Under Attack Mode (UAM) vs CAPTCHA — Dstat comparison
Under Attack Mode and CAPTCHA are both Layer-7 challenges, but they trade off security against user friction differently.
Under Attack Mode (UAM)
- Silent JavaScript challenge, no user action.
- Stops most simple bots automatically.
- Can be bypassed by headless browsers that run JS.
CAPTCHA
- Requires explicit human interaction.
- Stronger against automation than a JS challenge.
- Adds visible friction for legitimate users.
Takeaway
UAM is a good default for transparent protection; escalate to CAPTCHA when automated bypass traffic stays high.