C501247-HCaptcha

UCS is procuring a CAPTCHA service for identifying and blocking automated ("bot") web traffic to protect against scraping and other malicious usage of UCS websites, such as credential stuffing or brute-force password guessing attacks. UCS estimates about 10 million CAPTCHA verifications will be required per month. The solution must: 1) include comprehensive integrated analytics and monitoring including solve rates and bot-likelihood scores, and should permit drill-down by client ASN, subnet and IP; 2) allow easy portal-based customization of behavior on a combination of source IP, subnet, ASN or other significant client attributes without requiring application source code changes. This customization includes reducing or increasing challenge difficulty, as well as blocking certain clients without requiring a firewall-level or WAF block; 3) not rely significantly on proof-of-work as this creates significant financial incentives for users to scrape the UCS website; 4) leverage advanced machine learning to identify suspicious users (bots) with minimal user friction; 5) meet at least WCAG 2.1 level AA; 6) preserve user privacy in that user and session data cannot be sold or used for advertising; and 7) be compatible with UCS’s current implementation (hCaptcha/reCaptcha API compatible). UCS is requesting a contract term of one year (10/22/2026-10/21/2027.) This contract is C501247. This is a single source contract notification. This is not a procurement opportunity.