Quick start | Botardo Docs

Get from zero to protected forms in four steps.

1. Create an account

Sign up at botardo.com/signin to get your site key. The free plan covers every form on every site. No credit card needed.

2. Add the snippet

Drop this tag into the <head> of every page that has a form you want protected. The snippet auto-attaches to all forms, including client-side-rendered ones.

html

<script
  src="https://cdn.botardo.com/v2.js"
  data-site="YOUR_SITE_KEY"
  data-mode="score"
  defer
></script>

**Note:** The snippet is **< 4 KB** gzipped, loads from the edge, and defers automatically. No measurable impact on Lighthouse scores.

3. Verify on your server

When a form is submitted, Botardo injects an x-bot-token header (or a hidden form field). Verify it server-side before processing the submission.

import { sentinel } from "@botardo/server";

export async function POST(req: Request) {
  const { score, confidence, layers } =
    await sentinel.verify(req.headers["x-bot-token"]);

  // score: 0–100  (0 = definitely human)
  // confidence: "high" | "medium" | "low"

  if (score > 85) return block();
  if (score > 55) return challenge();
  return allow();
}

4. Check the dashboard

Log into the Console to see live session data. Within a few minutes of adding the snippet you'll see real sessions streaming in, each with a score, confidence level, and per-layer breakdown.