No CAPTCHA, no friction, still secure.

No CAPTCHA, no friction, still secure — I built a fraud detection API for indie SaaS

I’ve been working on Gloqsec, a fraud detection API designed for indie hackers who need to prevent abuse like fake signups, free trial farming, and bot traffic without adding friction like CAPTCHAs or paying for heavy enterprise solutions. Instead of relying only on email and IP reputation, it combines behavioral signals such as typing speed, mouse movement patterns, and copy/paste detection. In testing, bots tend to type extremely fast (10–50ms per keystroke), move the mouse in straight lines, and often paste credentials.

You can try the demo here (no signup): https://gloqsec.com/demo. The API is simple: send email + IP + an encrypted token and receive a trust score (0–100) with risk flags. I’m mainly trying to validate whether this is actually useful for indie builders, so I’d really appreciate honest feedback—would you use this instead of CAPTCHAs, and what would stop you from integrating it?