Yandex Cloud
Search
Contact UsGet started
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI for business
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Yandex Smart Web Security
  • Getting started
    • All guides
    • Address lists
      • Rule for captcha
      • Rule for blocking black addresses
    • Viewing operations
    • Configuring monitoring
    • Setting up alerts
    • Configuring logs via Smart Web Security
    • Configuring logs via Application Load Balancer
    • Migrating to WAF with support for Yandex rules
    • Overview
    • Security profiles
    • WAF
    • ARL (request limit)
    • Rules
    • Conditions
    • Lists
    • Protecting domains
    • Logging
    • Quotas and limits
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes
  1. Step-by-step guides
  2. Required and recommended rules
  3. Rule for captcha

Rule for Yandex SmartCaptcha

Written by
Yandex Cloud
Updated at August 26, 2025

Set up a rule to redirect requests to SmartCaptcha for verification.

Note

If the Deny action is set for the default basic rule and the requests are sent to SmartCaptcha for verification, add a basic rule that allows requests to the CAPTCHA. The address of the allowed request matches the regular expression: /(captcha_smart.*.(css|js)|showcaptcha|checkcaptcha). Set the rule to have a higher priority than rules sending CAPTCHA requests.

Management console
  1. In the management console, select the folder.
  2. In the list of services, select Smart Web Security.
  3. In the left-hand panel, click Security profiles and select the profile.
  4. Click Add rule and in the window that opens:

    1. Enter a name for the rule, e.g., allow-captcha.

    2. Set Priority higher than that of the rules sending requests to captcha checks.

    3. Enable Only logging.

    4. Specify the rule settings:

      • Type: Base.
      • Action: Allow.
      • Traffic: On condition.
      • Conditions: Request URI.
      • Request path: Matches the regular expression.
      • Enter this expression: /(captcha_smart.*\.(css|js)|showcaptcha|checkcaptcha).
    5. Click Add.

See alsoSee also

  • Creating a security profile
  • Adding a rule to a security profile

Was the article helpful?

Previous
Address lists
Next
Rule for blocking black addresses
© 2025 Direct Cursus Technology L.L.C.