY, "method": "userrecaptcha", "version": "v3",
"enterprise": 1, # Only difference
"googlekey": SITEKEY, "action": "login", "pageurl": URL, "json": 1
})
Standard reCAPTCHA v2
resp = requests.get("https://ocr.captchaai.com/in.php", params={
"key": API_KEY, "method": "userrecaptcha",
"googlekey": SITEKEY, "pageurl": URL, "json": 1
})
Enterprise reCAPTCHA v2
resp = requests.get("https://ocr.captchaai.com/in.php", params={
"key": API_KEY, "method": "userrecaptcha",
"enterprise": 1,
"googlekey": SITEKEY, "pageurl": URL, "json": 1
})
When sites upgrade to Enterprise
| Reason | What changes |
|---|---|
| WAF integration | reCAPTCHA integrates with Cloudflare/Akamai WAF |
| Detailed analytics | Dashboard shows risk trends and attack patterns |
| Custom rules | Different thresholds per action |
| Compliance | Enterprise SLA and data residency options |
| Account protection | Password leak and account takeover detection |
FAQ
Does Enterprise make reCAPTCHA harder to solve?
No. The scoring model is similar. Enterprise adds administrative features but uses the same underlying risk assessment. CaptchaAI handles both with the enterprise=1 flag.
Can I tell if a site uses Enterprise from the token?
No. The token format is the same. Check for enterprise.js in the page source instead of api.js.
Is Enterprise more expensive to solve with CaptchaAI?
Pricing may vary. Check CaptchaAI's current pricing for Enterprise vs Standard reCAPTCHA solving.
Can I use the same sitekey for both Standard and Enterprise?
No. Enterprise sitekeys are created in Google Cloud Console and are different from Standard sitekeys.
Discussions (0)
Join the conversation
Sign in to share your opinion.
Sign InNo comments yet.