Doesn't have to be directly inside Blesta. A url from where to get the verification is fine. Should just need the widget and a url to call against where the backend sits.

Altcha can be fully self-hosted so removes the dependency of third-parties like Google or Cloudflare.