IsHumanCadence
Bot detection via keystroke dynamics (no CAPTCHAs)
Details
- External ID
- 46940197
- Source
- HN
- Company
- —
- Product
- IsHumanCadence
- Website domain
- github.com
- Launched
- Feb. 9, 2026
- Cohort
- —
- Upvotes
- 5
- Upvotes percentile
- 0.10512129380053908
- Tags
- —
- Fetched at
- Sept. 7, 2026, 9:26 p.m.
- Updated at
- Sept. 7, 2026, 9:26 p.m.
Enrichment
- Theme
- Hacker News clients, datasets, and tools
- Vertical
- Security
- Function
- Compliance & governance
- Audience
- B2B
- AI stance
- Not AI
- Project type
- Commercial product
- Normalized one-liner
- bot detection via keystroke analysis
- Manually corrected
- False
Could you build this?
Partial Recording keystroke timing events in JavaScript is easy, but reliably classifying bots versus humans without high false positive rates requires sophisticated statistical models and machine learning trained on large datasets.
What it would actually take: A production keystroke biometric system uses a client-side JS library capturing precise keydown/keyup timestamps, dwell time, and flight time distributions, streaming them to a classification backend. The backend employs trained neural networks or gradient boosting models (e.g., XGBoost) calibrated on millions of legitimate and automated keystroke profiles to account for varied typing speeds, layouts, and input devices. The hard part is preventing replay attacks and maintaining low false rejection rates across diverse keyboard hardware and mobile devices.
Discussion
2 comments analyzed.
Competitors mentioned: reCAPTCHA, visual CAPTCHA puzzles
Concerns raised: AI can trivially generate human-like keystroke patterns with prompt engineering, Client-side security is inherently trustless and easily manipulated, JavaScript environment can be compromised to spoof behavioral signals, Only adds friction for motivated attackers, not real prevention, Generative keystrokes are the next frontier for AI to defeat this
Feature requests: Server-side hardening and validation mechanisms, Protection against JavaScript environment manipulation
Competitors
Other products that read as similar to this one — 874 launches clear the similarity bar, closest 8 shown.
Attention rank: #814 of 875 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).
Launched 102 days after the earliest competitor.
- Mousecrack · hn · 2026-07-30 · 7 upvotes · similarity 0.67
- Captcha to detect bots with a simple question · hn · 2026-04-09 · 5 upvotes · similarity 0.60
- HN Bot Detector · hn · 2026-03-02 · 7 upvotes · similarity 0.59
- Insta-Bot · github · 2026-09-12 · 6 upvotes · similarity 0.54
- Knock-Knock.net · hn · 2026-02-15 · 224 upvotes · similarity 0.53
- Nightcrawler · hn · 2026-08-03 · 120 upvotes · similarity 0.50
- Watch bots interact with an SSH honeypot in real time · hn · 2026-07-17 · 181 upvotes · similarity 0.49
- A security scanner for AI Agent Skills · hn · 2026-04-10 · 5 upvotes · similarity 0.48
Other launches for this product
- No other launches for this product.
Same idea, different domain
Nobody's really built a compliance & governance tool for Media & entertainment yet.