Will enabling additional features from Google in ReCAPTCHA Enterprise affect the site-verify response?

Question

Our PROD environment is currently using ReCAPTCHA Enterprise Key + Legacy secret key, which still using "site verify" to verifying the score of the user.

We are planning on migrate to Assessment feature with the additional features (e.g 11 score levels).

---

So I would like to know that if Google have enabled this feature, will:

1. it affect the “https://www.google.com/recaptcha/api/siteverify” response?
2. the score in “https://www.google.com/recaptcha/api/siteverify” also reflect 11 levels?
3. the existing V3 secret key / site key still valid after the feature enabled?

---

Many Thanks!

Answer 1

Siteverify is a reCaptcha v3 endpoint which is used for validating whether the response sent by the token from reCaptcha widget is valid or not and can only give a score value ranging from 0 to 1(while 0 seemingly response generated by bot and 1 represents a valid human response). Assessment is an enhancement made to siteverify in the reCaptcha enterprise edition which can be used for more sophisticated behavioral analysis by leveraging various score levels(up to 11). So, even if you have upgraded your reCaptcha to enterprise edition if you are using siteverify endpoint you can only use score levels between 0 to 1.[1][2]

Migrating from reCaptcha(v2 or v3) to reCaptcha enterprise:

As mentioned in this official documentation on migrating non-Enterprise version of reCaptcha to reCaptcha Enterprise

Migrating from a non-Enterprise version of reCAPTCHA to reCAPTCHA Enterprise involves choosing an active site key from the reCAPTCHA Admin console and migrating the site key. You can migrate one or more active site keys. However, you can migrate only one site key at a time.

Hence, you can utilize the same keys which you have been using for non-Enterprise reCaptcha in Enterprise version of reCaptcha.

Will migrating to reCaptcha Enterprise affect the site verify endpoint’s response?

Migrating to reCaptcha Enterprise won’t affect any features that are available in non-Enterprise reCaptcha like siteverify. It only checks whether the response is valid or not and further investigates the cause of an invalid response.

References:

[1] https://developers.google.com/recaptcha/docs/v3#site_verify_response
[2] https://cloud.google.com/recaptcha-enterprise/docs/interpret-assessment-website#interpret_assessment