Inside the behavioural signal: how the widget reads real human interaction

When you use the drop-in widget, Veritus can observe how a form was filled in — signals a server-side API call cannot see on its own.

• Time-to-fill — humans take a few seconds; scripts submit almost instantly.
• Paste vs type — pasting every field is a bot tell.
• Keystroke cadence and focus changes — natural typing and tabbing between fields look different from automated entry.
• Honeypot interaction — a hidden field (_vt_hp) that a human never sees but a bot tends to fill.

These behavioural features are only available through the widget, which is one reason many customers run the widget on public forms even when they also call the API server-side. They add a strong layer of bot detection on top of the seven data-enrichment signals.