WS Form offers a variety of measures to prevent form spam for WordPress forms.
WS Form Features
- Deduplicating Form Submissions
- Custom Server-Side Validation
- Form Validation
- HoneyPot
- How to Block Form Submissions by Keyword
- How to Block Form Submissions by IP
- How to Block Form Submissions by Domain Name
- How to Block Form Submissions by User Agent
- NONCE
- IP Throttling
WS Form Spam Protection Fields
- CaptureFox (EU-based, privacy-first)
- Cloudflare Turnstile (frictionless, no CAPTCHA challenges)
- hCaptcha (privacy-focused, low data collection)
- reCAPTCHA (widely adopted, strong bot detection)
Integrations
Built-In
These spam protection methods are built-in to all WS Form editions.
Third Party
These third party services have integrations with WS Form.
Spam Scoring
Akismet, reCAPTCHA (Version 3) and hCaptcha spam checking offer various levels of spam detection. The spam score is stored against your submissions and is represented as a colored circle. If you hover your mouse cursor over the colored circle, you can see the percentage score WS Form has given a submission in terms of spam scoring. The scoring ranges from 0% (not spam, shown in green) to 100% (blatant spam, shown in red).
Any submissions deemed as spam are moved to your Spam folder on the submissions page.
