Skip to content

Blog

Analysis on form security, spam prevention, and content moderation.

  1. Comparisons 7 min read

    Profanity, Hate, Spam and Junk: Why One Score Isn't Enough

    A single toxicity score forces a single decision, and the four things arriving through your forms need four different ones. Here's what the research says about collapsing them, and what per-category scoring actually buys a development team.
  2. Comparisons 7 min read

    Akismet vs reCAPTCHA: Two Tools, Two Different Jobs

    The most common form-protection question has a frustrating answer: these two are not alternatives. One reads your submissions, the other reads your visitors, and running the wrong one is why so many protected forms are still full of junk.
  3. Platform Guides 7 min read

    Elementor Form Spam: Stopping Junk Inside the Page Builder

    Elementor runs on more than 10 million WordPress sites, and its Pro form widget ships a honeypot and reCAPTCHA. Neither one reads what people actually type. Here's how to add real-time content scoring with the elementor_pro/forms/validation hook.
  4. Platform Guides 7 min read

    Moderating Fluent Forms and Ninja Forms Submissions

    Two form plugins, 1.3 million sites between them, and almost every anti-spam tutorial on the internet is written for the other three. Here are the actual hooks for content-level scoring in Fluent Forms and Ninja Forms, with the fail-open pattern both need.
  5. Platform Guides 7 min read

    Framework Quick-Starts: React, Vue and Laravel Forms

    No plugin directory, no admin toggle, just your own request lifecycle and full control over it. Here are three drop-in moderation patterns for Next.js, Nuxt and Laravel, plus the four production details that decide whether the thing holds up.
  6. Comparisons 7 min read

    Honeypots vs Content Moderation: What Each One Stops

    A honeypot is five lines of code, costs nothing, and adds no friction, which is why it's every developer's first move. It also fails in two directions at once: it misses the bots that matter, and it silently rejects real people. Here's an honest map of what it covers.
  7. Platform Guides 7 min read

    WPForms Spam Protection: Where the Keyword Filter Runs Out

    WPForms ships the most complete anti-spam toolkit of any mainstream form plugin, and sites running it still fill up with junk. Here's why the keyword filter can't hold the line, and how to score submissions on content with the wpforms_process hook.
  8. Threat Landscape 5 min read

    AI Is Writing Your Spam Now: The 2026 Bot Landscape and What It Means for Small Sites

    The spam hitting your forms in 2026 doesn't look like spam anymore. It's fluent, personalised, and written by the same kind of models you use yourself. Here's how the bot landscape changed — and why 'I'll just spot the fakes myself' stopped working.
  9. Threat Landscape 5 min read

    Multilingual Form Spam: Why English-Only Filters Miss Half the Abuse

    Most spam and profanity filters are quietly monolingual — a wordlist in English and a shrug at everything else. On a web where most users don't speak English natively, that's a gap the size of the internet. Here's why multilingual moderation matters and what it takes to get right.
  10. Comparisons 6 min read

    Akismet, reCAPTCHA, hCaptcha, Turnstile, and Content Moderation: What Each Actually Protects

    The form-protection tools everyone reaches for are not interchangeable — they solve different problems, and most people only find out where the gaps are after the spam gets through. Here's an honest map of what each one covers and what it misses.
  11. Industry News 7 min read

    reCAPTCHA Cut Its Free Tier by 99%: What It Costs Now

    Google cut reCAPTCHA's free allowance from a million checks a month to ten thousand, counted across your whole organisation rather than per site. Here are the current tiers, the exact prices, the failure mode nobody warns you about, and the better question to ask before you migrate.
  12. Platform Guides 5 min read

    Managing Form Spam Across a Dozen Client Sites Without Losing Your Weekend

    One site's spam is an annoyance. Twenty clients' spam is a support burden that eats your margin. Here's how agencies and freelancers can manage form moderation across a whole portfolio from one place — instead of babysitting a different plugin on every site.
  13. Platform Guides 5 min read

    Protecting Custom HTML and JavaScript Forms: A Drop-in Moderation Pattern

    No CMS, no plugin ecosystem, no server-side framework to lean on — just a form and a submit handler. Here's a clean pattern for adding content moderation to hand-built HTML and JavaScript forms, including static and JAMstack sites.
  14. Platform Guides 5 min read

    Stopping Drupal Webform Spam: Beyond Honeypot and CAPTCHA

    Drupal's Webform module is powerful, but its spam defences stop at honeypot and CAPTCHA — both of which miss the content itself. Here's how to add real-time content moderation with a custom Webform handler.
  15. Platform Guides 5 min read

    Gravity Forms Spam Protection: A Developer's Guide to Content-Level Filtering

    Gravity Forms powers serious lead-gen on a million-plus sites — which makes its spam a direct hit to pipeline quality, not just inbox clutter. Here's how to filter Gravity Forms submissions on content, before the junk reaches your CRM.
  16. Platform Guides 6 min read

    How to Stop Contact Form 7 Spam Without a CAPTCHA

    Contact Form 7 runs on over 5 million sites and ships with almost no spam protection out of the box. Here's how to stop CF7 spam at the content level — no CAPTCHA, no honeypot arms race, no lost conversions.
  17. Industry News 6 min read

    Google's Perspective API Is Shutting Down: A Migration Guide for Forms and Comments

    Google is retiring the Perspective API on 31 December 2026, and there's no official migration path. If you rely on it to score toxicity on forms or comments, here's what's happening, what your options are, and how to move without downtime.
  18. Threat Landscape 7 min read

    By the Numbers: The Global Scale of Form Spam in 2026

    590 million WordPress sites. 11 million+ form-plugin installs. Bots make up 51% of web traffic. Here's the data-driven picture of how form spam scales from nuisance to global economic drain.
  19. Business Impact 6 min read

    The 254-Day Bleed: What Really Happens After a Phishing Attack Gets Through

    A phishing-initiated breach takes an average of 254 days to detect and contain, costs $4.8 million, and consumes tens of thousands of hours of employee productivity. Here's the full timeline of damage — from the first click to the final invoice.
  20. Business Impact 7 min read

    The Form Spam Ripple Effect: How One Bad Submission Cascades Through Your Entire Business

    A single spam submission takes 30 seconds to delete. But it also enters your CRM, triggers email automation, distorts analytics, wastes sales time, and degrades your AI models. Here's how the ripple spreads.
  21. Threat Landscape 6 min read

    Beyond the Inbox: How Phishing Is Migrating to Your Web Forms

    Your email security is better than ever. So attackers are taking a less defended path — through your web forms. Here's how form-based phishing bypasses email defences, and what content-level protection looks like.
  22. Business Impact 7 min read

    Garbage In, AI Out: How Form Spam Is Poisoning Your AI-Driven Marketing

    70% of companies use AI in their CRM, but a large share of AI projects fail — and poor data quality is a leading cause. If form spam is polluting your pipeline, your AI is learning from lies.
  23. Threat Landscape 6 min read

    The Phishing Economy: How a $25 Kit Costs Your Business Millions

    Phishing kits sell for as little as $25. AI-generated spear-phishing now matches expert humans for click-through. BEC losses hit $2.77 billion in 2024. Here's how the phishing industry works — and why your web forms are its newest target.
  24. Business Impact 6 min read

    The SMB Spam Tax: Why Small Businesses Pay the Highest Price Per Employee

    Small businesses face the same spam and phishing threats as enterprises with a fraction of the budget — and end up paying more per employee to defend against them. Here's why form protection has the highest ROI for SMBs.
  25. Business Impact 7 min read

    Toxic Data, Broken Trust: The Compliance and Brand Risk of Unmoderated Web Forms

    Unmoderated web forms create regulatory exposure, damage email deliverability, and put your team in the firing line. Here's why form content moderation is a compliance and brand imperative, not just a spam filter.
  26. Business Impact 6 min read

    Phantom Leads and Poisoned Pipelines: The True Marketing Cost of Form Spam

    Your dashboard says cost per lead is down. But a large share of form emails bounce, ad fraud runs into the tens of billions, and your CRM is filling with contacts that will never buy. Here's what form spam is really costing your marketing team.
  27. Threat Landscape 8 min read

    Your Forms Are Under Siege: How Web Forms Became the Internet's Favourite Attack Surface

    Web forms are among the internet's most targeted attack surfaces — from SQL injection and XSS to credential stuffing and phishing. Here's the scale of what hits your forms every day, and why traditional defences miss it.
  28. Comparisons 6 min read

    Why CAPTCHAs Are Failing You (And What Smart Businesses Are Doing Instead)

    Bots now solve image CAPTCHAs with 85%+ accuracy while real users walk away — 19% have abandoned a site entirely over one. Here's why the CAPTCHA era is ending, and what content-aware protection looks like.
  29. Business Impact 7 min read

    The $20 Billion Invisible Tax: How Form Spam Is Quietly Draining Your Business

    Every business with a website has forms — and in 2024, bots finally outnumbered humans online. Here's how form spam quietly drains productivity, pollutes CRM data, and costs businesses a fortune every year.

Nothing filed under that section yet.