. Regenerated with each Chinaready Landscape publish.
Quick answer: Chinaready's nationwide mainland probes of api.castle.io across 148 city/carrier paths all returned HTTP and DNS high latency — treat the Castle API as unavailable for China production stacks. Domestic vendors offer highly similar substitutes, but none fully cover Castle's complete feature set. Map to NetEase Yidun, GeeTest, Alibaba Cloud Risk Identification, Tencent Cloud Tianyu. Availability in China: Unavailable.
Availability in China:Unavailable
Replace Castle.io for mainland China account and bot risk
Chinaready's nationwide mainland probes of api.castle.io across 148 city/carrier paths all returned HTTP and DNS high latency — treat the Castle API as unavailable for China production stacks.
Multiple mainland vendors offer highly similar “drop-in style” substitutes, but none fully cover Castle's complete feature set. Use the shortlist below as a research map, then validate replacement fit for registration, login, device, and abuse workflows.
Mainland China options
NetEase Yidun (网易易盾 · business security) — registration protection, login protection, behavioral CAPTCHA, and device fingerprinting. Simple API integration with free trial quota for mid-size apps. Behavioral CAPTCHA can stay frictionless and follows a Castle-like risk-score path (allow, step-up, or block). Best for fast go-live with stronger UI customization.
GeeTest (极验) — frictionless verification, identity anti-fraud, and device fingerprinting. Evolved from CAPTCHA into human verification plus risk control; returns real-time risk scores from device and behavior signals, with silent protection and custom block policies. Best for UX-sensitive apps, especially mobile, that want frictionless filtering of bots and account attacks.
Alibaba Cloud Risk Identification (阿里云风险识别) — account security, login/registration protection, and marketing anti-cheat. Metered cloud APIs that integrate cleanly with the Alibaba stack; returns risk scores and labels (credential stuffing, junk registration, and similar) and can link to Alibaba Cloud CAPTCHA. Best when the app already runs on Alibaba Cloud.
Tencent Cloud Tianyu (腾讯云天御 · business security) — registration protection, login protection, and campaign anti-abuse. Real-time risk scoring on Tencent security data across WeChat mini programs, apps, and web, with a free tier for early testing. Best for WeChat-ecosystem apps or teams that want Tencent social-graph signals for risk decisions.
How to choose
Developer-friendly lightweight SaaS: try NetEase Yidun and GeeTest first — both offer free quota and clear API docs for a quick proof of value.
Already on a cloud platform and want one console: choose Alibaba Cloud Risk Identification or Tencent Cloud Tianyu for unified billing, metering elasticity, and stack integration.
Generally available · Global analog unavailable in China
NetEase Yidun (网易易盾) business-security suite for registration/login protection, behavioral CAPTCHA, and device fingerprinting.
China context: Covers registration protection, login protection, behavioral CAPTCHA, and device fingerprinting. API integration is straightforward with free trial quota — suited to mid-size apps that need a fast launch. Behavioral CAPTCHA can stay frictionless and uses a Castle-like risk-score path (allow, step-up, or block). Best when you want quick go-live and stronger UI customization.
China context: Started in CAPTCHA and now covers frictionless verification, identity anti-fraud, and device fingerprinting. Collects device and behavior signals, returns a real-time risk score, and supports silent protection plus custom block policies with a strong developer experience. Best for UX-sensitive apps — especially mobile — that want frictionless filtering of bot traffic and account attacks. Also a common Castle.io research option for mainland account-abuse and bot defense.
Generally available · Global analog unavailable in China
Alibaba Cloud Risk Identification (风险识别) for account security, login/registration protection, and marketing anti-cheat.
China context: Cloud-metered service that integrates cleanly with the Alibaba stack. Exposes standalone APIs such as registration and login risk identification that return risk scores and labels (credential stuffing, junk registration, and similar), and can link directly to Alibaba Cloud CAPTCHA. Best for apps already on Alibaba Cloud that want risk controls tied into the same infrastructure.
Generally available · Global analog unavailable in China
Tencent Cloud Tianyu (天御) business-security protection for registration, login, and campaign anti-abuse.
China context: Built on Tencent security data for real-time risk scoring across WeChat mini programs, apps, and web, with a free tier for early testing. Best for WeChat-ecosystem apps or teams that want Tencent social-graph signals to support risk decisions.
No for mainland production stacks. Chinaready's nationwide mainland probes of api.castle.io across 148 city/carrier paths all returned HTTP and DNS high latency, so Chinaready labels Castle.io as Unavailable. Plan a China account-abuse and bot-risk provider instead of depending on Castle's API from mainland networks.
What are the best China alternatives to Castle.io?
Chinaready Landscape currently maps Castle.io to NetEase Yidun, GeeTest, Alibaba Cloud Risk Identification, Tencent Cloud Tianyu. Domestic options are highly similar for registration, login, device, and abuse workflows, but none fully cover Castle's complete feature set. Prefer NetEase Yidun and GeeTest for lightweight SaaS trials; prefer Alibaba Cloud Risk Identification or Tencent Cloud Tianyu when you already run on those clouds.
Is there a direct drop-in replacement for Castle.io in mainland China?
Usually no. Multiple mainland vendors offer highly similar substitutes for bot defense, device fingerprinting, and account-risk scoring, but none fully covers Castle's complete feature set. Review replacement fit and China context for each candidate before migrating.
How should teams choose among NetEase Yidun, GeeTest, Alibaba Cloud, and Tencent Cloud Tianyu?
For developer-friendly lightweight SaaS, try NetEase Yidun and GeeTest first — both have free quota and clear API docs. If you already use a China cloud and want one-stop console and metering, choose Alibaba Cloud Risk Identification or Tencent Cloud Tianyu.
Where should teams go after shortlisting Castle.io alternatives?
Use the interactive Chinaready Landscape to compare adjacent trust and bot-protection services, then read Chinaready's main site for launch operating guidance covering compliance, distribution, and go-to-market constraints beyond vendor selection. If the alternative remains uncertain, book a call with Chinaready.
