--- title: Require CAPTCHA for guest walk-up experience in customer service application description: The CAPTCHA for the Guest Walk-up experience prevents unauthenticated guest users to create bookings by requiring users to complete a CAPTCHA verification. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-require-captcha-for-guest.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Authentication, Hardening settings, Platform Security] --- # Require CAPTCHA for guest walk-up experience in customer service application The CAPTCHA for the Guest Walk-up experience prevents unauthenticated guest users to create bookings by requiring users to complete a CAPTCHA verification. The CAPTCHA for the Guest Walk-up experience prevents unauthenticated guest users to create bookings by requiring users to complete a CAPTCHA verification. If CAPTCHA isn't enabled, this could lead to automated creation of spam appointments to overwhelm the system or fill up all available booking spots creating a Denial of Service attack. If Guest Walk-up Experience for Customer Service application is active, ensure that **sn\_guest\_walkup\_cs.captcha.enabled** is set to **true**. ## More information
Attribute Description
Configuration name **sn\_guest\_walkup\_cs.captcha.enabled**
Configuration type System Properties \(/sys\_properties\_list.do\)
Data type Boolean
Recommended value true
Default value <none>
Fallback value true
Category [Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-authentication.md)
Security risk - Severity score: 3.7 - CVSS score: Low - Security risk details: This exposes the system to spam appointments and resource exhaustion attacks, potentially filling all available booking slots and causing a Denial of Service \(DoS\). Without CAPTCHA, the platform lacks a critical control to prevent automated abuse and maintain service availability.
Dependencies and prerequisites None
Functional impact This property enables or disables the captcha on the CSM Guest Walkup Check-in widgets. By default, it is set to true.
**Parent Topic:**[Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-authentication.md)