Click the center
Point localization (hCaptcha / AWS WAF)
Difficulty is a cost dial, not a security dial — harder = more work, never a better bot/human test. The detector convicts at every level.
The challenge auto-serves on load · ↻ new challenge
Pass the gate on the left. Kitsune’s coherence engine scores your client from the edge at the same time — because solving a gate is a cost or Turing test, not proof you’re human.
Gate verdict
did you solve the puzzle?
Detector verdict
does your client hold together?
Endpoints — point your own solver here
The gate is just an HTTP protocol on Kitsune’s owned arena service (allow-list-scoped — it only ever talks to itself). Script a bypass against:
- GET
/arena/locate - POST
/arena/locate/verify
Click the center of the named target among distractors on a free canvas. A CV solver computes the centroid and clicks it pixel-perfect (distance ~0, below human aim variance), or solves faster than a human can locate and aim — either convicts. Free-canvas localization, not tile-select. A self-hosted reproduction of the documented mechanism — never a third-party widget. The detector reads the same coherence engine that scores the home page.
How this works & the ethics
The gate is a self-hosted service Kitsune runs (the owned arena service). It reproduces the
documented, open mechanism above — it never contacts, proxies to, or solves a third-party
challenge (Cloudflare Turnstile, reCAPTCHA, hCaptcha). The reference solvers only ever talk to our own gates. The detector
verdict comes from the same coherence engine that scores the home page, reading your client over the edge.