Use the CAPTCHA action to verify that web requests are being entered by human beings and use the Challenge action to verify that the sending clients are browsers.