> ## Documentation Index > Fetch the complete documentation index at: https://captcha.ribaunt.com/llms.txt > Use this file to discover all available pages before exploring further. # Vanilla JS > Embed the Ribaunt CAPTCHA web component in any HTML page without a framework. Listen for verify and error events to control form submission. `` is a standard Web Component that works in any modern browser without a framework. You load a single ES module script, drop the element into your markup, and wire up a couple of event listeners — no build step required. The widget relies on the Web Crypto API, which is only available in a **secure context**. Use `https://` in production and `http://localhost` during local development. Plain local-network URLs such as `http://192.168.x.x` will not work. ## Complete example The snippet below brings all four steps together into a single self-contained HTML page. ```html theme={null} My Secure Form

Please verify you are human

``` ## Styling the widget The widget's internals are encapsulated inside a Shadow DOM, so standard descendant selectors cannot reach them. You can, however, override CSS custom properties scoped to the host element. ```css theme={null} #captcha { /* Override widget theme variables */ --ribaunt-background: #f0f0f0; --ribaunt-border-color: #ccc; /* Standard CSS applies to the host element itself */ margin: 20px 0; box-shadow: 0 4px 6px rgba(0, 0, 0, 0.1); } ``` ## Attribute reference The most commonly used attributes are listed below. For the complete list of attributes, accepted values, and defaults, see [Widget configuration](/widget/configuration). | Attribute | Description | | -------------------- | ---------------------------------------------------------------------------------------------------- | | `challenge-endpoint` | URL the widget fetches challenges from. | | `verify-endpoint` | URL the widget posts solutions to. | | `auto-verify` | When present, the widget starts solving immediately after load without requiring a click. | | `show-warning` | When present, displays a warning banner above the widget. | | `warning-message` | Custom text for the warning banner shown when `show-warning` is set. | | `solve-timeout` | Maximum milliseconds allowed for solving before an `error` event fires. Omit to disable the timeout. | | `disabled` | Blocks all user interaction **and** programmatic `startVerification()` calls. | A `disabled` widget will not start verification from `auto-verify` either. Remove the `disabled` attribute before expecting the widget to run.