Duckity swaps CAPTCHAs for invisible rate limits and proof-of-work challenges to make API abuse costly
Shown on HN, await duckity.solve(POLICY_ID) has the client do a VDF-backed computational challenge that scales with activity, alongside rate limits and IP signals, so bots and scripted agents pay more to hammer your endpoints while users never see a puzzle; data is processed in Frankfurt. Plans list a 10,000-challenge monthly tier with a "Protected by Duckity" label and $49/mo for 100,000 with white labeling.