TL;DR

Synapse Shield is an open-source, self-hosted behavioral biometrics engine for bot mitigation. It scores mouse, touch and keystroke dynamics instead of showing CAPTCHAs, and it collects no PII (only relative millisecond timings).

v0.10.0 adds the mobile leg: a Mobile SDK v2.0 across the vanilla JS, React and Vue packages, plus matching changes in the Python engine and the native Rust core.

The problem: desktop heuristics punish real phones

The first versions were tuned on mouse trajectories. Mobile traffic exposed five false-positive cases, all of which looked like bots to desktop-oriented rules:

Scenario Why it was flagged

Single tap (no drag) A single point gives the 1D-CNN a zero-padded 60-step tensor, which it scored as a bot.…