Features
Everything SpamShield does for your forms
SpamShield protects contact, newsletter and blog comment forms on Shopify and other websites. Visitors never see a CAPTCHA. You can see why every message was blocked.
Detection
Honeypot field
A hidden field that people never see. Bots that fill in every field give themselves away.
Timing and behavior signals
Forms filled in faster than a person could type are flagged. SpamShield looks at counts of keystrokes, mouse moves and scrolls, never at what you type.
JavaScript and proof-of-work checks
A light check in the browser that simple bots fail. It sets no cookies.
Sender reputation
The email address and IP are checked against disposable-email lists, known spam sources and your own lists.
Content checks
The message is scored for spam patterns, link stuffing, gibberish and your custom keywords.
Expected countries
Optionally flag messages from countries you don't expect to hear from.
Optional AI check
On Starter and above, borderline messages can be checked by AI using your own Anthropic or OpenAI key. Your provider bills you.
Global spam network
On Pro and above, spam blocked on other protected sites helps catch it on yours. Only one-way hashes of the sender email and IP are shared.
Review and control
A reason for every decision
Each blocked or quarantined message shows its score and the signals that fired.
Quarantine
Borderline messages are held for review. Release one in a click or allowlist the sender.
Sensitivity, keywords and lists
Choose low, medium or high sensitivity. Add custom keywords, allowed and blocked domains, and allowed emails.
Test Mode
Score a sample message to see what would happen, without saving anything.
Audit log
Settings changes and message actions are logged.
Weekly digest
An email summary of what was blocked.
Integrations
Shopify app embed
Turn on the SpamShield app embed in your theme editor. No theme code to edit.
One script tag for other sites
Paste one script tag into your pages to protect the forms on WordPress, Wix, Squarespace or plain HTML sites.
Webhooks
From Starter up. Templates for Slack, Discord and Microsoft Teams.
REST API and CSV export
From Pro up. Score submissions from your own code and export messages for review.
Privacy
Retention by plan
Messages are kept for 7, 30, 90 or 365 days depending on your plan, then deleted or anonymized.
GDPR requests
Customer data requests and deletions from Shopify are handled automatically.
Your AI key is encrypted
If you connect an AI key, SpamShield stores it encrypted and uses it only for your checks.
Fails open
If a check can't complete because of an error or timeout, the form still submits.
Not on Shopify? Start free on any website.