Everything SpamShield does for your forms

A complete look at every feature — from invisible bot detection to whitelist controls to per-form thresholds. No CAPTCHAs, no friction for real users.

Detection

• Pattern-based spam classifierUses content patterns and abuse signals to catch generic AI nonsense, link injection, scraper-driven floods, and the boilerplate "I'd like to discuss SEO services for your website" loops.
• Submission-timing analysisBots that fill a form in impossibly short time are flagged instantly; humans who take a few seconds aren't. Additional behavioural signals are monitored to strengthen detection over time.
• Honeypot fieldInvisible to real users. Bots that auto-fill every field trip the trap immediately.
• Geo and IP reputationOptional geo-blocking. IP reputation scoring against known spam-source databases.

Integration

• One-line script tagAdd a single <script> to your page. Works with Shopify, WordPress, plain HTML, React, Vue, and any SaaS form builder.
• Native form supportHooks any <form> on the page automatically. No JavaScript required from you.
• Webhook on blockGet notified when high-confidence spam is blocked. Useful for tuning thresholds.
• API for custom formsSubmit form data via REST. Get a "spam-score" back. Block, flag, or accept based on your threshold.

Dashboard

• Real-time block logSee exactly what was blocked, when, and why. Click any entry to see the full submission and the rules that fired.
• Whitelist false positivesIf a real customer got caught, one click adds them to your whitelist.
• Per-form thresholdsDifferent sensitivity for your contact form vs. your newsletter signup. Adjust without redeploying.
• Weekly digestEmail summary of what was blocked, top spam patterns, and any submissions worth your attention.

Privacy

• GDPR-awareForm-submission data stays on your site. SpamShield only sees the metadata it needs (timing signals, IP, content hash) — never your customers' message bodies unless you explicitly opt in to AI classification.
• Privacy-conscious by designSpamShield stores only the metadata it needs and encrypts any AI key you provide. GDPR data-subject requests are handled automatically.
• Data retention controlsBlocked-submission logs auto-delete on a schedule set by your plan — 7, 30, 90, or 365 days.

Home How it works Pricing Integrations Sign up