---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Require CAPTCHA for guest walk-up experience in customer service application

# Require CAPTCHA for guest walk-up experience in customer service application {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The CAPTCHA for the Guest Walk-up experience prevents unauthenticated guest users to create bookings by requiring users to complete a CAPTCHA verification.
The CAPTCHA for the Guest Walk-up experience prevents unauthenticated guest users to create bookings by requiring users to complete a CAPTCHA verification. If CAPTCHA isn't enabled, this could lead to automated creation of spam
appointments to overwhelm the system or fill up all available booking spots creating a Denial of Service attack.

If Guest Walk-up Experience for Customer Service application is active, ensure that sn_guest_walkup_cs.captcha.enabled is set to true.

## More information {#sc-require-captcha-for-guest__section_qhx_1b1_xwb}

{#sc-require-captcha-for-guest__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | sn_guest_walkup_cs.captcha.enabled |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | true |
| Category | [Authentication](https://www.servicenow.com/docs/SZIHG9SfxVh2_gyMf2ec2Q "The authentication category covers the main elements of modern authentication to confirm an entity and its claims are authentic and correct, resistant to impersonation and prevent interception of passwords.") |
| Security risk | * Severity score: 3.7 * CVSS score: Low * Security risk details: This exposes the system to spam appointments and resource exhaustion attacks, potentially filling all available booking slots and causing a Denial of Service (DoS). Without CAPTCHA, the platform lacks a critical control to prevent automated abuse and maintain service availability. {#sc-require-captcha-for-guest__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | This property enables or disables the captcha on the CSM Guest Walkup Check-in widgets. By default, it is set to true. |
[ ]

{#sc-require-captcha-for-guest__table_ajc_b43_3kb}