From the experiment

Do coding agents recommend hCaptcha?

Coding agents raised hCaptcha in 198 of 280 judged bot protection sessions and chose it in none of them.

Published October 14, 2026 Read as Markdown

Coding agents raised hCaptcha in 198 of 280 judged bot protection sessions and chose it in none of them.

This page reports what happened when Claude Code, Codex, Cursor, Grok Build CLI and Muse Code had to solve a problem in bot protection inside a realistic codebase. Not what a chat assistant says about hCaptcha. What an agent actually installed.

The numbers

CategoryBot protection
Sessions in the category280
Sessions where hCaptcha was chosen0
Install share0%
Raised as a candidate, not chosen198
Chosen when considered0%
Sitehcaptcha.com

Which agents raised hCaptcha

Every agent considered it and none adopted it. Cursor raised it most often, in 99% of its bot protection sessions.

AgentSessionsRaised hCaptchaChose it
Claude Code6962 (90%)0
Codex8430 (36%)0
Cursor6766 (99%)0
Grok Build CLI1511 (73%)0
Muse Code4529 (64%)0

Which buyers it came up for

It surfaced most for requests written as junior developer, in 74% of those sessions. Knowing which buyer already has the product in mind tells you which pages to fix first.

Who is askingSessionsRaised it
Vibe coder10977 (71%)
Junior developer11182 (74%)
Enterprise team6039 (65%)

What hCaptcha was up against

The full ranking in bot protection, from the same sessions:

#ProductRuns wonShare
1Cloudflare Turnstile16860%
2Built in-house (no product adopted)3111%
3Vercel BotID2810%
4django-axes155%
5ALTCHA135%
6Google reCAPTCHA135%
7Laravel RateLimiter21%
8django-simple-captcha10%

What this means

Raised 198 times and chosen none is a specific, diagnosable result, and a better starting position than being unknown. The agent has the product in mind. It reached the shortlist 198 times. Something then lost every one of those sessions.

In our data the causes, in the order they occur:

  • The quickstart does not run when pasted, so the agent abandoned it mid-integration.
  • The documentation describes an interface that changed, so the generated code failed.
  • The product name and the package name differ, so the install step went wrong.
  • The fit was genuinely wrong for the repository, which is fine and worth knowing.

All but the last are fixable in days, and the reason is written down in the session transcript.

Where these numbers come from

The 280 sessions in bot protection are part of a published set of 15,287, run with real coding agents inside realistic codebases and judged blind. The full method is on one page: how we measured this.

Every bot protection run can be replayed on the board.

If you work on hCaptcha: the judge recorded a reason for every session where it was raised and passed over. Those reasons are in the transcripts.

<!-- generated by scripts/write-data-pages.mjs -->

Common questions

Do coding agents recommend hCaptcha?

They raise it but do not choose it. Across 198 sessions where hCaptcha came up as a candidate, agents chose something else every time.

Does Claude Code recommend hCaptcha?

In 0 of the 69 sessions in bot protection run with Claude Code, which is 0%.

Do different coding agents treat hCaptcha differently?

Not much. Claude Code, Codex, Cursor and Muse Code chose it at similar rates, between 0% and 0% of their runs.

How was this measured?

Real coding agents at pinned versions were run in sandboxes inside 110 realistic codebases and asked to solve real tasks. A simulated project owner approved or questioned each recommendation before any code was written, and a judge from a model family that builds none of the agents read every session blind.

Where this comes from

Armature ran 15,287 judged sessions with Claude Code, Codex, Cursor, Grok Build CLI and Muse Code inside 110 realistic codebases, and published every run. The numbers on this page come from that work.

Read next

All library pages