Human-presence verification for the AI Age

Prove you're human.
In seconds.

Add a private human-presence checkpoint to sensitive digital actions when traditional bot detection is not enough.

Dexasign uses camera-based live-capture challenges and hand or touch interaction signals to provide evidence that a real person is physically present and responding in real time. No identity matching, facial-recognition database, or cross-site behavioral profile.

Request Early Access Try the Demo

0 bytes of biometric data stored ~5s average verification 100% presence-only

The new verification gap

When CAPTCHA
is not enough.

WAFs, bot scores, and CAPTCHAs help block routine automated abuse. But AI agents, human-assisted solving services, and synthetic media can still reach sensitive actions such as account recovery, important submissions, applications, and high-value requests.

Is a real person physically present and responding right now?

Dexasign answers that question at the action level — without storing a single byte of your users’ data.

How it works

Verification that requires
physical presence.

Dexasign is invoked only at the actions you select. The user completes a randomized physical challenge, presence and session-integrity signals are evaluated, and your server receives a short-lived verification result.

Trigger

Your application invokes Dexasign when an action requires stronger human verification.

Respond

The user completes a randomized gesture or interaction while live-presence and session-integrity signals are evaluated.

Validate

Dexasign issues a short-lived result that your server validates before allowing the action to continue.

No image grids. No identity matching. No cross-site profile. Just a live response.

Dexasign Verify Touch

mode = VerifyTouch

On desktop, the user moves their hand to interact with randomized targets while the camera evaluates the live response. On mobile, the user completes a touch-based sequence while presence and session-integrity checks continue in real time.

Each challenge uses a new sequence, position, and response pattern.

Dexasign Verify Gesture

mode = VerifyGesture

The user responds to a randomized hand-gesture instruction within a limited period. Dexasign evaluates whether the participant is physically present and responding to the challenge as it unfolds.

The requested gesture changes between sessions, making prerecorded and scripted responses more difficult.

Dexasign combines randomized challenge response, live-capture analysis, synthetic-media signals, and browser-integrity checks. These signals are evaluated together to identify indicators associated with photos, replays, generated media, automated browsers, and manipulated verification sessions.

Verification should not be about search history, mouse movement, or behavior profiles. It is about you — a real person, physically present, taking a real action. When it passes, the session closes. Everything is discarded. You move on.

Privacy

We verify physical presence.
We do not record it.

Dexasign is designed to determine whether a live person is responding without determining who that person is. It does not match faces to identities, create reusable facial-recognition profiles, or link people across applications.

No identity binding. Dexasign verifies presence, not identity. No face recognition, no ID matching, no linking across sessions or applications.
No biometric templates stored. Camera frames are processed in real time to produce a yes/no presence result and risk scores. Frames are discarded immediately — never saved, transmitted, or written to disk.
Minimal data persisted. The only data retained is a timestamp, risk scores, and application metadata — nothing that can identify a person.
Real-time gesture processing. Hand gesture and Touch interaction data is processed in real time on mobile and desktop, and discarded immediately after verification.
No tracking or cookies. No cookies are set. No cross-site tracking occurs. No behavioral data is collected.
Configurable strictness per application. Set tighter thresholds for banking flows, lighter ones for lower-risk actions — while staying within presence-only boundaries.

Human presence should not require human identification. Dexasign is built to provide evidence of live participation without creating a database of the people completing the challenge.

Verification options

Two verification modes.
One presence layer.

Choose the interaction that best fits your application. Both verification modes combine a randomized user response with configurable presence, environment, and session-integrity signals.

Dexasign Verify running across desktop and mobile — Touch Classic, Touch Space Mission, and Gesture modes

Verify Touch

A randomized interaction challenge designed for desktop and mobile experiences. On desktop, users interact using camera-tracked hand movement. On mobile, users complete a touch sequence while presence checks continue in real time. Choose between visual themes and configure the number of required interactions.

Verify Gesture

A camera-based challenge that asks the user to perform a randomized hand gesture within a limited response period. Available on supported browsers and compatible camera-equipped devices. No screen interaction is required.

Security configurations

Dexasign evaluates multiple signals together. No single signal independently determines whether a verification should pass.

Synthetic-Media Analysis — Evaluates visual signals associated with generated, injected, replayed, or manipulated camera input.
Live-Capture Analysis — Evaluates liveness and presentation-attack indicators throughout the verification session.
Browser-Environment Analysis — Identifies indicators associated with automated, manipulated, or headless browser environments and adds them to the overall risk result.
Interaction Analysis — Evaluates pointer, touch, timing, and response signals for patterns associated with scripted or automated interaction.
Challenge Length — Configure the number of required interactions based on the sensitivity of the action and the level of user friction you are willing to introduce.
Domain Restrictions — Restrict each application to approved domains to help prevent unauthorized use of your application identifier.

Try the Demo

For developers

Lightweight integration.
Server-side validation.

Add the Dexasign browser SDK, configure your verification experience.

Browser-based JavaScript SDK
Server-side result validation
Configurable verification modes and thresholds
Domain-restricted applications
Customizable user experience
Sandbox testing environment

Read the Docs

index.html

<!-- Add the widget container -->
<div id="dexasign-verify"></div>

<!-- Load the SDK -->
<script src="https://dexasign.com/static/sdk/dexasign-verify.min.js"></script>

<!-- Initialize -->
<script>
  DexasignVerify.render('#dexasign-verify', {
    applicationId: 'YOUR_APP_ID',
    onComplete: (result) => {
      // Send result.token to your backend
      verifyToken(result.token);
    }
  });
</script>

// Node.js — Verify the token server-side
const response = await fetch('https://api.dexasign.com/verify', {
  method: 'POST',
  headers: { 'Content-Type': 'application/json' },
  body: JSON.stringify({
    token: req.body.dexaToken,
    secret: process.env.DEXA_SECRET_KEY
  })
});

const { verified, score } = await response.json();
if (!verified) return res.status(403)
  .json({ error: 'Verification failed' });

Clear security boundaries

Built different.

Privacy-first

We verify that a live human is present — not who they are. No identity binding, no biometric templates stored, no cross-site tracking. Only a timestamp and risk scores are ever retained.

AI-resistant

AI agents and CAPTCHA-solving services clear traditional bot filters daily. Dexasign closes that gap — physical gestures, liveness detection, and face signal analysis combine to stop what scripted abuse can’t fake.

Universal access

Works on any device with a camera. No app downloads. No special hardware. Just a browser.

Lightning fast

Most verifications complete in seconds. Faster than typing or clicking in a CAPTCHA, more reliable than solving puzzles.

Get early access

Dexasign is currently operating as invite only for product, fraud, security, and development teams exploring stronger human verification. Early partners receive access to the SDK, developer support, controlled testing, and an opportunity to help shape the product before wider release. Dexasign is not currently intended to operate as a standalone identity, authentication, or compliance solution.

Join the Waitlist

Have questions? Contact us — or read the Developer Docs.

Prove you're human.In seconds.