And, in my adopted role as catalyst fanboy, I should note: Catalyst::Plugin::Captcha (which the docs say uses GD::SecurityImage to do its dirty work).